Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json)
Hash identifier: FGssQjmomeACvuKbKmNRxhA4zRPrc+JW7WEMwZuulNU=
Subject key identifier: 41:EC:9A:F7:D1:B5:F9:76:A0:C4:BE:FA:74:15:44:44:6C:FB:3B:54
Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Certificate serial: 019679446C87BDE7FD558FB4330E1AAEFBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
Manifest number: 0FBC
Signing time: Sun 27 Apr 2025 22:00:49 +0000
Manifest this update: Sun 27 Apr 2025 22:00:49 +0000
Manifest next update: Mon 28 Apr 2025 22:00:49 +0000
Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: sYbS9heuqLx/MhN61JFG+5XFkh/O3No/qlz2/l/plsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:6c:87:bd:e7:fd:55:8f:b4:33:0e:1a:ae:fb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04
Validity
Not Before: Apr 27 22:00:49 2025 GMT
Not After : Apr 28 22:00:49 2025 GMT
Subject: CN=41ec9af7d1b5f976a0c4befa741544446cfb3b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:7e:7b:a8:68:19:44:18:45:e2:c3:ba:12:
06:cc:2c:43:0d:68:ba:ea:b1:c9:c8:15:a1:2a:79:
0a:18:7d:dc:c3:43:8e:3e:0d:3f:0f:ce:82:89:dd:
c0:f6:dd:a4:c2:5e:c4:e4:e1:f4:e5:a3:13:de:e5:
37:d6:44:a5:2e:20:c1:33:cb:e0:d9:9d:a3:a9:f1:
ff:7b:df:67:70:72:82:3d:b4:d6:9c:84:3d:3c:47:
ee:93:ac:d1:21:1a:87:4f:38:3b:57:b9:43:56:99:
76:d4:19:d5:28:92:7a:32:b3:34:08:ba:2c:2f:4a:
98:82:70:5f:b2:ac:fd:70:81:2a:f4:7a:6c:6d:e7:
20:5e:1f:8d:84:b8:95:c6:85:fc:70:41:9f:dd:14:
96:45:40:73:57:35:2b:f7:2c:cf:58:68:d8:b3:9b:
7f:ca:22:80:e8:ae:6a:ad:e2:f9:5d:2d:7c:d3:72:
c1:2a:6e:74:60:bb:b8:25:76:4f:16:93:13:09:c2:
7b:0c:f3:ad:23:56:29:8c:ca:aa:03:32:3c:7c:f7:
44:c5:d3:31:df:ac:55:db:78:9f:68:58:c2:d3:ec:
cb:7b:68:28:fb:f2:e6:4f:b6:26:a2:bd:00:80:a2:
0c:03:a8:84:86:66:18:c8:9a:45:75:7b:44:9f:ba:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EC:9A:F7:D1:B5:F9:76:A0:C4:BE:FA:74:15:44:44:6C:FB:3B:54
X509v3 Authority Key Identifier:
keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:53:57:8d:96:0d:19:d8:a7:1f:f4:95:52:fc:4f:59:d7:d9:
b6:e7:db:da:43:74:05:57:b3:51:23:90:7d:58:d1:89:72:cc:
e4:3e:25:9f:25:a6:a5:e3:1c:dc:3f:44:87:8c:85:03:52:87:
d0:24:1f:1d:36:57:11:f2:16:38:37:3c:cb:97:f1:48:d9:cc:
95:10:45:4f:bb:2e:64:e3:b9:2a:54:8e:e8:28:72:3c:ab:ce:
af:e4:d2:25:2b:c0:12:f6:ed:44:d8:c4:bc:a6:e5:2d:b2:24:
71:ee:fd:24:c5:cf:f8:d6:03:41:7b:aa:14:de:78:cd:78:8b:
1e:e1:6e:06:a5:06:70:1a:e5:13:77:63:79:d4:d4:4a:80:d6:
19:17:a0:48:e8:96:f0:f6:de:4f:d0:e8:3f:8d:3b:08:4a:10:
7d:de:a7:89:7d:03:df:90:0f:fe:24:f8:0c:ff:34:1a:67:b1:
8b:97:60:26:76:da:02:4e:02:06:0b:92:7f:82:cc:93:80:32:
27:3d:aa:58:24:d7:20:20:37:92:8b:49:ef:3a:e8:34:1a:29:
80:84:03:50:c8:fd:63:fd:b0:e2:b4:b1:58:cc:3a:80:d3:a7:
28:a1:f1:a8:d1:ed:eb:d7:fd:96:fd:a2:72:16:81:27:d4:48:
b3:a2:b5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:15:19 2025 by rpki-client