Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
File: eJMzeVlLis4GnZO_CICksp7ShnM.mft (raw, json)
Hash identifier: eG8D4V0/P4ImD10dYX9S2dQ4BslpnAGftj94aLyzABY=
Subject key identifier: 76:F8:AE:F6:12:15:81:66:97:6F:2B:E5:AB:2A:CC:74:94:7E:5D:89
Authority key identifier: 78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
Certificate issuer: /CN=78933379594b8ace069d93bf0880a4b29ed28673
Certificate serial: 019677559070606890C77394826C01A55627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
Manifest number: 01F2
Signing time: Sun 27 Apr 2025 13:00:18 +0000
Manifest this update: Sun 27 Apr 2025 13:00:18 +0000
Manifest next update: Mon 28 Apr 2025 13:00:18 +0000
Files and hashes: 1: eJMzeVlLis4GnZO_CICksp7ShnM.crl (hash: ygi5II3JGmt/5GnUXyPaL8TRkIDO9eM7u+LEfGjAemU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:90:70:60:68:90:c7:73:94:82:6c:01:a5:56:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78933379594b8ace069d93bf0880a4b29ed28673
Validity
Not Before: Apr 27 13:00:18 2025 GMT
Not After : Apr 28 13:00:18 2025 GMT
Subject: CN=76f8aef612158166976f2be5ab2acc74947e5d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:35:79:62:3e:a8:55:49:4b:d2:8d:0e:1e:
97:8c:95:a4:6b:5b:b4:91:bc:13:43:56:56:73:88:
4b:22:e9:23:d8:70:f1:a1:fc:c8:03:93:6a:dd:7d:
ca:55:5c:66:2b:c4:2a:2c:ff:d0:90:ef:ea:50:99:
55:20:a8:d4:07:e9:d4:d1:d1:e9:a9:e4:bf:31:55:
62:93:80:97:41:1b:a2:cb:f1:3c:6c:1b:ab:ac:a3:
40:13:1f:e8:ab:ee:12:c9:57:75:b3:2c:5c:5f:a1:
fa:63:3e:ac:b6:76:ed:91:5c:9b:cc:d7:1d:8d:88:
e9:1b:d5:11:65:c4:3f:e8:96:21:d8:a7:15:12:7d:
00:ec:18:43:77:d6:00:1e:c8:29:3d:19:f5:11:7e:
50:76:a9:c8:64:04:ea:21:3e:7d:c8:3f:8e:47:75:
d2:9b:a8:17:9e:18:4b:62:db:46:8b:c9:f5:b4:a6:
7d:f1:fc:54:62:ad:51:a3:bd:cf:c1:08:f3:fb:4c:
22:31:d9:6d:c5:ed:51:52:05:b3:ff:0e:ab:34:c3:
38:8a:82:16:42:8c:f8:2d:47:52:a0:a1:0e:d0:a5:
e9:d2:d6:47:9b:6b:5b:46:91:d3:28:06:d8:5c:7f:
30:b8:e0:1f:d0:cc:f6:b8:53:e3:80:b3:44:1b:78:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F8:AE:F6:12:15:81:66:97:6F:2B:E5:AB:2A:CC:74:94:7E:5D:89
X509v3 Authority Key Identifier:
keyid:78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:45:a3:41:dd:ce:76:fe:72:6a:e0:23:ba:1e:17:d7:4a:6e:
b4:71:33:99:03:0c:2d:b2:ff:08:91:f0:65:31:f8:71:30:31:
48:ef:e1:a8:eb:64:2e:4c:78:cb:6e:a4:26:d6:c5:89:6b:cb:
4c:d4:33:ce:14:06:d2:bb:af:33:31:50:15:d3:a5:30:e8:7c:
d9:1e:d2:29:4d:e5:39:6e:43:b4:ec:88:79:a0:10:99:b6:7b:
b6:6a:1f:5e:a6:bd:05:83:1e:16:48:51:d4:42:3c:ff:40:51:
ff:2b:61:a7:c9:a5:5b:85:be:48:64:56:e0:96:f1:98:97:ec:
7d:29:52:42:00:a7:45:a7:c1:a1:af:03:f4:5a:83:4a:c5:c0:
3b:da:6c:93:9f:dd:61:8d:6d:28:f6:cb:ad:7b:2d:34:c6:a7:
ee:6e:9d:e3:fe:61:b8:f0:90:44:22:88:ec:32:c9:75:38:8e:
aa:03:d9:13:94:af:af:1a:6d:ea:49:1b:a2:58:84:08:d9:81:
a3:57:e7:47:65:17:74:05:9d:d0:95:6f:de:d4:10:49:c0:73:
c8:a4:32:87:e0:08:f9:76:71:da:15:a3:59:69:23:79:2f:ad:
31:30:0c:ee:4f:94:88:d9:a0:bc:69:93:09:4d:1f:b9:42:e1:
2a:6e:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:54 2025 by rpki-client