Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.mft
File: EDJFGiYZdmtLC2LY8cMCkyblwWc.mft (raw, json)
Hash identifier: I4USO6SHIQe74qRuHPmaJOpxM1UBTfgL2Sfr/0vN+SA=
Subject key identifier: F7:8E:70:4D:19:75:10:AC:18:AA:95:EA:1F:B2:36:1C:FD:A1:1E:4F
Authority key identifier: 10:32:45:1A:26:19:76:6B:4B:0B:62:D8:F1:C3:02:93:26:E5:C1:67
Certificate issuer: /CN=1032451a2619766b4b0b62d8f1c3029326e5c167
Certificate serial: 019688EE38A9685138AC16E867A2DC331569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDJFGiYZdmtLC2LY8cMCkyblwWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.mft
Manifest number: 8D
Signing time: Wed 30 Apr 2025 23:00:35 +0000
Manifest this update: Wed 30 Apr 2025 23:00:35 +0000
Manifest next update: Thu 01 May 2025 23:00:35 +0000
Files and hashes: 1: EDJFGiYZdmtLC2LY8cMCkyblwWc.crl (hash: M6MIppZbJI2a2uNm6H2faM4QVDHYfyiPLpwPUdRmorU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDJFGiYZdmtLC2LY8cMCkyblwWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:38:a9:68:51:38:ac:16:e8:67:a2:dc:33:15:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1032451a2619766b4b0b62d8f1c3029326e5c167
Validity
Not Before: Apr 30 23:00:35 2025 GMT
Not After : May 1 23:00:35 2025 GMT
Subject: CN=f78e704d197510ac18aa95ea1fb2361cfda11e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:49:fc:6b:a6:a6:3c:a6:28:c3:51:b3:4b:
cb:06:7c:e3:00:61:2f:35:b0:39:1c:91:52:d4:dd:
69:05:a6:8a:8a:fb:c7:e2:bf:23:7f:9a:02:8a:20:
3d:f7:66:ad:8d:8d:c7:46:25:55:31:2b:14:41:85:
5b:f2:63:5f:28:e5:53:4a:15:75:2c:da:e2:3b:95:
ad:f3:9d:37:60:0a:fe:c1:33:59:da:c1:76:73:43:
7a:7b:01:2c:da:dd:d0:83:9d:1c:b5:49:56:19:fe:
0d:72:5e:d7:07:f0:d9:c7:e1:3a:e0:56:65:15:e2:
fa:34:54:70:0e:32:05:c7:b5:85:36:c8:70:7d:9c:
bf:db:52:e3:f7:2d:47:a2:30:a4:71:5c:bf:95:21:
70:f0:fc:8b:8e:5b:95:a0:d9:e9:0f:6a:f8:5d:c3:
12:43:14:cd:33:24:b3:ea:b5:c0:68:2a:2e:8c:fb:
39:d7:61:2c:8c:68:82:39:3a:1f:b8:bf:fa:f4:18:
bf:f8:19:b8:8c:32:ac:c8:1c:8c:2d:83:1e:62:ee:
23:b5:0e:50:94:be:03:71:5f:d1:34:82:12:2d:86:
9e:30:fe:3d:c1:55:39:39:c0:80:10:66:f7:2a:db:
48:db:c8:91:15:ec:97:0a:9f:73:4f:30:e7:e9:8c:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8E:70:4D:19:75:10:AC:18:AA:95:EA:1F:B2:36:1C:FD:A1:1E:4F
X509v3 Authority Key Identifier:
keyid:10:32:45:1A:26:19:76:6B:4B:0B:62:D8:F1:C3:02:93:26:E5:C1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDJFGiYZdmtLC2LY8cMCkyblwWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:15:df:b5:f2:e3:e2:a2:f0:1d:5c:d5:60:87:85:71:94:a0:
c7:29:ab:47:82:11:cb:4d:29:46:f5:a4:97:29:9f:b7:ad:5c:
f1:07:6c:06:fc:65:6c:f2:6d:b1:18:39:46:db:03:a6:84:a6:
9d:45:ac:39:07:3f:c3:54:26:46:8a:5e:f0:e4:68:a9:a3:8d:
93:38:cb:95:ad:98:73:40:63:5f:25:65:97:63:46:63:21:b8:
1b:81:cf:22:0b:00:c8:04:d8:ed:3f:10:a3:56:79:b0:22:d6:
a8:a2:d6:58:2c:46:1d:5b:ab:95:79:53:9d:ee:a5:55:27:ed:
63:c8:25:8b:5e:f7:f6:9e:06:47:5d:21:46:7b:c6:5b:ac:d7:
62:96:73:44:b9:7d:47:0b:7c:16:78:a2:70:18:95:7b:26:8f:
91:06:ff:59:63:d0:34:e3:3f:e6:50:93:98:e5:98:8d:b8:96:
f2:e3:c9:f3:96:f3:8d:46:11:66:2b:d6:19:58:76:52:47:32:
82:f5:ee:3d:87:cf:02:a6:27:19:6d:13:93:d6:00:71:54:79:
5c:d2:aa:93:03:37:d3:f0:47:1f:5c:75:7b:60:aa:f0:6a:36:
5d:b6:0c:8d:12:c2:c9:c2:05:b2:60:cf:81:0a:e6:f2:25:f7:
bf:e2:b2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:42:28 2025 by rpki-client