Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
File: egadopx7Yd3rzAUk_QjlTf80wWg.mft (raw, json)
Hash identifier: voyPUFHqhwviPHQ88Vd0WFkAavF+llFtzFiW5FC/h2M=
Subject key identifier: 2E:11:4B:81:19:3D:05:28:7F:33:8A:A3:CC:9D:CB:4E:AE:0A:FA:3B
Authority key identifier: 7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
Certificate issuer: /CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Certificate serial: 0196515BB23B55B9E47C562A3ED67C817062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 04:01:26 +0000
Manifest this update: Sun 20 Apr 2025 04:01:26 +0000
Manifest next update: Mon 21 Apr 2025 04:01:26 +0000
Files and hashes: 1: egadopx7Yd3rzAUk_QjlTf80wWg.crl (hash: ZWvfxAmq2Nqle20WKJhLjXXNwMYTWYvkP/7Ugq+2ybY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:b2:3b:55:b9:e4:7c:56:2a:3e:d6:7c:81:70:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Validity
Not Before: Apr 20 04:01:26 2025 GMT
Not After : Apr 21 04:01:26 2025 GMT
Subject: CN=2e114b81193d05287f338aa3cc9dcb4eae0afa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:2e:d6:8d:35:c3:de:cb:4c:c7:cc:48:a5:
58:71:df:d0:c6:d2:f2:4c:24:bd:0d:0c:a7:37:70:
0d:94:0e:68:af:91:05:47:bd:b5:4e:dd:7c:01:9a:
0d:82:69:74:1f:b3:5e:d0:63:08:ce:80:14:d6:8b:
83:5c:03:39:46:29:60:15:95:3f:1f:ee:dd:77:99:
8f:f9:08:0b:e6:2c:b4:27:7f:e7:31:e3:40:42:18:
59:dc:90:bf:30:4d:2f:64:47:55:0c:bc:d2:0f:2a:
f5:c5:1c:a6:a5:af:ca:90:23:a5:ab:ce:60:f0:78:
c5:aa:c9:25:66:2f:06:a2:88:7a:cc:59:bf:5d:4b:
15:b1:0c:d3:3f:2d:54:ac:11:88:c3:92:08:ff:c1:
07:dd:00:9e:1b:9d:bd:7e:c4:0d:5b:43:34:4d:ec:
76:c4:89:95:8a:a3:b9:48:c4:29:ee:dd:3f:ba:98:
1e:74:72:de:63:da:2f:af:2c:07:aa:f2:b1:fc:6d:
c3:55:ab:e3:58:84:3d:43:1b:a2:41:5f:f7:af:c8:
83:b0:f5:e4:df:15:dd:05:b8:35:52:13:b3:fd:36:
7d:81:f6:08:a5:de:48:d0:a0:44:2e:70:42:37:42:
f3:bf:0d:85:5c:da:a6:9b:61:08:47:78:ab:99:7b:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:11:4B:81:19:3D:05:28:7F:33:8A:A3:CC:9D:CB:4E:AE:0A:FA:3B
X509v3 Authority Key Identifier:
keyid:7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:02:a8:de:7e:c3:26:73:91:40:40:e8:c8:5d:e7:be:d1:ae:
e6:34:34:fc:23:1a:97:32:92:48:81:9c:14:87:79:76:d2:1e:
c5:73:80:65:80:33:4b:3c:7b:b2:c0:2f:34:cb:38:b9:98:6c:
52:e9:82:9e:19:7b:02:05:af:34:ef:7a:8e:43:a2:ac:0b:07:
4e:4b:e1:82:87:a4:2b:7e:07:c5:1a:47:85:b0:61:dc:40:91:
2c:38:8a:aa:d3:e1:3f:2a:f7:b1:6f:2f:9b:57:e3:09:13:e4:
de:81:2d:57:ac:d2:6b:96:c6:a9:55:ae:7d:51:e9:f2:ac:e8:
ce:a2:8c:9d:d9:68:d1:74:aa:f9:0d:e1:3f:9a:e2:a7:73:dd:
ec:a0:ce:c2:52:e1:19:e8:bb:58:73:62:3e:f1:00:b5:7b:44:
18:fe:84:a6:63:3e:d4:02:c5:47:81:ad:82:b3:b1:99:75:74:
a3:af:d2:f3:76:91:d9:e4:0a:8d:38:f2:0a:33:1d:f4:e2:9b:
7c:56:7d:3f:d3:7c:3a:ac:91:79:ce:37:41:79:7a:91:f1:1a:
ac:40:15:43:2f:87:b4:76:16:f2:32:84:31:26:94:84:07:68:
a5:53:27:a0:61:18:37:e9:27:fb:b2:00:4e:e4:34:49:17:0e:
09:4f:05:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:41 2025 by rpki-client