Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: gesHAQMX9AKJ6fBJ43DyUIeFYoBdIAvO17UM0cAAyGY=
Subject key identifier: 51:B2:25:A9:27:5D:AE:37:E4:BE:CB:B4:66:23:A9:73:9C:49:99:C4
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 019684DA88A17E6197FC6A9FDACF1F1C7385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0AD5
Signing time: Wed 30 Apr 2025 04:00:36 +0000
Manifest this update: Wed 30 Apr 2025 04:00:36 +0000
Manifest next update: Thu 01 May 2025 04:00:36 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: T2/wIWca5G9FowlOEWfgzc+ITQnU2qKd8K6Amx/1Ml4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:88:a1:7e:61:97:fc:6a:9f:da:cf:1f:1c:73:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Apr 30 04:00:36 2025 GMT
Not After : May 1 04:00:36 2025 GMT
Subject: CN=51b225a9275dae37e4becbb46623a9739c4999c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:f4:05:07:5a:28:30:96:a6:f4:cf:56:66:
2e:1e:de:50:9c:78:6f:32:0d:05:e8:e3:43:fb:d0:
18:e6:11:0b:82:2a:cd:eb:00:76:86:cd:bf:f7:5e:
d6:0b:27:4c:af:a8:8e:0d:ad:47:42:33:6c:f6:6d:
c9:45:2f:92:59:39:11:fe:26:19:38:45:c5:da:81:
bd:69:f4:da:1c:fc:67:99:06:3e:31:54:2d:a3:d0:
15:fc:55:e7:3f:3d:cf:64:00:63:19:67:09:b6:04:
a5:b3:d6:c3:f7:7c:33:04:ba:1d:22:93:38:a5:43:
13:de:9e:77:8a:c5:ef:2c:52:c3:5a:92:f8:d2:16:
64:d3:00:be:0b:77:78:eb:e7:57:cd:0d:40:96:cf:
ad:f3:2d:85:40:d5:78:c2:a7:12:0f:5c:7c:20:9d:
d2:8a:3d:c2:d3:c9:fe:44:f9:dd:cc:2e:b1:4e:1f:
f0:c6:15:4b:07:79:56:c7:86:0d:9f:33:06:ef:b4:
1d:a3:dc:3b:cd:ee:f3:26:db:7a:5c:d6:eb:3a:4d:
10:7f:39:39:90:72:85:aa:e8:d8:86:af:d3:f7:96:
51:3f:e5:b9:ee:7c:3e:cd:2f:22:67:8b:d3:f6:70:
10:f0:42:39:86:38:00:d5:6c:ff:20:8c:43:43:d8:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B2:25:A9:27:5D:AE:37:E4:BE:CB:B4:66:23:A9:73:9C:49:99:C4
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:20:ec:84:b8:65:a2:58:31:a5:b4:81:ce:ef:3e:21:99:3a:
c4:58:f9:b8:95:98:1c:21:c3:fb:90:e4:10:de:2a:22:a6:d3:
75:0f:4c:a1:5e:c1:bf:d0:8b:2c:d5:ba:07:2e:9d:ab:36:4c:
3d:4e:92:10:12:97:a2:91:c5:5b:cb:e3:3c:d6:af:0f:08:f0:
2c:97:ca:1f:1d:79:24:44:78:ce:c8:78:9a:3b:19:80:b0:9d:
a8:38:78:dc:5b:d9:6e:0c:02:af:48:75:5d:16:c0:0f:dc:de:
72:7b:e2:70:e2:55:ba:78:af:92:07:9c:bb:11:a7:bb:5b:85:
d1:f7:8f:2d:b0:df:35:78:f8:b0:04:fe:0f:de:63:43:6b:36:
16:8a:90:26:ea:a3:f7:c2:1a:48:3e:fe:60:e0:8c:0e:91:5e:
77:9e:a4:d3:f8:ba:ef:b6:f4:59:83:66:f8:8f:de:13:cd:4d:
82:10:8c:ad:62:ae:80:e0:94:52:7a:05:74:41:7b:98:01:fc:
49:af:be:24:ce:e2:13:da:54:5a:e6:90:f8:64:ab:77:2c:a6:
03:91:fd:3b:31:dc:8f:a8:9b:03:33:06:7e:67:cb:bd:38:59:
12:56:37:ad:bd:96:75:07:20:ba:42:ed:89:12:9d:76:1d:87:
f9:5e:33:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:10:57 2025 by rpki-client