Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
File: f35evW-kacXjcL_BBsTUqtHh25Q.mft (raw, json)
Hash identifier: TO0J8nR/CDAyIALMkiY81IduX9/QMp73eiGHN2/HoBk=
Subject key identifier: 4B:7C:73:A2:86:C7:41:E6:36:9B:41:CB:F4:FD:DE:CB:FE:F3:35:98
Authority key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
Certificate issuer: /CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Certificate serial: 019689CA102E643D5662C768043BFB5A3F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
Manifest number: 0D81
Signing time: Thu 01 May 2025 03:00:43 +0000
Manifest this update: Thu 01 May 2025 03:00:43 +0000
Manifest next update: Fri 02 May 2025 03:00:43 +0000
Files and hashes: 1: f35evW-kacXjcL_BBsTUqtHh25Q.crl (hash: iLA4ulktoTFBUqPdbwFrZ2a8JaZdSL6o0zSSQwQBFnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:10:2e:64:3d:56:62:c7:68:04:3b:fb:5a:3f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Validity
Not Before: May 1 03:00:43 2025 GMT
Not After : May 2 03:00:43 2025 GMT
Subject: CN=4b7c73a286c741e6369b41cbf4fddecbfef33598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4f:e8:b1:d8:bf:cb:2c:5d:4a:92:45:cb:fd:
8e:3e:e7:1b:cb:8f:a3:7f:9e:c8:ad:7f:67:fb:d9:
14:1f:a9:59:98:76:c5:4b:48:5f:74:89:95:c8:9a:
be:9b:34:44:f7:c1:c6:6a:12:f4:b8:e3:40:bd:35:
25:73:03:0f:10:8c:7d:21:6f:f7:15:83:ed:e3:a9:
3b:1d:88:c6:b1:47:86:13:54:20:43:cd:9c:88:68:
2a:9a:cb:1b:5d:2a:7a:69:17:da:a2:c1:f9:27:bb:
ca:84:07:bc:ae:26:f5:80:f1:92:47:80:6e:7f:5c:
8e:fc:d7:27:d3:64:3d:6c:ad:19:5d:67:05:3b:ac:
91:80:79:d0:b5:e9:4c:85:92:99:0c:e2:be:25:c6:
dd:ad:31:c0:61:96:ed:4d:f0:de:90:f2:03:d0:e5:
ca:87:6e:82:23:3d:0b:ee:96:dd:75:95:1a:61:51:
ec:38:10:db:13:9c:43:97:cd:60:c9:66:b5:8e:cd:
01:91:a9:4c:84:4a:80:08:ca:7f:d3:b4:32:59:c3:
14:eb:38:46:26:0b:14:fc:96:92:e6:5c:44:aa:f8:
5b:06:c5:b4:eb:a9:98:e9:de:45:16:d4:a6:73:ed:
e8:43:94:3a:c0:8c:5d:b8:be:e9:1b:63:15:f3:bc:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7C:73:A2:86:C7:41:E6:36:9B:41:CB:F4:FD:DE:CB:FE:F3:35:98
X509v3 Authority Key Identifier:
keyid:7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:77:04:b6:9c:f6:27:80:d2:47:37:94:bf:3c:cf:15:fb:7e:
2f:d2:3f:ad:98:f6:b8:55:e4:22:ae:1e:c4:b4:1d:4f:76:c5:
53:8e:47:54:45:99:ec:d0:ff:17:f0:0f:1e:75:6d:e8:ef:e5:
6c:ce:8f:f7:76:60:ef:0e:9c:c8:45:4b:0a:3b:ea:9f:9e:ea:
e5:62:9d:75:a7:de:72:46:e1:f2:49:1d:1e:f1:f8:fb:92:db:
9a:7e:51:89:c1:75:a4:8e:fe:39:1d:09:24:c5:e1:d4:5b:62:
f0:c6:fc:cb:b2:f7:aa:a3:5f:02:20:f3:6c:b9:b1:1e:98:74:
26:e0:f8:ff:23:e1:5e:72:7e:74:b7:ae:67:dd:8d:7d:ed:00:
3a:56:21:64:18:3b:b0:03:1e:41:3a:b7:ef:93:d0:47:aa:61:
69:61:38:2e:6c:7b:d6:e5:6a:7c:da:3f:b5:8f:b6:fe:b0:b4:
bc:c2:c6:ba:5b:4d:6a:bb:47:a7:eb:9e:a0:4a:df:bd:d1:63:
70:4e:f4:a0:16:6f:df:13:ef:6b:0c:39:a3:9a:26:11:5c:7b:
c0:82:23:5e:5e:33:44:80:37:de:2a:b4:e2:1d:98:d3:63:89:
09:02:4c:b5:13:0e:15:67:96:a1:49:d9:51:9d:7f:03:37:98:
1f:ed:63:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:23:26 2025 by rpki-client