Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
File: sEAqOILi-MUlQrB73sCypQ1ZgNs.mft (raw, json)
Hash identifier: gguLAe366/tmptDnkCPk77EW7mYvpq3idUJvm4TFQoo=
Subject key identifier: C3:98:1C:EF:E7:6B:99:8B:E6:2E:75:A4:E5:E9:43:73:8D:48:B9:62
Authority key identifier: B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
Certificate issuer: /CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Certificate serial: 01967E33685D28C4BCBAFD70F5EAEE192814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
Manifest number: 0DEC
Signing time: Mon 28 Apr 2025 21:00:20 +0000
Manifest this update: Mon 28 Apr 2025 21:00:20 +0000
Manifest next update: Tue 29 Apr 2025 21:00:20 +0000
Files and hashes: 1: sEAqOILi-MUlQrB73sCypQ1ZgNs.crl (hash: 32E7VaJOl4Gx4U6ebLLBdI8u6hZX3e01DvD+NlWKBKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:68:5d:28:c4:bc:ba:fd:70:f5:ea:ee:19:28:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Validity
Not Before: Apr 28 21:00:20 2025 GMT
Not After : Apr 29 21:00:20 2025 GMT
Subject: CN=c3981cefe76b998be62e75a4e5e943738d48b962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1b:41:26:72:4f:84:32:e1:a6:cc:0e:05:1d:
97:da:be:d0:7e:bd:15:ff:d6:94:e9:98:0d:6d:b9:
98:55:6a:17:c2:fb:38:b8:61:ea:67:b4:d0:72:5e:
13:d4:2d:04:92:6d:5b:0f:84:c5:b6:ed:ca:f3:27:
dc:d5:52:7d:10:ac:bc:34:1c:63:24:e0:fc:91:7b:
1a:70:8e:3d:ae:a5:aa:94:9e:43:52:cc:5b:09:28:
01:2c:eb:05:e9:f0:e9:db:ef:6f:f1:01:f3:2b:a8:
4b:55:48:bc:69:ba:d1:66:39:d0:c9:f5:c8:57:f6:
c7:99:6a:6a:c9:0c:ff:96:9e:8c:f5:a8:63:f7:70:
ee:db:18:d7:ee:ee:35:7d:22:80:51:69:14:8e:71:
93:a3:f0:e0:6a:7e:60:02:81:96:b6:e7:90:2a:cb:
07:a2:3c:89:4d:9e:a1:9b:d2:6d:1d:44:af:72:29:
ff:38:69:5e:21:d1:ee:ed:61:fc:03:39:84:73:49:
9e:4a:6f:3e:07:37:7b:c4:ac:6b:9b:be:6f:df:72:
37:57:1d:b8:f6:7a:e6:2c:b0:5a:3f:4a:2a:d3:71:
78:45:de:80:20:7f:2a:aa:4a:5d:89:4b:ed:7e:f0:
6c:7b:7e:fc:95:cc:e5:0e:87:55:64:d6:7e:a7:e7:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:98:1C:EF:E7:6B:99:8B:E6:2E:75:A4:E5:E9:43:73:8D:48:B9:62
X509v3 Authority Key Identifier:
keyid:B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ef:01:c5:a4:2b:50:7d:9c:0d:dd:03:55:f7:ba:b9:98:01:
de:29:d1:22:c2:3d:44:d5:3d:c2:f8:47:c9:0b:ba:f7:e4:d9:
bd:fa:d7:1a:00:a2:21:1e:94:21:94:e1:49:9d:6e:5c:cc:7a:
ae:8e:53:d0:0e:7e:83:4c:97:03:c8:4c:a8:6a:8c:84:32:e6:
a7:54:31:bf:a1:0e:e6:2e:0f:31:2b:8f:a3:96:0c:21:b4:19:
e5:a0:43:10:bb:a0:35:c8:b2:73:6d:a1:55:54:16:cd:d3:f3:
ec:8d:86:e3:45:60:c2:d0:f2:7b:77:2b:b3:d5:23:d9:c1:d5:
36:88:b3:99:f0:5c:c2:20:e9:04:7f:e6:7c:16:99:69:b6:f1:
73:b7:64:ce:83:0e:ca:d9:1c:54:a8:65:1c:bf:5c:8c:ee:b2:
fb:5b:6d:4b:b5:7f:d6:90:e1:e9:1c:2e:f1:db:59:ce:89:6d:
e2:3e:7c:38:15:5c:51:50:81:1c:4d:09:ae:7d:f8:e9:ee:02:
f7:31:86:99:88:d6:91:64:bd:00:34:9a:95:72:48:7d:84:4c:
fa:5b:27:10:d5:e8:ec:4b:de:35:04:7d:e9:d0:01:fe:da:dc:
e5:0c:a3:48:1b:11:57:88:97:a0:2e:9d:76:9b:ff:e0:6e:d4:
57:ec:9c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:54:19 2025 by rpki-client