Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: nKocjTyBITf2MgB9PvbIeEwdawVzA6lCgFYjRF6SqnA=
Subject key identifier: 90:1E:9F:DE:E3:CF:8A:DA:0C:40:3A:B0:C8:28:6D:3E:5E:A1:BB:7B
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 019685116EC0C74E75653E6926A83AF7E554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 0C79
Signing time: Wed 30 Apr 2025 05:00:34 +0000
Manifest this update: Wed 30 Apr 2025 05:00:34 +0000
Manifest next update: Thu 01 May 2025 05:00:34 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: qdnHySMXb4H6Ttz1tZmb1c7HRZAq60YIQIjLFaUYxEo=)
2: UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa (hash: +rlvmMS0hKnH04ERI3SbO3F5bnx5NVtVmXo36GJpU3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:6e:c0:c7:4e:75:65:3e:69:26:a8:3a:f7:e5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Apr 30 05:00:34 2025 GMT
Not After : May 1 05:00:34 2025 GMT
Subject: CN=901e9fdee3cf8ada0c403ab0c8286d3e5ea1bb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:e3:08:cb:a3:72:49:51:26:f0:ed:1f:2c:
ad:f6:47:85:01:3a:7d:64:01:3a:89:ba:78:76:6a:
21:4f:c4:d5:26:c3:28:d0:9d:e2:34:b5:66:0e:ad:
a6:fa:f0:4c:c5:17:2c:14:6c:7e:af:c1:6b:db:1a:
2c:78:af:d4:57:b5:2c:2d:2e:f2:2c:b0:09:1d:01:
67:c9:a2:01:0c:ff:36:8f:3a:77:8c:fe:67:ac:56:
26:54:7c:22:ef:7c:bc:16:70:60:08:d7:35:09:f7:
37:bb:7f:c4:fe:cb:eb:33:99:48:ab:84:b7:0e:3a:
7e:91:d7:5a:07:44:6b:1d:cc:7b:63:2f:82:c7:0f:
a4:0f:9e:1f:70:82:32:ab:d9:a2:dc:1b:ab:b3:8e:
5e:00:b7:be:b1:c1:d1:0a:ec:22:cc:4a:65:11:57:
b0:d3:b8:f3:92:45:3f:47:80:86:55:c6:0d:9b:b5:
0f:35:79:4e:ed:47:7e:68:58:a7:b4:e2:d8:8d:c1:
79:06:ee:76:e4:6a:25:20:49:28:b2:6a:07:9f:44:
5d:af:8e:ad:03:9b:42:16:a0:fe:4c:73:27:33:d6:
d5:39:b7:a9:55:e8:93:41:3f:c5:61:23:38:f2:3d:
ef:d7:72:33:81:88:52:5e:53:cb:92:c6:e7:c2:2d:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1E:9F:DE:E3:CF:8A:DA:0C:40:3A:B0:C8:28:6D:3E:5E:A1:BB:7B
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b8:dc:46:98:d5:78:dd:7c:b5:71:fc:0d:55:f0:f2:8f:2a:
ea:6f:52:65:cd:39:90:b5:ba:98:90:1a:f7:e5:f5:70:38:ad:
b9:a5:ed:3c:4a:35:30:30:0c:ee:f1:ea:8d:81:08:bd:05:63:
36:01:83:8a:75:04:0e:bf:39:99:3f:1c:9b:3f:2e:85:fd:3b:
aa:c8:dc:45:94:91:3c:30:3b:74:ba:cd:11:2d:9e:97:80:f4:
f9:dc:04:e8:b7:0e:88:0b:09:d3:41:fe:44:4c:83:0a:78:f3:
bd:00:54:65:18:dd:55:b1:33:a8:63:20:67:f9:be:e8:9e:cf:
5a:d6:46:dc:12:fc:6e:34:fc:7f:a0:c7:0c:10:41:05:f8:bf:
88:64:79:f0:ff:1e:99:7c:41:77:4e:df:7b:55:c2:5f:f8:c7:
06:04:30:03:8d:85:fa:92:ce:18:89:1b:2c:08:62:be:b7:f0:
eb:9e:16:23:8a:ff:a3:7d:40:a1:3f:02:94:83:ef:6b:02:5b:
17:ba:20:cf:95:b9:55:57:fe:46:18:f8:07:0a:70:5b:26:54:
e1:49:16:3f:de:4f:7e:d5:f2:2c:00:b4:36:17:fc:9d:1f:65:
b9:38:1c:2e:cd:27:fd:3c:ef:67:80:b5:a6:f0:8d:1e:04:23:
57:32:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:11:26 2025 by rpki-client