Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
File: RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json)
Hash identifier: xvoEZSdiqIWWurLcRw8kj4llpamtW+cNu8oFezVkq6E=
Subject key identifier: EC:B1:1F:49:20:CE:2E:25:44:BD:48:09:86:2E:0D:A6:B4:D3:05:C4
Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
Certificate issuer: /CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Certificate serial: 01958BF2676309A7564090C61FA975180D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
Manifest number: 036D
Signing time: Wed 12 Mar 2025 20:01:13 +0000
Manifest this update: Wed 12 Mar 2025 20:01:13 +0000
Manifest next update: Thu 13 Mar 2025 20:01:13 +0000
Files and hashes: 1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: uPfk9gdwprCrD1bcJZ5hOtoPUJlyDQrqaXzymkiXyVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:67:63:09:a7:56:40:90:c6:1f:a9:75:18:0d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Validity
Not Before: Mar 12 20:01:13 2025 GMT
Not After : Mar 13 20:01:13 2025 GMT
Subject: CN=ecb11f4920ce2e2544bd4809862e0da6b4d305c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:81:16:ac:92:a0:af:5d:ba:12:c6:78:38:3e:
e4:2e:b1:42:07:0f:67:44:2b:c9:4a:6c:69:b0:6b:
a3:62:ff:66:44:be:6a:62:9e:e8:1a:f8:a8:6b:d0:
42:1f:3e:6d:29:b9:09:9c:12:d8:1a:02:02:5e:61:
6c:24:71:90:ea:3c:bb:bc:3e:04:57:7f:6e:0d:dd:
5c:ef:ac:e5:4c:92:11:70:b1:ea:39:96:49:ae:db:
2f:45:5f:4e:5b:a0:bb:fc:1c:b4:b4:6f:2a:38:81:
97:a7:67:33:f2:c2:ee:30:fc:1c:f8:c8:5f:f2:ec:
eb:5b:76:17:56:86:79:d9:af:6e:8e:1d:33:3d:d0:
28:30:d2:03:dc:76:97:86:af:4c:0f:72:86:94:a2:
c3:3d:b5:e9:43:ce:f1:33:79:9a:98:76:7d:91:b8:
5d:c8:07:e8:c5:fd:5f:ec:ef:7e:04:a4:ab:0e:23:
f8:d6:02:6f:7b:b8:f0:aa:3a:08:d0:09:50:bb:5d:
3d:bb:2f:56:48:14:4b:11:74:e7:17:a8:5d:da:01:
9b:7a:f5:f4:76:0c:ee:d1:df:fc:47:ed:bd:5f:75:
77:d9:d1:59:6a:b2:10:c6:fe:73:81:da:ef:f9:b0:
8a:32:cf:76:77:d8:5f:aa:6f:50:37:94:ce:71:e1:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B1:1F:49:20:CE:2E:25:44:BD:48:09:86:2E:0D:A6:B4:D3:05:C4
X509v3 Authority Key Identifier:
keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e1:54:85:ca:9c:e7:26:d2:5f:f1:40:e7:7b:08:ad:e5:72:
de:a2:6d:8c:86:8c:af:b3:16:76:cc:34:04:5d:b0:76:bb:dd:
86:9c:c7:50:99:f9:0e:2b:01:0f:38:6d:1f:87:23:15:58:21:
c6:e1:43:7c:30:33:bf:8a:48:a3:41:3c:23:75:5e:56:aa:9c:
7c:b5:5c:31:82:87:bf:0a:af:5c:3f:f2:70:c4:c4:72:33:ea:
0a:04:17:a3:ee:eb:dc:45:99:68:ec:67:bd:b1:0e:a0:b2:ba:
a5:d5:77:6f:27:36:9d:a0:30:65:d8:b8:c1:c3:7d:03:06:80:
d0:2c:6a:b9:77:8d:a9:a4:69:92:a7:9f:58:34:6d:05:b2:59:
7a:62:a0:0d:cc:e4:48:c0:c7:ba:ea:3e:5f:5b:09:26:f0:9b:
f4:5c:71:75:ee:36:0d:51:ad:d1:48:49:e7:c9:a4:5f:b5:de:
26:de:d6:3a:21:df:a8:da:d8:64:59:6e:0d:80:26:3c:c5:f4:
ba:9a:2d:96:50:99:f4:f0:14:82:e3:0c:68:a0:62:72:74:4a:
e1:3b:6e:10:2a:16:ca:be:37:ec:47:33:63:3b:63:27:88:fc:
07:0a:40:1f:3e:dc:b9:1d:19:f7:a5:b8:7e:41:15:52:20:8e:
10:05:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:13 2025 by rpki-client