Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier: Rn7kA9PSzZr96jpPQdhm20WaYIN2cLXBq8lM6/SQo9w=
Subject key identifier: D5:CF:62:D4:31:1D:9C:A0:EF:D0:81:DB:C4:4A:CE:2F:64:B1:B8:A5
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial: 01964E22F273AECCF6A8FAC13BAFEDF00364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number: 0879
Signing time: Sat 19 Apr 2025 13:00:34 +0000
Manifest this update: Sat 19 Apr 2025 13:00:34 +0000
Manifest next update: Sun 20 Apr 2025 13:00:34 +0000
Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: mjKn9IxSBvnaWJj+knCfgiFKHnoev06zO8WJLi4EYYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:22:f2:73:ae:cc:f6:a8:fa:c1:3b:af:ed:f0:03:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Validity
Not Before: Apr 19 13:00:34 2025 GMT
Not After : Apr 20 13:00:34 2025 GMT
Subject: CN=d5cf62d4311d9ca0efd081dbc44ace2f64b1b8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:7c:23:84:e0:a4:f1:91:4b:e8:83:8e:f0:
df:de:8c:62:8d:16:bc:49:5e:b3:4b:d6:01:0d:d3:
78:0f:2f:10:9d:ec:c4:40:ea:c0:84:68:9a:55:59:
e0:84:fc:03:10:60:bf:7e:a5:88:26:76:ce:15:6d:
eb:ad:33:99:96:06:55:f0:93:6d:9c:de:80:b7:6e:
e4:cf:73:9a:83:79:34:ea:04:15:24:6c:ab:0b:6e:
f6:fa:72:6f:54:81:63:c6:28:37:a0:00:d3:85:90:
88:93:92:29:0e:60:37:e4:b3:19:55:d4:35:58:d1:
24:1b:52:f7:bf:58:37:92:e5:8d:18:69:17:2c:36:
d0:19:ce:3f:4c:4a:30:62:0d:24:08:12:d5:3c:d6:
55:6d:ef:42:0d:48:25:c2:cf:88:b3:e4:88:2b:1d:
54:6c:71:f6:ec:1b:c6:82:93:9f:97:9a:16:32:18:
48:fb:70:02:ea:51:be:c8:02:fb:2b:c5:e0:35:c2:
f5:1f:80:fd:e5:86:b6:cb:a9:b8:b4:08:f4:ed:95:
d5:74:c2:e0:66:55:ed:e0:de:c0:c6:4a:c2:89:bd:
c5:d0:72:31:1c:3d:09:ea:15:0e:36:38:34:65:72:
f3:3f:3b:a7:e1:df:c0:f1:3a:ad:e6:8b:80:5f:6f:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CF:62:D4:31:1D:9C:A0:EF:D0:81:DB:C4:4A:CE:2F:64:B1:B8:A5
X509v3 Authority Key Identifier:
keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:43:0f:4f:91:9a:1d:67:2f:43:2a:7d:9a:a9:fe:c3:3d:46:
f1:12:15:c2:a0:66:cc:2a:f2:66:0d:51:91:02:bc:ac:66:8f:
f4:3e:3a:25:fe:40:a5:73:97:2d:b0:5b:d8:c0:a0:10:26:65:
5a:f1:c1:0e:28:ef:b6:69:b1:00:f4:60:2e:17:9c:74:41:09:
c9:89:d5:99:1e:26:b6:06:e6:98:e0:bb:b0:69:ad:c3:90:f2:
fd:3c:97:a7:ed:c8:5d:e2:59:64:6e:e2:6c:8d:a3:bd:54:15:
ad:c7:b4:6a:5a:3d:38:b1:ea:db:d7:bb:de:99:f1:5f:88:c5:
0a:d8:d9:db:a8:64:d6:f7:bd:ca:7c:4f:16:7e:32:9f:0b:d2:
f0:0d:4a:0c:b9:f8:9a:59:d9:d2:c7:8a:3b:23:a0:23:ca:ba:
0c:5c:66:be:06:57:31:b9:a2:67:6c:07:e6:51:42:a3:17:18:
31:87:c6:fc:44:aa:a3:24:73:71:bd:1a:97:68:b3:62:6f:22:
4d:19:47:66:d6:70:34:11:45:09:66:c4:dc:6b:2d:c8:48:2f:
1d:be:6f:1c:72:d9:75:dc:40:88:6e:f1:31:59:da:2c:a7:21:
59:c1:d4:f1:81:b4:40:ec:7d:3e:f4:85:2c:46:c8:56:b7:77:
0b:d2:88:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:27:55 2025 by rpki-client