Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json)
Hash identifier: SMhH5vIN/u2Sd/VXLkoYwkX2eblnOPzHE8PllY/n6Ys=
Subject key identifier: A2:BE:D5:DB:34:1D:11:C6:BE:CF:DE:97:F4:B7:B1:73:71:BB:47:EA
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial: 01967D57D4B48BCBCE01FC7F94E9645D3C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
Manifest number: 0F3D
Signing time: Mon 28 Apr 2025 17:00:30 +0000
Manifest this update: Mon 28 Apr 2025 17:00:30 +0000
Manifest next update: Tue 29 Apr 2025 17:00:30 +0000
Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: DcxMYrHoHjUlK+d7zH5Zx6+07fyx9EuG4if32jbhrRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:d4:b4:8b:cb:ce:01:fc:7f:94:e9:64:5d:3c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Validity
Not Before: Apr 28 17:00:30 2025 GMT
Not After : Apr 29 17:00:30 2025 GMT
Subject: CN=a2bed5db341d11c6becfde97f4b7b17371bb47ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6a:c7:93:6a:df:3d:a2:e7:5b:4e:63:cd:b6:
8d:3d:70:e1:d9:07:bb:1c:0a:60:18:ba:0d:d8:15:
37:7f:a4:cd:60:70:c8:7c:17:16:14:10:b1:38:72:
29:9c:35:ba:39:93:b9:06:d0:8c:e0:e6:97:aa:05:
38:c3:5e:72:af:b0:93:c2:8e:db:f8:5e:4a:33:f6:
a8:cc:74:3d:16:f8:7b:78:3b:b4:66:3b:9c:52:c4:
33:c1:7a:b5:96:f2:f6:f7:08:7b:10:dc:51:68:2d:
93:02:c4:db:82:5f:51:1b:12:5e:50:36:18:9c:41:
0a:10:6b:7c:7c:3d:b0:b3:51:98:8d:be:b5:07:ad:
b7:3b:91:6c:9d:da:4a:77:1a:12:15:d1:52:c1:0b:
57:04:bf:a5:68:14:d2:d8:61:ad:2d:77:4a:1c:97:
e2:ee:45:fe:66:07:a5:16:13:0d:a6:7e:7f:e6:2f:
92:c8:a3:67:b7:18:b1:5e:93:37:d1:46:02:55:85:
98:42:02:6e:63:67:0c:e4:26:af:95:39:9e:21:25:
a5:68:92:c2:da:88:c5:98:b0:0c:a9:5c:6b:75:2b:
51:86:ec:f5:49:d0:15:a0:95:d8:16:40:39:fa:9e:
d9:fe:00:42:44:2a:46:3e:fd:c1:85:44:f8:43:44:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BE:D5:DB:34:1D:11:C6:BE:CF:DE:97:F4:B7:B1:73:71:BB:47:EA
X509v3 Authority Key Identifier:
keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b9:68:ee:31:8d:ec:6a:7e:b3:97:73:4d:1b:e2:e3:3c:f7:
89:31:01:cc:0e:8b:51:6f:26:75:c9:d4:32:f3:70:bd:a4:ff:
50:2b:5c:cd:41:5e:71:e0:08:c2:ba:58:7f:b6:1d:26:d7:94:
22:9e:96:7a:0f:6a:8b:68:7b:30:ac:4a:dc:3f:45:ec:d6:cc:
be:9b:b3:79:ee:90:23:47:6d:a1:f2:50:0d:cd:91:81:e0:3b:
ab:5f:e4:4f:d5:ae:5c:9a:20:43:5e:fa:cd:93:b2:97:3b:e9:
32:f0:a4:2a:35:55:31:ea:e3:6a:3a:fe:3f:9e:6e:b1:0d:d5:
26:f5:2b:46:4a:70:f2:38:77:68:31:a4:e5:3b:3a:41:f9:60:
78:60:9b:7d:d6:55:5c:27:1b:ef:5f:c8:a4:41:cb:28:d6:dd:
7e:89:62:ac:7c:53:1c:d9:07:cd:b5:e9:4f:ee:9d:68:2b:8c:
a1:3a:a9:83:90:00:54:ee:ba:70:51:06:fa:af:4c:63:f7:02:
b2:53:9c:4b:97:0f:91:b2:cb:c6:45:43:0c:51:ec:69:41:bf:
b0:82:ae:5d:a5:cb:53:66:39:7c:34:cb:01:c0:94:82:8b:25:
5b:50:38:0d:00:97:da:ad:c9:e6:e4:7f:f5:f9:d5:91:b6:2a:
ec:db:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:54:45 2025 by rpki-client