Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
File: _e3ZOtbKqmCtSfD5N32Kq_h34ts.mft (raw, json)
Hash identifier: fqmuJZKoHcxfxa8YzBIR8DaVhDLKWKcwQ/E2c4pntc4=
Subject key identifier: D0:77:08:5E:36:8B:95:5E:F5:FD:93:1C:E4:EF:C3:7F:A6:60:BA:AD
Authority key identifier: FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB
Certificate issuer: /CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
Certificate serial: 0196760C07D7A71B1A63D7874CD436BC345A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
Manifest number: 068E
Signing time: Sun 27 Apr 2025 07:00:21 +0000
Manifest this update: Sun 27 Apr 2025 07:00:21 +0000
Manifest next update: Mon 28 Apr 2025 07:00:21 +0000
Files and hashes: 1: _e3ZOtbKqmCtSfD5N32Kq_h34ts.crl (hash: i0dw1AdNtql039ifHwozpyP0eHLpuYuW3PCVToqVF1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:07:d7:a7:1b:1a:63:d7:87:4c:d4:36:bc:34:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
Validity
Not Before: Apr 27 07:00:21 2025 GMT
Not After : Apr 28 07:00:21 2025 GMT
Subject: CN=d077085e368b955ef5fd931ce4efc37fa660baad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:66:70:1d:d7:5d:7c:35:30:28:6a:b2:fd:
ce:d8:ac:32:cc:d7:5b:8c:58:db:75:cc:e2:79:2d:
ea:41:92:01:c7:57:d1:08:bf:a2:60:6a:5a:dc:96:
d2:2d:f1:e0:14:eb:44:dc:b7:09:61:a3:cc:41:a5:
d3:e1:d1:0c:b9:cc:d6:1d:d1:4f:ab:2c:72:bf:36:
aa:e2:e9:df:74:4b:29:91:33:80:6e:cf:d9:67:9b:
bc:56:cd:e6:87:b0:dd:79:5b:f7:a8:b5:11:47:19:
a9:51:1c:60:fc:15:6f:16:2f:1b:64:5a:37:6a:28:
7c:03:3d:bb:33:5b:3c:2a:1a:40:0f:5e:5b:ce:ba:
b5:e0:50:a6:f0:71:2a:5a:8d:a5:49:c2:6c:75:2f:
02:e4:b1:5e:3d:d0:f3:0c:7f:82:93:d6:92:cb:b4:
9b:98:39:d2:9a:f4:ab:86:11:08:c9:56:25:21:f8:
15:81:91:e6:3e:c8:28:a6:8c:5a:95:6d:04:5a:4b:
71:d7:8f:54:ae:35:82:1d:8f:e3:ce:c1:c0:2a:ea:
6c:fa:8c:91:a9:39:9b:e6:53:47:fe:6a:93:94:df:
8b:35:38:70:c3:36:8f:80:d3:ad:95:cd:90:16:d2:
66:49:90:45:3e:ad:74:3e:1e:d8:86:3f:99:d3:45:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:77:08:5E:36:8B:95:5E:F5:FD:93:1C:E4:EF:C3:7F:A6:60:BA:AD
X509v3 Authority Key Identifier:
keyid:FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e7:47:be:23:12:9b:5c:d4:68:ec:71:2c:92:39:a1:77:be:
75:d6:ee:f0:c7:d5:16:0a:67:76:d6:9c:b1:b4:b2:a1:c2:c5:
f8:d2:a8:52:7d:45:3f:a5:ee:26:d4:e4:df:b4:45:fb:0d:be:
e5:e4:28:a6:46:12:bc:ba:d9:f2:a4:36:6d:9b:91:3a:72:d6:
e6:f8:7b:53:72:04:98:4a:7a:ea:f3:55:1f:4d:ce:ef:0e:71:
2a:12:e2:6f:13:d3:b7:93:c0:6e:e5:00:71:f9:44:51:03:b9:
e1:35:bc:14:5c:27:7f:32:b1:6c:2c:36:54:fa:1d:b6:f9:7c:
b7:f5:cc:c1:87:0f:55:df:89:61:09:8b:f5:49:92:44:ee:a0:
57:2d:30:c8:a8:61:20:b7:f4:a5:93:af:1a:b4:5e:df:eb:25:
f3:e2:c9:8d:55:e8:38:32:87:2b:a2:ca:d9:6a:af:25:d3:03:
16:d9:56:5c:20:a5:75:73:4a:68:72:53:68:d8:be:28:b8:b1:
35:e7:10:7d:15:c0:cd:15:57:07:1c:9a:bf:92:34:96:99:ae:
c4:db:8b:ff:eb:0b:fd:ea:21:1d:fd:a7:3d:bc:e2:b5:1e:1a:
de:d5:a8:a8:ba:31:c5:0d:a2:3e:e2:50:34:f8:80:59:2f:3e:
b2:48:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:52 2025 by rpki-client