Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
File: c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json)
Hash identifier: ZzvE+yUZtHxVdCCrkW+wflaeoGOM+9GUfv3qbIiZMQU=
Subject key identifier: DD:2E:37:52:1D:E4:0B:63:97:20:9F:A9:D1:32:3E:53:AA:D0:D2:E6
Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
Certificate issuer: /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Certificate serial: 01963087A96109051E25DF5EF5DF827EEFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
Manifest number: 0EB2
Signing time: Sun 13 Apr 2025 19:01:59 +0000
Manifest this update: Sun 13 Apr 2025 19:01:59 +0000
Manifest next update: Mon 14 Apr 2025 19:01:59 +0000
Files and hashes: 1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: SxVHMmp17pRJzILgMXipA7CWMYjbUD6mq5JrQcXm1DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:87:a9:61:09:05:1e:25:df:5e:f5:df:82:7e:ef:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Validity
Not Before: Apr 13 19:01:59 2025 GMT
Not After : Apr 14 19:01:59 2025 GMT
Subject: CN=dd2e37521de40b6397209fa9d1323e53aad0d2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:fe:6b:97:92:73:63:ec:1e:a4:71:e1:44:
74:22:c7:9a:b5:cc:26:8f:82:e4:16:13:08:54:55:
92:63:f2:f1:8e:d0:7d:eb:62:cf:de:53:f1:44:68:
e3:57:2d:b6:f1:10:8c:10:80:07:2c:0e:1f:29:01:
bb:67:00:65:90:3d:48:75:53:18:a2:24:29:36:51:
e0:b7:9f:fb:3b:27:e0:0f:4a:70:f9:4d:67:12:5d:
85:d1:44:e0:b2:0a:73:b3:77:aa:d5:83:b1:6d:c7:
3e:08:bc:64:ba:aa:b3:c3:66:e3:53:35:e2:59:6c:
fa:bc:49:5d:05:ef:f3:c3:a5:2c:a6:d3:0d:de:3d:
8a:91:ff:c4:ec:cc:20:4c:00:6c:d6:af:48:74:71:
98:d9:21:57:4b:a6:36:92:d3:5e:3f:dc:7c:cd:dc:
c0:20:61:0a:fd:93:13:af:ea:d1:f9:0e:9f:f9:9a:
96:36:bb:66:73:2b:bd:f1:34:b5:8c:b1:c1:3b:1b:
e3:f0:31:4f:ed:5c:94:5e:43:48:76:f0:af:bd:e5:
85:40:d5:01:30:e6:2c:75:11:17:9c:8c:18:63:63:
e2:28:b9:8d:41:eb:11:1a:fd:3a:d1:dc:3f:f0:55:
2d:bb:d4:a6:b8:17:03:69:20:67:28:04:b1:c1:12:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2E:37:52:1D:E4:0B:63:97:20:9F:A9:D1:32:3E:53:AA:D0:D2:E6
X509v3 Authority Key Identifier:
keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:08:60:59:9e:d5:d4:0f:34:23:90:e6:ac:19:96:fc:ec:30:
45:88:cc:a2:6b:fa:7a:47:06:48:8d:b8:62:0c:e1:9f:cc:5a:
a8:0a:a5:d1:d1:14:b8:22:f9:f5:8d:a4:ed:58:c5:c3:6b:e1:
c7:23:d5:42:fa:8b:d6:e4:5c:d7:06:bf:a8:99:23:bf:4a:ff:
3a:d0:97:5e:8a:e9:89:c6:aa:36:e3:e4:96:fb:2c:d6:3f:0d:
8b:47:e0:5d:35:e6:ec:80:23:db:07:23:8a:0f:7b:47:b7:72:
3d:f1:45:61:0b:a0:ff:fe:f5:eb:87:51:a0:15:a5:17:e7:2f:
bf:19:b4:84:03:88:72:6e:54:04:4e:0b:be:34:45:75:47:f5:
34:5a:6d:f3:e2:1d:44:a9:41:66:de:d9:93:21:07:2c:bc:eb:
e0:28:13:0a:82:0d:a1:aa:57:af:ec:68:5d:51:2b:53:f4:73:
10:1b:d3:4d:c8:53:3c:65:52:8b:75:1c:ab:31:54:6f:50:cb:
bd:b5:fe:b1:e4:4b:c4:08:53:1b:6c:a4:11:b7:fd:38:81:d8:
d3:29:bc:f2:ed:56:68:13:a7:e4:47:87:3a:64:88:aa:a4:73:
a8:7b:e5:4b:ac:53:25:a9:05:cd:03:d2:72:95:d3:fe:e9:12:
96:bc:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:41:40 2025 by rpki-client