Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
File: ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json)
Hash identifier: hbEZIIy6M3i9fb2osHRRfNKFHzROV1QqZ+RP9t4yNjg=
Subject key identifier: 38:53:1A:13:2C:03:32:B0:FE:6B:D5:51:0F:15:46:7E:71:50:B4:D7
Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
Certificate issuer: /CN=79c20648798bb6536b23a4ebc588045415f96e80
Certificate serial: 0196767AA917D55CAC9F508F83B64C4E03CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
Manifest number: 04C8
Signing time: Sun 27 Apr 2025 09:01:12 +0000
Manifest this update: Sun 27 Apr 2025 09:01:12 +0000
Manifest next update: Mon 28 Apr 2025 09:01:12 +0000
Files and hashes: 1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: /TaQ6jbh/cWZX9TqCOyxuedPImgyDCLdYRiobryyXPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:a9:17:d5:5c:ac:9f:50:8f:83:b6:4c:4e:03:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80
Validity
Not Before: Apr 27 09:01:12 2025 GMT
Not After : Apr 28 09:01:12 2025 GMT
Subject: CN=38531a132c0332b0fe6bd5510f15467e7150b4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:c4:65:8c:c9:ba:11:f6:16:d2:ba:26:aa:
43:0f:e1:18:0a:55:49:71:4d:7b:8e:c5:ee:7a:99:
de:ff:6a:8a:66:ea:1a:52:b5:48:52:ee:a2:88:32:
d0:c3:58:05:01:84:c1:67:af:3e:e5:e8:ee:06:b3:
a2:f1:9c:35:10:70:a5:62:3e:03:6d:ad:08:28:3d:
a9:10:9c:bc:84:ed:49:b2:a3:02:3a:de:7c:6b:9e:
00:29:16:3a:02:bd:9e:d1:b1:f6:21:a7:5b:86:87:
53:7f:bd:dc:85:bc:cf:f3:66:d2:f3:14:d2:8f:a0:
39:35:05:19:36:7f:d1:81:cb:93:0f:55:ea:d1:94:
75:24:07:b4:62:e2:b2:71:11:6e:eb:f8:5a:bc:d9:
f8:7c:73:e7:fe:c2:7f:fe:db:ea:55:dd:94:c0:7b:
23:5a:ea:27:5a:23:b0:c1:98:1c:33:5f:c5:94:5e:
e1:5d:c1:31:07:9a:ef:39:72:32:f1:ab:6d:f3:01:
66:7f:38:45:73:11:e4:06:75:80:04:9d:89:be:44:
e5:c0:3d:60:68:71:ef:1f:61:be:c8:68:19:49:b2:
23:65:c6:84:c2:5b:5a:c1:94:4c:e4:8c:90:75:be:
0a:5f:23:8f:8d:cf:c9:22:c0:71:72:93:41:54:f5:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:53:1A:13:2C:03:32:B0:FE:6B:D5:51:0F:15:46:7E:71:50:B4:D7
X509v3 Authority Key Identifier:
keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b1:bd:33:f4:94:f1:e5:d4:22:d6:7a:be:42:ad:57:44:a1:
40:cb:bb:7a:44:e0:b5:05:2e:e0:48:cd:39:23:c9:f8:bb:be:
58:80:66:0b:36:55:ad:4d:3c:f7:07:a7:73:1b:c1:2e:cb:0b:
fa:58:3f:de:c1:ac:75:cb:5e:f4:3c:56:a4:67:49:9f:c2:26:
7d:57:38:44:3e:da:4e:73:bd:bf:d1:85:eb:95:cf:93:fb:2d:
2b:f2:5a:1b:14:47:39:ce:9b:bf:f5:0a:a3:e9:44:c7:20:c3:
08:3d:c2:c2:e3:f0:64:40:33:ff:40:a6:4b:41:8b:a2:74:7b:
72:2b:62:50:9b:9a:1d:f8:7a:3c:89:68:21:dd:ba:9d:2f:4b:
36:21:ae:bb:c8:1d:19:8a:be:d5:cd:47:f7:d9:2b:a8:4f:e9:
50:8c:61:43:ef:5c:4b:55:6c:60:54:de:15:0b:95:42:d1:44:
68:04:37:d3:6e:d1:7b:9a:5f:b1:a0:3d:c6:0b:84:14:0a:b0:
de:ce:ab:cf:de:9b:97:92:82:b8:c3:42:a3:af:b7:31:13:2f:
32:93:03:cb:c6:cf:d5:b2:9a:07:0f:a0:7b:60:6e:e0:70:58:
01:25:8d:59:2f:b9:68:44:37:29:f5:ff:5b:d9:73:bb:46:92:
54:fd:99:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:44 2025 by rpki-client