Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier: wBgiACsfpuw3E6bF03Mgqt10TOmNItVNa6x9I4Bkm9I=
Subject key identifier: A5:AE:A4:79:A5:73:01:03:2F:C1:09:08:9A:64:03:9C:C2:10:71:D0
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial: 01967E33F8A0A961FBB7BEA02CEE3DAA1047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number: 09D0
Signing time: Mon 28 Apr 2025 21:00:57 +0000
Manifest this update: Mon 28 Apr 2025 21:00:57 +0000
Manifest next update: Tue 29 Apr 2025 21:00:57 +0000
Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: HfJBFFRBRHVGzbIRjUJpy7fKeGzvCDFS8Cnt3mf5Sz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:f8:a0:a9:61:fb:b7:be:a0:2c:ee:3d:aa:10:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Validity
Not Before: Apr 28 21:00:57 2025 GMT
Not After : Apr 29 21:00:57 2025 GMT
Subject: CN=a5aea479a57301032fc109089a64039cc21071d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:47:4a:3c:5c:9c:3f:af:1b:62:e4:53:9b:
91:2a:dc:bc:ba:06:6f:a5:c7:e1:77:4f:8f:9f:40:
02:3a:c9:db:0a:bf:c4:0f:43:0c:6e:84:87:a7:fe:
fb:7b:61:4b:22:c5:37:13:16:e3:76:ba:69:c8:8e:
36:6c:91:4a:9c:b9:89:b6:90:c6:f9:9e:30:96:be:
79:da:47:a2:59:f5:3a:fb:45:06:98:29:51:7b:90:
66:11:54:78:28:79:9e:c8:cf:37:9e:7f:62:92:51:
18:d2:8d:23:34:2c:b3:fb:c4:20:5e:61:9b:73:ad:
91:ae:50:ac:f7:dd:b7:bd:02:73:e0:21:b0:35:b7:
48:33:7a:7f:ee:db:f8:22:55:7a:8a:ce:25:6a:b3:
cf:63:68:11:6f:0d:16:e0:ae:a0:fa:36:fa:37:4b:
7b:e9:8e:2b:e6:99:34:b8:a6:2f:f4:95:66:37:54:
e0:90:f9:cb:63:cd:a3:a4:6b:a8:fb:da:73:3e:03:
66:67:ec:78:49:88:f9:25:af:64:45:2f:af:8b:5b:
4b:38:f4:19:c1:91:40:25:8d:55:81:9f:21:16:65:
d6:58:94:41:a7:c3:6e:87:ce:eb:ca:e3:d4:11:40:
03:2e:54:ad:9b:96:66:cf:5d:25:5e:37:ba:ce:f9:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:A4:79:A5:73:01:03:2F:C1:09:08:9A:64:03:9C:C2:10:71:D0
X509v3 Authority Key Identifier:
keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ad:37:aa:9e:01:67:bf:b7:0f:96:e8:1b:80:ce:01:98:45:
b3:01:20:b9:46:7a:3e:f0:52:b1:6f:a1:58:d2:36:0a:3a:aa:
a9:28:ad:e0:3d:b2:62:ec:3f:00:87:df:fc:53:3e:05:22:94:
04:a5:db:0c:f1:91:b5:33:d1:a7:4c:db:c3:c6:94:80:61:f7:
db:59:8e:6a:a4:0d:89:85:73:35:58:1f:f6:1b:36:d8:63:26:
07:a7:de:88:f1:ac:74:5a:9a:31:21:25:c7:6e:1a:d9:86:5a:
92:66:ca:5d:4a:30:7c:ce:21:b4:1c:f8:96:17:9b:19:8b:7f:
bb:79:2c:0b:01:13:cc:cb:bf:12:6a:52:2c:9e:10:31:ac:db:
25:81:a5:27:83:d5:61:8c:85:94:76:50:23:39:ea:6c:81:b0:
a5:b4:bb:6c:9c:83:23:92:4f:03:02:3e:b5:1c:0a:16:8c:e6:
07:27:9d:34:36:eb:54:0a:e9:dd:33:c5:98:09:6e:dd:b0:9a:
23:18:42:f3:ac:d3:a4:4e:c1:6d:1f:b5:bd:1a:68:7a:e2:21:
45:48:e6:7b:31:ef:b8:97:49:eb:f0:7b:8f:c1:db:94:44:ad:
94:02:41:9b:87:f0:e5:81:14:8c:cf:e8:d6:c9:a6:63:e7:bf:
fd:05:ee:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:24:12 2025 by rpki-client