Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
File: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json)
Hash identifier: prXqC6F9GUFTO7CCm1Iji82s5xWA49sZACvZrebExPQ=
Subject key identifier: 67:6D:A0:FC:FB:64:0D:34:12:FA:CC:FC:B6:94:63:5D:4B:AB:A1:C3
Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
Certificate issuer: /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Certificate serial: 01967F0F63CCE927C803ED5F8717149C2C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
Manifest number: 0BF3
Signing time: Tue 29 Apr 2025 01:00:37 +0000
Manifest this update: Tue 29 Apr 2025 01:00:37 +0000
Manifest next update: Wed 30 Apr 2025 01:00:37 +0000
Files and hashes: 1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: 6HPFNNdCMB+zcvkdCKjg9IKR9+OobfICNwi8QA9op/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:63:cc:e9:27:c8:03:ed:5f:87:17:14:9c:2c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Validity
Not Before: Apr 29 01:00:37 2025 GMT
Not After : Apr 30 01:00:37 2025 GMT
Subject: CN=676da0fcfb640d3412faccfcb694635d4baba1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:c6:a4:a5:b2:3d:b4:8b:53:e7:9a:97:fc:
ff:7a:27:0d:0e:b1:29:19:a0:be:33:f1:d7:72:60:
32:eb:ed:b9:e2:bc:32:7a:9e:af:10:ba:97:56:86:
21:9e:69:4d:14:3c:1a:63:40:61:53:1b:08:3a:3b:
07:89:ad:ba:87:7a:8a:65:06:5d:fc:6f:4a:08:fa:
f9:15:3c:e2:e3:35:ae:61:b5:7a:e2:95:a3:75:7e:
1e:0f:28:97:69:79:02:59:52:a6:f8:86:6e:38:a3:
30:70:ff:09:f9:52:03:10:62:c2:54:0c:72:a2:c8:
a1:dc:00:da:fa:74:7e:a4:c0:18:f0:b3:36:4e:e2:
7d:57:46:c3:02:f4:6e:3f:86:06:b8:23:66:dd:c0:
93:25:8e:fa:23:63:0a:fb:b3:24:2f:d8:bc:bf:6c:
12:02:f1:be:96:2c:56:06:9d:21:92:3d:e6:72:7b:
eb:ea:d4:2e:4f:10:7b:e6:78:e8:93:92:da:c5:f5:
2c:bb:79:0b:db:b7:f9:8e:3f:ee:ee:93:54:fd:03:
a9:ad:7e:0b:c4:40:d2:f9:77:76:de:25:6c:fc:ec:
4e:cf:45:ce:09:ab:41:fc:48:73:58:29:75:d8:c1:
3d:7b:99:fa:1b:50:3f:26:82:1f:b6:e4:5d:7b:5a:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:A0:FC:FB:64:0D:34:12:FA:CC:FC:B6:94:63:5D:4B:AB:A1:C3
X509v3 Authority Key Identifier:
keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:06:d3:bc:02:a3:6c:49:98:bc:fb:89:8b:d5:52:20:bd:10:
b6:41:77:53:83:b4:39:21:26:f6:1b:1a:12:87:9d:05:91:56:
99:6b:8d:7d:dc:5c:93:07:ab:b4:d4:39:c4:d1:05:0e:bd:4e:
d9:33:a7:43:ed:3d:82:d1:89:48:4d:a6:d5:e3:55:85:8f:53:
34:f6:c4:88:b2:d3:e2:b9:76:da:77:2e:89:49:4c:8d:43:49:
ff:fa:ba:5d:e6:3a:69:dc:ad:3a:e2:e9:50:a2:64:e6:3b:3f:
4b:e6:c9:51:4c:7f:64:4a:e5:bd:4d:10:53:fb:df:cf:89:db:
6c:2d:33:f3:85:7a:57:48:14:06:14:b8:40:26:8c:9d:8d:2b:
34:ad:72:b0:37:7f:5c:07:ef:c2:6c:89:aa:73:1a:47:bf:48:
32:cf:48:24:dd:c8:5f:a7:2a:4a:df:d6:ac:d7:c8:89:00:44:
97:28:f3:72:40:0b:76:b3:2c:21:1a:c2:4f:77:39:61:68:74:
99:35:34:b0:9d:6f:aa:dc:eb:03:73:62:55:8a:44:4e:a4:82:
7b:c7:cb:5d:d6:00:be:0e:84:0b:d7:39:a3:77:c4:1b:9d:77:
7d:45:c7:af:ce:2a:32:79:0c:65:c9:e0:c2:2c:ac:cb:f0:71:
16:19:31:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:35:48 2025 by rpki-client