Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
File: eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json)
Hash identifier: n8AIwE54QbUtTXoDyNdQjtL9G2qxVV1UZVcCac3mmZI=
Subject key identifier: 29:C1:F0:32:C4:B3:CF:D5:6E:56:6B:36:2C:6B:78:37:24:E9:6A:1F
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Certificate issuer: /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial: 019686C90DF3072675B52616BBDCCC1608CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
Manifest number: 0CA5
Signing time: Wed 30 Apr 2025 13:00:45 +0000
Manifest this update: Wed 30 Apr 2025 13:00:45 +0000
Manifest next update: Thu 01 May 2025 13:00:45 +0000
Files and hashes: 1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: KdnHYqrGl3tcUqxQKc3clz0fWZ1kTCNhHZZg/OGMscc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c9:0d:f3:07:26:75:b5:26:16:bb:dc:cc:16:08:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Validity
Not Before: Apr 30 13:00:45 2025 GMT
Not After : May 1 13:00:45 2025 GMT
Subject: CN=29c1f032c4b3cfd56e566b362c6b783724e96a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:d3:a0:97:3c:8b:26:5e:67:85:f3:5c:48:
fd:50:ff:bb:b0:3a:a8:96:b7:70:4e:30:a3:f8:da:
f2:ee:0a:bd:75:c6:e1:92:5d:30:3d:96:8e:ff:d6:
01:1f:ee:e2:cf:36:ff:1e:90:10:4a:03:42:b0:00:
a8:99:c7:0d:90:d8:4f:ac:84:8a:53:dd:17:03:ae:
84:34:b4:8c:b8:3e:69:f4:3a:f1:8b:8f:ae:03:14:
12:b0:95:69:14:47:71:9c:c6:d7:aa:d4:c0:7e:ef:
f8:38:19:67:b9:c3:ed:73:c7:43:19:0a:31:f1:13:
f8:da:0c:90:ae:67:99:47:18:03:b5:95:49:c1:d7:
f5:a9:25:08:59:06:ea:64:45:5a:cf:d6:34:f3:bc:
83:47:02:06:6f:04:6b:30:9b:2e:28:d5:ed:a7:dc:
f3:83:33:13:61:85:a4:e5:5e:0e:3a:b9:7f:d7:95:
73:56:4c:8e:00:02:a6:46:95:10:0e:bc:45:74:48:
37:40:9d:8c:99:1b:b3:f9:9d:e6:81:6a:88:31:5a:
18:49:46:1f:5e:5d:79:ea:9b:26:58:c0:75:c3:9d:
1e:46:51:47:48:11:9f:77:0a:1f:a2:32:98:3b:73:
74:30:12:1d:63:bc:f5:55:61:39:7d:0f:8f:5a:a4:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C1:F0:32:C4:B3:CF:D5:6E:56:6B:36:2C:6B:78:37:24:E9:6A:1F
X509v3 Authority Key Identifier:
keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fd:86:c1:3c:c0:7e:e2:7f:87:12:ed:b3:02:81:96:b2:fa:
6e:22:b5:d6:ee:d9:06:f5:68:d1:ce:db:4d:b1:18:68:ba:e2:
ca:1b:95:59:18:c8:d5:51:e2:52:98:91:aa:f6:ae:5e:57:20:
5b:84:98:0f:87:db:2a:8b:8e:af:3a:aa:66:9e:db:b2:e0:c0:
12:41:3a:b9:ce:e3:d9:6c:f4:30:86:0b:33:7d:d6:62:ba:ab:
c4:42:9d:26:31:51:12:51:e0:06:57:c8:d8:33:84:7f:f1:a3:
10:44:7d:08:15:ce:42:e8:4a:cb:ba:e5:7d:49:aa:e3:5b:a4:
01:32:bd:42:e3:8b:ec:79:a2:b2:8d:af:ac:c7:a5:7f:e5:a3:
b5:a9:fa:d7:ac:c5:11:40:db:79:9c:e7:1c:c1:82:b7:ac:24:
46:bf:11:ba:0a:a8:8c:b0:8e:c6:0f:0f:47:d2:44:dd:1a:93:
eb:71:8d:f9:7b:59:5b:59:00:de:de:f3:6b:dd:a1:15:c7:83:
0b:47:ee:e0:35:5e:d7:ed:10:2f:bd:33:d2:fc:3d:20:a3:e1:
70:d6:13:ec:a9:21:9e:0a:a3:3c:3e:19:2e:b0:d7:ef:ca:b5:
0e:3c:13:f1:6f:7b:8a:23:c0:c6:35:84:39:a5:8f:44:8c:ef:
ac:01:79:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:55:18 2025 by rpki-client