Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
File: 71j4Vyvdd9mBQRGA4u-aioAsdqw.mft (raw, json)
Hash identifier: ivLm509Pvv0jVUyT2ZzDazVOZEDH4kCCCqCD+gYQzWM=
Subject key identifier: EB:CF:DD:A8:46:04:B6:39:16:16:9C:1C:3B:33:01:C7:AF:72:83:7C
Authority key identifier: EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC
Certificate issuer: /CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
Certificate serial: 019680FD99F80E7B4E112E14E14BE2FF55BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
Manifest number: 90
Signing time: Tue 29 Apr 2025 10:00:25 +0000
Manifest this update: Tue 29 Apr 2025 10:00:25 +0000
Manifest next update: Wed 30 Apr 2025 10:00:25 +0000
Files and hashes: 1: 71j4Vyvdd9mBQRGA4u-aioAsdqw.crl (hash: AmW9SskYp5qNYp5ds3NYPfKnA5ThiqonIkyKNmE3NpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:99:f8:0e:7b:4e:11:2e:14:e1:4b:e2:ff:55:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef58f8572bdd77d981411180e2ef9a8a802c76ac
Validity
Not Before: Apr 29 10:00:25 2025 GMT
Not After : Apr 30 10:00:25 2025 GMT
Subject: CN=ebcfdda84604b63916169c1c3b3301c7af72837c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:46:05:11:7c:f2:c8:5f:e7:9c:87:f1:5e:bf:
43:44:8d:56:3b:3c:fb:98:1b:25:a9:8d:01:9e:a8:
83:ca:34:f8:12:9e:9a:b0:fc:ba:12:f9:1d:59:86:
8e:85:ae:59:2c:06:2f:25:a7:04:1d:b8:92:70:11:
f1:ab:34:56:5f:0d:3d:51:c2:4b:e6:19:04:01:be:
9a:89:d0:20:03:39:83:a8:ea:2f:68:fe:a1:68:33:
86:32:7b:b9:42:c3:d0:d8:9d:34:a1:3d:f3:61:d5:
f9:19:5c:3d:c5:71:d9:2d:8d:3f:64:80:fa:21:0c:
6b:49:fa:aa:1a:3a:b5:07:50:83:5b:ef:a1:ee:ac:
bc:50:65:64:f8:21:10:7c:9f:84:32:83:6e:b3:e5:
ab:2f:b9:2b:f1:89:9e:45:26:62:a2:13:3e:ec:1f:
42:55:c3:4c:ef:38:94:26:c5:c1:f6:30:e4:8c:75:
c4:b3:73:36:34:64:d5:d2:0d:3c:77:9c:6e:0c:f7:
dc:d3:63:3b:56:11:3a:33:8b:79:66:89:13:0f:46:
8f:cd:1f:04:dd:db:fe:c4:f6:54:bb:7b:46:9f:9b:
42:a2:e6:15:da:60:41:39:8d:28:f6:90:44:0d:99:
5d:0a:ba:93:55:a3:39:92:9b:93:48:66:a4:32:c2:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:DD:A8:46:04:B6:39:16:16:9C:1C:3B:33:01:C7:AF:72:83:7C
X509v3 Authority Key Identifier:
keyid:EF:58:F8:57:2B:DD:77:D9:81:41:11:80:E2:EF:9A:8A:80:2C:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71j4Vyvdd9mBQRGA4u-aioAsdqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9b7108-e12f-4f8a-a5e0-38e805ff4c73/1/71j4Vyvdd9mBQRGA4u-aioAsdqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:51:62:2f:62:43:2c:8b:24:7e:4a:1d:da:3f:15:e2:6c:ba:
72:19:43:6e:2d:d2:a8:72:78:e5:a9:9b:2b:d0:a8:44:e5:eb:
2b:24:8b:56:8c:c2:7e:07:36:a8:97:4d:6f:ba:22:f9:6b:07:
55:c2:7d:43:c5:c5:a8:73:1c:86:f3:e7:66:46:96:3b:c6:24:
6c:12:06:59:e5:08:fc:88:b3:9f:30:3c:92:2e:6a:98:6a:09:
ce:7a:02:b6:79:8c:31:21:e2:e3:91:c8:7d:d4:69:ca:d5:d1:
35:03:28:47:79:a8:4d:52:a7:2a:ff:4f:72:c2:e3:c6:60:e4:
32:12:1a:4e:bc:a8:33:76:70:ba:ff:8d:70:2c:40:5d:a6:a3:
fa:ea:2d:e0:5a:e4:8d:be:cd:55:f3:84:2f:d2:cc:4d:a9:da:
39:e5:08:43:1a:2c:9e:fe:71:d6:0e:21:e3:6c:7a:58:d7:a1:
05:f9:ce:10:5d:f6:d6:84:a8:9d:2e:7a:97:27:d9:5c:25:f9:
6c:8a:21:43:0e:af:ce:ab:5e:d7:8b:11:48:dc:49:cd:5d:be:
c9:57:10:5a:b8:9d:53:4b:91:a0:c2:a6:31:0e:77:48:50:92:
a7:f9:89:6c:61:a5:fb:37:28:8b:2b:53:e9:1f:21:23:90:1d:
f4:6c:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:31:55 2025 by rpki-client