Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
File: 7uWTl_XWr-28jZFmr_67KAAJH5Q.mft (raw, json)
Hash identifier: 7ekbymJ2BQnf5XAeGHMVxl86Q7JFVmHxZ7UBLqlvpSk=
Subject key identifier: E4:8C:3F:09:95:4A:9E:42:24:98:D9:E1:20:8C:E3:B6:53:10:0A:A3
Authority key identifier: EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
Certificate issuer: /CN=eee59397f5d6afedbc8d9166affebb2800091f94
Certificate serial: 01964D7DC5A89628E16B9CCB576E03043CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
Manifest number: 0F28
Signing time: Sat 19 Apr 2025 10:00:10 +0000
Manifest this update: Sat 19 Apr 2025 10:00:10 +0000
Manifest next update: Sun 20 Apr 2025 10:00:10 +0000
Files and hashes: 1: 7uWTl_XWr-28jZFmr_67KAAJH5Q.crl (hash: VwYCvbT8sg4C3+YQQqlS0xfjY+79iYUAxuM09SVEwSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:c5:a8:96:28:e1:6b:9c:cb:57:6e:03:04:3c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee59397f5d6afedbc8d9166affebb2800091f94
Validity
Not Before: Apr 19 10:00:10 2025 GMT
Not After : Apr 20 10:00:10 2025 GMT
Subject: CN=e48c3f09954a9e422498d9e1208ce3b653100aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:e2:d4:ef:13:fc:8d:d8:ec:0a:09:8e:ba:
57:7c:3d:04:be:0e:03:71:f3:7e:83:2b:05:e8:94:
2f:94:17:5c:50:5e:68:58:9d:27:ca:19:92:78:a9:
b6:ee:e0:98:44:32:e8:7d:16:5b:c6:e3:7d:04:f1:
1a:3f:bf:88:40:a2:21:d2:2e:8d:bd:5d:24:ed:3f:
94:18:d7:8f:72:0f:f8:bb:74:96:47:45:d5:da:93:
a8:93:91:13:c3:04:ea:08:a6:f4:c1:92:0b:cc:2d:
a3:19:20:a3:76:98:5d:e6:6b:27:e2:53:7b:dd:30:
ff:0c:2d:b6:05:f1:02:89:5b:10:f3:ac:3b:21:fd:
73:47:e2:f8:b4:d6:02:54:82:54:21:dc:58:d1:28:
d5:09:b9:01:87:d2:1d:7a:af:a7:32:7f:63:18:a2:
e0:ee:7e:aa:51:4b:10:35:d9:0f:4e:48:fb:66:5e:
8c:82:65:2b:5b:13:c0:7c:2d:31:ef:e9:30:1b:a5:
9c:55:bc:ac:00:3a:1e:11:55:1b:41:df:9d:6f:29:
1e:04:8c:d0:00:ea:3a:0d:97:9d:0a:96:36:19:0d:
40:27:82:00:cb:67:75:35:49:a1:fa:15:70:c5:ed:
c4:21:88:5b:22:c4:71:9d:0e:aa:28:1d:a4:55:b0:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8C:3F:09:95:4A:9E:42:24:98:D9:E1:20:8C:E3:B6:53:10:0A:A3
X509v3 Authority Key Identifier:
keyid:EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b2:3a:2d:26:b5:9a:19:68:88:24:2c:79:3e:3b:05:f1:b9:
e9:bb:c9:ec:2f:fb:a8:c0:cc:93:96:6b:15:76:e6:e7:ce:a8:
19:5b:f2:20:5c:67:99:a1:be:e1:5b:48:74:5c:87:71:a2:cd:
cd:f1:14:f9:c7:37:83:0a:35:b1:48:4b:1a:99:44:42:7f:ef:
34:85:76:22:14:5c:80:68:e5:2c:cf:98:23:a4:84:58:82:5d:
87:30:77:31:5f:ca:8f:24:dc:14:88:ec:0b:8a:65:db:c7:b1:
29:fd:9e:6c:49:48:f2:a2:02:5d:90:9a:56:14:bb:78:35:c7:
70:7f:9c:77:8c:41:0f:7e:e7:ca:87:0d:f2:06:45:2e:52:ff:
1d:2a:3c:f5:ef:20:d8:a7:54:67:23:aa:68:6f:93:f0:3d:5a:
f9:e1:66:0a:b4:a3:76:65:1f:89:82:fb:c4:3a:c5:83:9f:59:
2c:fe:8e:52:d6:54:13:db:b8:d7:aa:65:8d:f4:38:50:4e:1a:
37:90:cb:41:a0:53:be:a3:c9:da:20:ec:b6:53:01:81:dd:bd:
ac:d0:9b:b3:9e:ca:d8:6f:0a:aa:9e:1d:bb:34:95:74:92:33:
1c:07:d4:87:e6:20:7a:c1:a1:ac:b7:73:6a:b8:c4:26:95:60:
bc:35:c7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:23:15 2025 by rpki-client