Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
File: ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json)
Hash identifier: kOMHrdjxz7b/dbVY3Gr3+v4yWjs+5v3AwTHpoIryPVo=
Subject key identifier: B0:D2:D8:EA:AD:7D:E6:F0:5D:84:FC:2B:20:D1:7A:B1:EF:96:FA:82
Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
Certificate issuer: /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Certificate serial: 0196760CC1726B765B549FA388B64AB347A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
Manifest number: 12BF
Signing time: Sun 27 Apr 2025 07:01:09 +0000
Manifest this update: Sun 27 Apr 2025 07:01:09 +0000
Manifest next update: Mon 28 Apr 2025 07:01:09 +0000
Files and hashes: 1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: Hr1bu9KV9gjXwrBonGKlmehwzLS0gyI/LvOWthyspl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:c1:72:6b:76:5b:54:9f:a3:88:b6:4a:b3:47:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Validity
Not Before: Apr 27 07:01:09 2025 GMT
Not After : Apr 28 07:01:09 2025 GMT
Subject: CN=b0d2d8eaad7de6f05d84fc2b20d17ab1ef96fa82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:83:44:8c:77:dc:df:48:a4:fb:9f:6e:3b:82:
40:a6:87:e5:2b:5e:40:fc:a9:f2:70:6d:bb:c6:2c:
a2:fd:c8:e9:9a:72:9f:d4:5b:cb:ef:d5:b5:24:91:
49:c8:14:fa:ac:fc:99:f4:8a:17:7e:04:97:a8:64:
35:ad:07:0a:ba:a2:7e:ac:b4:66:f6:b1:70:2f:29:
08:8d:13:a7:2c:1e:5c:47:09:90:c0:53:50:75:6c:
d3:c5:89:4c:b5:86:ae:fb:7e:2a:a7:24:2d:ce:18:
da:a3:ce:4b:19:80:b7:a8:d9:3f:6f:70:25:f2:13:
fa:21:57:33:dc:a0:ae:50:15:2d:52:a7:5d:15:ed:
7d:8c:b2:25:ee:f2:e0:8a:c6:bb:d1:ba:4b:22:e4:
2c:8b:73:c5:f1:02:a0:8e:59:29:f2:a7:13:7c:07:
1a:84:f1:e2:1a:3e:ac:76:bc:cc:58:86:27:c7:4f:
f6:88:ae:3a:bd:5c:17:ed:35:10:b0:d6:0f:62:db:
28:fe:d9:81:cd:82:78:a0:50:03:78:22:fe:08:16:
e9:df:5b:01:cf:c2:ad:b0:4c:c2:70:60:48:1f:05:
4b:61:e1:17:d8:7f:6e:75:00:ee:07:f6:2e:89:ac:
78:43:9e:4c:d1:04:f7:ad:41:de:ff:72:fa:47:72:
f9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D2:D8:EA:AD:7D:E6:F0:5D:84:FC:2B:20:D1:7A:B1:EF:96:FA:82
X509v3 Authority Key Identifier:
keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f4:99:36:4b:e5:71:b0:8a:68:a7:fc:5a:3e:80:a8:1d:35:
46:37:2d:b6:e4:97:c4:dd:81:d6:c0:89:02:46:87:0d:ed:80:
bc:87:78:4d:3e:f9:49:e3:a6:8d:9a:2c:e8:91:cb:f3:57:5f:
d6:70:23:90:33:78:53:e5:ef:90:4c:b6:20:09:36:4b:96:f8:
44:dc:8f:a1:29:e3:8a:23:48:7d:5b:23:10:b3:a0:ad:db:35:
31:3c:c3:47:04:0b:da:96:a7:28:b0:ef:e1:54:3c:a5:bd:8c:
59:05:7d:2c:90:8e:1d:57:ce:5b:db:b5:93:2e:24:4f:b6:c6:
98:98:ed:03:d3:19:22:c2:77:af:6b:dd:67:0d:54:dc:21:d2:
c6:b7:b3:9b:5a:bf:43:d6:b5:cd:ca:3e:5c:e5:ab:b5:87:21:
ad:8b:9e:d4:99:2e:12:0e:ba:04:2b:62:c0:e2:3e:14:83:87:
7a:b2:53:67:a8:c9:cc:0d:39:ef:1f:8a:34:9d:d9:20:84:d5:
2b:fe:e2:ed:2f:96:f8:3d:2d:46:17:8d:21:60:00:9d:f0:07:
74:54:11:eb:90:99:0d:00:dd:6c:32:8b:4c:54:5a:fe:b4:c4:
95:3f:bb:e1:d9:f8:58:8c:db:53:e2:da:1a:3e:c9:d5:ff:dd:
03:fa:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:13 2025 by rpki-client