Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier: AVmii047tENWYfPMocUolQ3DqIgVX1/RayXYIJojGh8=
Subject key identifier: 8F:EE:22:45:17:E8:49:16:76:89:76:38:B6:16:B0:91:5A:D1:5A:08
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial: 019680FE1AC0D9E2D811316155F08EB3F3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 10:00:58 +0000
Manifest this update: Tue 29 Apr 2025 10:00:58 +0000
Manifest next update: Wed 30 Apr 2025 10:00:58 +0000
Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: s1sKmw8MfHnEcYfKbj6fx+C4DKFOsID1Hh5v9LSatN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fe:1a:c0:d9:e2:d8:11:31:61:55:f0:8e:b3:f3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
Validity
Not Before: Apr 29 10:00:58 2025 GMT
Not After : Apr 30 10:00:58 2025 GMT
Subject: CN=8fee224517e8491676897638b616b0915ad15a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:a6:e0:f0:06:d5:15:07:c9:de:c6:0b:e0:
d2:33:78:1c:51:2a:7e:fe:ba:18:30:94:09:c9:eb:
32:9e:11:2b:4e:fb:5b:2f:92:c3:51:ed:83:01:9c:
3e:7a:ab:04:f5:db:ca:08:5c:2a:58:0c:6e:16:53:
36:ef:e5:a9:70:f3:e1:2b:06:32:ca:ca:99:48:84:
4d:52:22:ca:2e:88:68:d1:e5:d6:6e:7b:29:7e:7e:
ee:04:2e:da:07:dd:26:61:50:81:28:6a:2e:ca:2a:
c0:60:e8:a5:3a:dc:32:7c:c3:83:d7:48:e1:b0:c0:
31:01:7e:b8:32:6f:7e:31:f4:a9:0f:44:50:b1:06:
db:b5:6a:24:b5:a8:ae:9b:c8:85:61:68:d6:e2:24:
13:40:35:37:d2:c2:5f:ea:35:31:82:bd:67:9e:36:
18:eb:76:9a:b7:ee:cf:e9:29:3d:a2:1b:fa:82:b6:
4b:4f:a1:5a:f6:ed:2b:06:46:93:86:df:01:eb:c4:
19:8f:db:ee:c6:4a:98:03:bd:f8:81:fb:a7:9d:20:
1c:97:33:88:04:72:97:4a:d8:c2:42:20:ec:6e:ae:
c9:d3:82:08:67:28:56:9e:66:20:6d:d3:79:3c:b5:
84:54:41:e5:18:02:cf:89:2f:f2:cd:a7:8b:69:d1:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EE:22:45:17:E8:49:16:76:89:76:38:B6:16:B0:91:5A:D1:5A:08
X509v3 Authority Key Identifier:
keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:9f:fb:f9:0a:e6:8d:ae:f2:90:64:99:f0:c6:a2:a8:9a:92:
dc:c0:4f:92:a5:a4:51:7e:da:5a:18:2c:71:9c:11:b9:a7:c2:
8f:6a:58:42:03:8b:12:74:1a:49:ea:c3:46:5b:48:a0:72:95:
ca:0b:a4:29:14:04:bb:20:20:c1:4c:31:58:0e:aa:dc:6a:35:
7b:32:f0:f3:74:69:3f:72:c7:ba:5d:5e:c3:d4:f2:bc:e8:ac:
3d:d9:52:b1:cd:4a:bd:cf:27:71:ac:12:fc:1c:af:7f:f6:26:
f4:bf:b7:e9:c2:57:f7:1b:e0:a2:11:48:95:59:f1:02:b8:a0:
cc:d3:3d:2a:73:44:7b:28:9b:2d:f3:ca:8e:dc:05:e7:c5:8f:
17:50:4c:d4:4c:3b:dd:2c:1f:c8:3d:7f:23:c8:bb:2e:e2:a4:
24:5b:20:f6:92:ec:10:3d:e8:54:6f:42:de:f8:15:fd:45:0e:
9f:c1:3f:ed:2c:96:44:9c:53:61:36:7b:64:ee:10:df:df:5b:
8b:6d:8d:33:b1:3e:e9:94:23:c7:66:56:ef:e2:7c:3a:ff:36:
3e:d0:f7:72:4b:8b:ac:d3:0b:3d:89:5a:6d:db:dc:c1:2d:d8:
3b:6d:f2:09:04:f4:82:bf:6a:82:8d:27:69:a1:c1:8f:cc:da:
86:ba:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:18:37 2025 by rpki-client