Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier: PP+LhxnKeS4bgRinTwEQVGqj93gtPh6InrMSaPsn18I=
Subject key identifier: BD:22:4E:70:4D:37:BD:95:71:7D:14:41:62:79:AB:56:B0:40:1D:D2
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial: 01962C73A3014468712DB2EDAF0EE6577F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number: 034B
Signing time: Sun 13 Apr 2025 00:01:37 +0000
Manifest this update: Sun 13 Apr 2025 00:01:37 +0000
Manifest next update: Mon 14 Apr 2025 00:01:37 +0000
Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: 6Csu3FrhX335LO1gnruBqiA5mK0Dyvku9uwWLcFDssg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:73:a3:01:44:68:71:2d:b2:ed:af:0e:e6:57:7f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Validity
Not Before: Apr 13 00:01:37 2025 GMT
Not After : Apr 14 00:01:37 2025 GMT
Subject: CN=bd224e704d37bd95717d14416279ab56b0401dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:7c:95:c8:52:0b:a8:6f:cd:57:54:46:a4:
18:f5:00:51:17:28:2d:18:7c:e7:61:fe:af:dc:4d:
1a:f6:a8:fa:00:d7:03:b7:9c:c2:fc:8e:ff:96:69:
9a:2a:9a:39:c2:ee:ae:f0:53:70:6f:62:be:f4:ac:
0f:ab:72:97:b8:0e:dd:f7:42:00:71:72:12:7a:d6:
7f:d4:32:23:96:8a:9f:be:6d:42:c3:f6:a9:3e:54:
1b:98:68:28:52:7b:87:4b:7c:a0:eb:c4:04:80:e0:
ba:ea:c4:50:12:bc:e2:c2:02:07:2c:8b:7c:1a:b1:
40:d2:c1:58:8f:b8:3b:08:f7:a1:ce:f3:d0:44:eb:
52:42:fe:17:8c:b4:b7:5b:ef:a5:85:ea:bb:91:31:
42:a1:18:d3:63:77:40:ef:a4:52:52:d5:ad:54:18:
c0:0b:ac:74:2b:6f:f9:db:63:a8:67:70:22:2e:27:
29:54:74:36:05:11:00:62:a5:4b:8c:23:b9:4f:40:
2e:c5:fc:7a:8d:1f:0f:2d:a9:40:3b:ac:48:75:72:
91:97:96:d0:48:6a:ca:73:82:6c:b6:1c:04:1e:ea:
e9:23:e3:2f:6f:65:85:43:03:69:dd:fb:67:1b:e5:
0b:91:3a:cd:5d:05:90:f0:9c:2b:81:71:b7:83:9b:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:22:4E:70:4D:37:BD:95:71:7D:14:41:62:79:AB:56:B0:40:1D:D2
X509v3 Authority Key Identifier:
keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8b:20:b6:c5:45:15:ea:be:2b:b6:fc:e8:b2:de:2d:f7:b3:
38:04:c1:af:8d:35:25:cb:1a:3c:cd:3c:2d:be:84:af:88:a1:
ec:9b:6e:b9:84:d3:e8:04:13:4e:35:12:e3:46:08:91:7b:99:
5d:40:e5:43:07:c7:79:1c:e9:3c:fc:24:06:5b:1a:89:e6:97:
a2:e0:77:09:f4:0c:f8:cc:13:df:5b:1b:58:1c:6a:9e:18:b6:
82:f1:ac:11:e7:08:aa:db:57:1c:57:d0:49:10:70:be:68:e5:
82:0f:66:6b:f2:47:b6:dc:c4:44:ed:97:0b:fd:69:37:b1:03:
b8:d2:9d:1b:a7:80:57:61:f6:f3:63:a1:98:f7:12:da:17:a9:
de:d9:23:e6:be:f3:88:2b:c0:bc:bf:6b:58:56:88:e8:e2:4e:
5c:d6:7b:54:08:71:67:f8:89:38:ad:c3:40:9a:73:1e:2d:98:
f9:4d:5a:32:37:13:6f:21:c6:63:a0:e8:c8:fe:27:5c:eb:77:
11:30:25:59:1f:6f:8e:cf:7a:3f:c4:d5:a3:7d:a2:b4:c8:e6:
78:12:0d:39:c4:95:ae:cf:7c:be:e7:91:6d:81:e7:56:89:ec:
cb:00:00:2b:03:f5:d0:7b:6f:5c:78:c3:ae:b4:16:54:c2:8f:
cc:52:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:20:05 2025 by rpki-client