Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
File: ezR3xSqsENrC7dQXOrbZTV4k3vU.mft (raw, json)
Hash identifier: hm1/rpqLSuvNFjpvPzhTvBY3iQhExNLiayW4/ygWmwI=
Subject key identifier: 04:EC:64:96:1F:50:2E:C3:3B:8C:D6:31:1E:3A:8E:7D:00:15:30:F4
Authority key identifier: 7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
Certificate issuer: /CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Certificate serial: 0196865B12E7BC375098393FFE23FA2F3150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
Manifest number: 0538
Signing time: Wed 30 Apr 2025 11:00:37 +0000
Manifest this update: Wed 30 Apr 2025 11:00:37 +0000
Manifest next update: Thu 01 May 2025 11:00:37 +0000
Files and hashes: 1: ezR3xSqsENrC7dQXOrbZTV4k3vU.crl (hash: WZF+YnLmDFgpkk+tn08V5lDnYiuEjs74OBwoC44U7jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:12:e7:bc:37:50:98:39:3f:fe:23:fa:2f:31:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Validity
Not Before: Apr 30 11:00:37 2025 GMT
Not After : May 1 11:00:37 2025 GMT
Subject: CN=04ec64961f502ec33b8cd6311e3a8e7d001530f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:aa:01:54:a1:84:fb:dd:fd:f1:b0:02:bd:
7c:64:ec:03:7a:c2:19:e8:4c:07:51:3f:49:aa:f7:
d4:72:7a:e1:ee:5c:ee:25:07:07:29:f3:94:04:7c:
bd:ef:c0:5f:a8:3b:65:19:33:93:ec:f2:be:51:92:
93:24:50:c1:65:26:e9:1c:69:22:83:e1:2e:a7:2c:
13:83:3f:73:68:da:1c:c7:17:5e:bf:e2:c9:07:d9:
39:9e:58:f9:86:28:c9:5c:6d:03:59:da:32:6d:ce:
7d:29:2b:df:62:5d:ce:81:99:78:ba:54:b7:4a:e5:
03:c5:81:79:e4:45:69:9d:c9:9a:08:02:9f:db:2b:
13:18:61:c7:a4:7c:70:ca:f1:d7:02:1d:52:76:1a:
c3:0a:af:19:25:0c:39:69:63:27:44:0c:e0:6b:01:
48:1d:cb:e9:40:5f:8b:dd:e8:9a:3f:1f:94:d6:cb:
09:9f:b5:25:36:97:59:55:c4:cb:a4:9f:28:39:53:
46:17:4c:2f:59:83:e8:ac:04:f8:82:e2:23:37:05:
31:30:35:7c:e7:d4:45:07:d2:8f:05:37:bd:0a:70:
8b:bd:a0:0a:5e:fe:20:47:ab:a9:f5:95:49:1d:b9:
3f:73:f4:f0:21:22:d7:de:60:6d:96:65:38:7b:57:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:64:96:1F:50:2E:C3:3B:8C:D6:31:1E:3A:8E:7D:00:15:30:F4
X509v3 Authority Key Identifier:
keyid:7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:58:ab:3a:44:83:98:0d:23:b2:e5:da:bd:9f:cb:77:ae:7a:
f8:e4:3d:1c:04:0a:d4:82:43:a9:74:08:0e:d5:37:5f:a2:4b:
f4:a5:0f:f9:7c:05:3c:e5:94:e5:b9:c3:54:ba:9e:74:70:db:
20:c2:5b:58:84:71:33:83:62:e2:67:49:cf:60:67:93:67:11:
81:38:01:a6:6e:2d:04:2d:ee:d2:a8:e6:ba:31:2a:90:4c:b0:
22:17:8c:43:1a:60:dd:ca:75:cc:c4:5a:34:87:0b:0d:b6:5a:
8c:0d:ad:d9:a2:a7:73:14:cd:3a:58:02:f7:9b:21:56:97:4c:
01:9d:b5:be:6b:ba:73:17:da:00:1d:d9:b2:a1:3b:ba:9d:eb:
6c:cd:c3:c7:77:65:0d:ba:bd:ad:e6:36:07:d5:59:de:95:4f:
4a:f0:31:9a:fa:04:bd:e6:c7:b9:1e:b6:de:6d:22:65:2e:ef:
a5:f6:f4:5c:64:5e:e1:59:9d:c8:58:c6:51:a6:78:a5:23:db:
d1:fd:97:32:9a:62:2b:d2:17:22:8c:16:6b:d0:12:75:79:a0:
8c:ea:8b:9a:89:90:23:77:4b:a9:55:ef:00:2d:70:b5:81:ef:
c5:83:d9:c9:82:50:6b:fc:f0:98:6b:c4:48:5d:04:3c:bd:18:
c5:3b:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:37:46 2025 by rpki-client