Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
File: Rji3uq3cnWWuMsgX_meX7zeZaaM.mft (raw, json)
Hash identifier: xiRJrBrPt0DRITGA7BtLARwQ0hJ7pflrZmjxBHaYl0A=
Subject key identifier: EE:60:DA:8E:3E:59:1F:22:DB:7F:26:4F:55:C0:D3:E3:08:7D:B9:17
Authority key identifier: 46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
Certificate issuer: /CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Certificate serial: 01962C058ECBB832658DBDB8E4CC526F327C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
Manifest number: 13BB
Signing time: Sat 12 Apr 2025 22:01:23 +0000
Manifest this update: Sat 12 Apr 2025 22:01:23 +0000
Manifest next update: Sun 13 Apr 2025 22:01:23 +0000
Files and hashes: 1: Rji3uq3cnWWuMsgX_meX7zeZaaM.crl (hash: ipxfy2RWzcQSnELfmdEgnjqNwHjQ941MvUXJXr/v2XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:05:8e:cb:b8:32:65:8d:bd:b8:e4:cc:52:6f:32:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Validity
Not Before: Apr 12 22:01:23 2025 GMT
Not After : Apr 13 22:01:23 2025 GMT
Subject: CN=ee60da8e3e591f22db7f264f55c0d3e3087db917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:12:f7:75:d7:e0:d8:72:84:0b:d7:cc:8e:
4e:30:06:d6:bc:9f:a3:8f:b7:95:ba:9d:f5:3b:f6:
bc:c9:45:94:71:7e:0d:58:e3:cc:3a:91:00:9a:ee:
34:24:ff:36:f1:99:f5:dd:90:c3:dc:28:b7:14:5d:
6e:91:f2:6a:74:fd:b6:b1:c9:7d:34:10:5e:d0:53:
26:3b:3a:c6:77:fa:8a:22:0b:3f:6b:01:f2:32:af:
bb:45:e8:91:c9:c5:97:89:37:a8:87:68:9f:fe:54:
b1:7a:7a:2f:9a:82:35:9b:d1:5a:5f:ea:58:b5:c5:
61:c1:53:39:8f:b0:5a:66:c9:6a:37:a4:ad:94:eb:
83:1d:59:9c:2f:b0:e4:5b:6a:5f:1d:68:c9:3e:c5:
dc:df:71:65:a6:f2:7b:a1:45:df:48:1d:52:c0:e3:
d5:0e:e1:b9:68:4b:96:98:69:67:4c:ec:fb:ea:18:
3a:09:3a:ce:09:2a:28:25:9d:0a:b8:f6:be:ad:0f:
48:48:b0:09:32:90:41:94:5b:ec:b8:ff:98:ae:5e:
13:03:26:ed:8a:78:a4:04:be:d4:31:4f:fa:dc:cb:
7d:d2:e7:90:bf:e2:34:d3:e3:9d:43:87:32:55:e6:
fa:3d:6f:19:45:0c:a6:80:11:6c:24:78:ba:c1:bc:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:60:DA:8E:3E:59:1F:22:DB:7F:26:4F:55:C0:D3:E3:08:7D:B9:17
X509v3 Authority Key Identifier:
keyid:46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:13:97:07:ba:02:c3:2c:6e:3d:c1:7b:bd:1f:fc:2a:cf:32:
4f:dc:38:bc:90:00:ba:73:ce:ab:5c:37:8a:46:55:35:0a:5f:
cb:22:e7:70:46:e6:7a:4c:fd:7e:8d:71:d1:50:04:2c:c7:9b:
37:e9:63:b3:97:b4:8e:3f:c9:62:d4:06:f2:73:ad:4b:19:47:
dc:82:ee:ce:bb:c9:74:59:a4:70:e1:6b:ed:a6:17:e7:0a:89:
76:ea:63:e5:30:53:7f:f6:27:7d:78:11:7c:d8:5d:94:80:fe:
79:da:1f:34:da:26:69:5c:e3:9d:f3:82:5a:5c:57:75:23:05:
e7:0a:17:82:00:5b:58:d7:42:1a:da:7c:be:0f:5a:85:61:a8:
77:dc:4c:76:f9:14:b3:4d:d4:76:fb:eb:7a:1d:14:71:27:df:
16:7a:8f:2e:36:26:d5:6a:05:29:6e:6e:9a:c9:f2:5f:38:93:
67:e4:8d:07:1e:f6:0f:87:52:a0:4a:59:9e:b4:0d:31:0f:4b:
93:80:43:e6:e3:4a:14:de:76:2a:10:65:29:52:b2:b6:ef:a5:
d4:3b:f2:ea:1f:1a:ce:ba:d9:92:fb:d5:7d:31:93:9c:ad:c4:
57:29:50:18:8a:04:9e:93:eb:e7:05:a2:a4:c4:86:00:7d:89:
3f:a2:c8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:53:26 2025 by rpki-client