Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
File: eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft (raw, json)
Hash identifier: MJh9+skEVErfKewbjt+F7pxHRiSp/78BvZ/DJ1RJNUw=
Subject key identifier: 38:91:E0:0F:8B:21:45:A8:D9:14:EE:4F:7D:F2:CA:33:39:87:CF:FD
Authority key identifier: 7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A
Certificate issuer: /CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
Certificate serial: 019645203D4CB3702DE185764BF6DE4DA8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
Manifest number: 0529
Signing time: Thu 17 Apr 2025 19:01:02 +0000
Manifest this update: Thu 17 Apr 2025 19:01:02 +0000
Manifest next update: Fri 18 Apr 2025 19:01:02 +0000
Files and hashes: 1: eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl (hash: qgaMntepikhYJqAnufb12uOYNfmzPEd7X/tGQlZIB1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:20:3d:4c:b3:70:2d:e1:85:76:4b:f6:de:4d:a8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
Validity
Not Before: Apr 17 19:01:02 2025 GMT
Not After : Apr 18 19:01:02 2025 GMT
Subject: CN=3891e00f8b2145a8d914ee4f7df2ca333987cffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:41:09:d0:33:5a:d1:47:3c:dc:ea:97:be:
cd:d3:87:4d:3c:22:a3:8b:df:13:34:9a:6f:0b:16:
f0:65:0d:c7:3e:ae:5e:bf:68:b0:dc:5d:88:59:33:
98:a4:64:fc:1a:c3:d1:bf:83:62:9d:b5:d0:65:26:
84:83:70:43:ef:51:33:11:63:d8:e4:fe:4b:52:bb:
dd:2a:01:5e:58:60:c5:00:0d:f7:7d:b7:ae:91:9b:
ac:4e:2f:6c:92:b5:97:bc:dc:53:00:cb:71:0f:8f:
cc:5b:28:1a:2e:fd:49:b2:7e:67:b6:6c:3c:05:70:
e5:8a:cd:84:12:58:ee:33:54:a5:1c:59:88:6c:19:
15:75:6c:24:45:b1:7f:bb:72:a0:a1:6b:90:8c:7c:
47:03:be:6f:18:de:47:e1:dd:8b:51:6d:77:85:9e:
e2:61:e7:71:3a:2a:9c:1e:d6:fa:a9:31:55:5e:b4:
cc:bc:5e:06:25:50:86:35:a5:fd:51:43:d1:cc:78:
ed:13:15:89:b4:e2:73:8a:b6:fd:68:8e:85:87:11:
91:1a:65:89:b3:e8:cb:2c:ad:f6:9d:cc:68:20:c5:
52:76:76:d2:87:91:fb:c8:a8:d2:9a:10:78:10:08:
8e:60:a2:29:4a:14:77:ab:dd:3e:91:e2:fa:e5:ea:
fa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:91:E0:0F:8B:21:45:A8:D9:14:EE:4F:7D:F2:CA:33:39:87:CF:FD
X509v3 Authority Key Identifier:
keyid:7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:56:24:23:9e:53:5c:c8:1f:d3:fe:c0:13:5d:49:cd:e1:fb:
be:c0:8e:e2:dc:4d:6a:d0:96:81:3a:c8:fb:74:0b:b3:0d:4e:
2e:15:23:46:b1:8d:b9:46:ec:6e:94:e8:1e:63:11:bb:ec:8a:
2f:8d:e1:1c:f1:2f:2b:db:52:f2:ae:6a:5a:41:21:42:cc:72:
dc:7a:c6:26:5f:2d:75:07:a5:51:1b:54:e2:0c:2b:65:6a:8a:
cd:48:4b:2e:77:9b:f6:cf:ce:6f:f6:e9:93:94:e8:3b:15:bf:
2c:58:ae:9c:d4:3d:50:90:03:14:bc:06:e7:c5:db:11:33:d5:
50:88:d8:1b:dc:e5:6f:49:62:e1:f4:68:af:30:cd:3a:37:08:
1a:46:b2:23:67:f4:5f:21:4c:b4:3a:3e:a6:f0:16:58:9e:ca:
1b:02:d9:27:5c:96:a5:89:da:5e:f6:69:da:e0:c1:a5:33:e7:
80:f0:13:bd:74:35:3a:e7:9f:2b:20:56:61:ae:c8:d6:d7:1f:
98:81:d6:f6:ae:da:72:f3:2e:91:a6:52:fc:ff:f6:dd:4b:5d:
da:d7:fa:aa:5a:2c:e6:02:80:44:4c:fa:c3:5d:de:5c:f2:f1:
14:05:9a:9f:cf:3a:74:39:b3:c3:b6:a3:89:98:0b:77:22:90:
f3:05:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:38:01 2025 by rpki-client