Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File: e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier: PIrQXnlJn7k/zN6QI1oVnWfq+Mvi0wI1kSXFKhwUM/8=
Subject key identifier: B9:E6:E9:87:A8:39:16:4F:EB:7A:85:67:53:1E:73:59:B0:A8:83:9F
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer: /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial: 019681A3315B54B900EC11A8DD2961C895FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number: 150F
Signing time: Tue 29 Apr 2025 13:01:17 +0000
Manifest this update: Tue 29 Apr 2025 13:01:17 +0000
Manifest next update: Wed 30 Apr 2025 13:01:17 +0000
Files and hashes: 1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: /JFqlDR1nGhGkyBd2JqBOctvn4AhmNJH1K6kSvyWM38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:31:5b:54:b9:00:ec:11:a8:dd:29:61:c8:95:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Validity
Not Before: Apr 29 13:01:17 2025 GMT
Not After : Apr 30 13:01:17 2025 GMT
Subject: CN=b9e6e987a839164feb7a8567531e7359b0a8839f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a1:3b:c0:f0:3b:fe:f1:d1:af:62:9c:91:3a:
0c:5d:cd:fc:ad:57:45:22:03:5f:c3:a6:91:40:fc:
27:9a:12:90:38:87:f9:db:f1:79:6e:25:99:b6:22:
f9:b3:b4:ae:a6:63:5d:10:27:bb:21:13:2d:0f:85:
ba:8e:e4:5f:b9:43:27:59:ab:bb:38:2c:e2:e4:63:
60:72:2a:67:5d:fb:d5:6b:9d:d4:4e:a8:13:00:8b:
a4:e9:02:5e:df:4d:33:cd:2f:ee:72:be:c4:80:61:
b4:d0:f9:5f:93:ac:8c:f0:ee:05:49:41:95:e8:25:
3e:c4:b9:3b:11:a1:fc:75:8f:5b:a4:b3:f4:5c:bf:
8f:38:b0:3d:1c:8d:9c:64:03:0a:57:1a:71:f2:ee:
93:00:d7:02:db:e5:db:2f:e4:a7:48:61:fe:d3:fe:
ef:18:9a:e9:5f:93:36:f0:b8:d1:a4:15:0d:7f:2f:
a0:80:b0:10:3c:dd:28:52:9d:c9:cf:ca:a7:55:78:
4f:d1:7b:05:75:65:98:8c:04:ad:6f:86:a6:fa:ec:
1a:5d:89:14:bd:d4:e5:5a:90:21:48:03:17:48:87:
00:cb:2d:85:a2:f1:7e:8f:af:fb:cb:80:80:9d:6f:
70:f1:8e:9c:41:8d:f6:b5:a6:0b:9c:f4:83:f2:8a:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E6:E9:87:A8:39:16:4F:EB:7A:85:67:53:1E:73:59:B0:A8:83:9F
X509v3 Authority Key Identifier:
keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:18:37:3d:4a:05:ef:48:e1:ce:75:6e:eb:04:be:18:7b:52:
ea:fc:20:16:f0:5b:42:1e:86:e4:cf:55:75:db:f2:e2:24:97:
e1:48:32:5d:8e:9d:09:0d:7b:83:29:1d:2b:ae:9c:ba:21:d7:
12:3e:87:8b:9d:72:3d:1e:e4:52:83:3a:ac:ac:04:9c:d1:2f:
5c:82:e6:f3:d3:5c:34:c8:3e:80:a1:83:5b:cb:53:55:62:a1:
b5:58:00:f6:f6:f0:84:4c:c0:59:4b:9c:5f:5c:f2:64:26:f6:
98:c6:55:b7:35:40:47:31:fa:f9:f2:a7:6d:7a:97:d8:8f:a1:
fa:18:04:76:ee:3c:ba:19:a7:5a:f3:55:45:1a:ea:90:b5:2f:
05:ca:ca:14:50:9a:b7:47:9a:1f:85:18:9b:ac:65:2d:a3:91:
86:0e:4e:63:ca:44:51:c5:eb:80:b6:7b:60:74:e8:07:e9:d4:
08:a3:60:d1:f0:4d:ee:1a:eb:02:04:f4:44:0c:2c:5a:ed:25:
e8:8f:77:43:e7:d5:b0:50:eb:2a:30:9d:d9:f2:d9:c5:28:3b:
ff:37:1b:94:c3:5f:8d:91:1d:8b:42:3c:8b:e5:ed:4f:6c:29:
2b:fe:fe:f6:16:0b:ca:0c:b4:28:bd:bd:75:72:12:e7:dc:7d:
cd:a9:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:37:44 2025 by rpki-client