Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: OsCGN8Vr+u7bZUyq75QAvGtBgEpimd1BoX99RAV0TN8=
Subject key identifier: 0C:A9:F7:B0:E7:65:75:20:E8:07:C4:24:8B:B5:3B:3C:11:93:7D:3C
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 01967FB4777CF5E6AC68213E831DA8BE620A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 03EB
Signing time: Tue 29 Apr 2025 04:00:55 +0000
Manifest this update: Tue 29 Apr 2025 04:00:55 +0000
Manifest next update: Wed 30 Apr 2025 04:00:55 +0000
Files and hashes: 1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: YH+a54VTubnVNnMktUlXe1Ur7L5FwZZ7JRWEbIHcnjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:77:7c:f5:e6:ac:68:21:3e:83:1d:a8:be:62:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Apr 29 04:00:55 2025 GMT
Not After : Apr 30 04:00:55 2025 GMT
Subject: CN=0ca9f7b0e7657520e807c4248bb53b3c11937d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:35:5d:ff:5a:36:d6:05:40:69:c7:18:98:53:
11:96:ba:5f:aa:10:1f:4a:01:f9:c3:62:de:3d:3c:
37:9f:97:92:fa:d6:31:3a:dd:f9:45:a7:87:52:cf:
2c:cd:a7:d5:40:f7:63:4a:22:7c:ea:19:dc:92:d1:
55:a7:20:29:4e:2d:ca:7b:2a:d0:97:a3:7b:85:45:
8f:1d:e1:c6:ba:1e:6d:20:0c:a7:1e:e3:4d:8b:d5:
2d:95:57:5c:f0:59:86:fa:f2:aa:c7:65:bf:54:56:
32:ef:da:43:68:0d:39:8a:d5:86:c0:11:cf:b7:4e:
6a:d8:ed:a6:25:7d:74:81:96:be:32:e0:0a:54:16:
56:21:21:b9:b0:ae:b2:ea:88:c4:6d:35:4c:4c:1c:
8d:4d:3d:48:ab:ab:7c:5e:e8:34:2d:be:da:cc:02:
d0:84:af:bd:ae:33:a8:dd:69:67:a5:bb:50:86:a6:
bb:d2:77:19:51:21:17:69:d3:2f:fa:e6:0a:fd:73:
e0:8d:c3:f5:8e:61:70:2f:de:e0:7a:32:6e:7c:39:
41:fc:e2:95:18:c6:0b:9c:f3:a3:56:0e:55:65:65:
b8:2c:28:69:f8:40:5e:e0:3f:b8:4e:41:be:75:5a:
6e:e6:8a:c9:3c:2a:14:3d:32:f3:e0:0d:54:93:4a:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A9:F7:B0:E7:65:75:20:E8:07:C4:24:8B:B5:3B:3C:11:93:7D:3C
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c7:a7:df:2a:97:9a:13:03:f4:4c:88:ee:f9:d0:6f:1d:89:
fa:cf:41:e0:39:1e:96:99:c5:78:64:04:d2:1c:56:50:eb:5e:
78:db:eb:65:e8:6e:d6:f9:65:d1:ec:05:53:77:0e:08:53:ec:
2a:71:63:ea:e7:7d:0a:de:a8:84:55:48:ce:42:6f:6f:eb:a5:
c6:d0:f6:9b:36:8b:33:99:ef:0c:9b:72:c5:75:62:61:34:9b:
89:42:d5:4b:df:9e:87:d7:53:15:e9:41:03:fd:1a:54:3a:b6:
b4:b1:78:3e:5b:9a:a0:8f:63:03:29:cb:51:ea:96:40:f1:e1:
56:19:5e:7e:d0:6b:92:ff:b6:aa:86:a0:10:aa:17:66:6d:a0:
8a:6a:da:e2:79:d5:01:bc:e9:95:7a:35:48:c4:c1:e0:2d:21:
5f:1e:1e:f5:b4:43:b3:9f:57:4f:e9:63:3f:e8:40:f7:77:34:
c6:c5:24:a8:ec:91:42:8b:61:51:ed:89:46:b6:20:a1:0a:50:
f3:92:e9:66:3e:a0:06:1f:1a:cd:b2:16:f5:50:dd:88:1e:db:
31:a0:8f:3c:23:38:7b:02:d6:c7:5f:88:cc:20:9b:46:d3:83:
f9:4d:b2:3b:1b:8c:d1:10:6f:30:c1:9e:f7:05:2b:a9:0f:82:
a2:5d:60:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:17 2025 by rpki-client