Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
File: ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft (raw, json)
Hash identifier: GLLc0srB7lgy4pZiE0UF8q1a0lMiIeWm4pcZ/6U1eys=
Subject key identifier: 98:03:23:5B:05:D8:BC:DF:9B:54:D5:B1:CA:6A:43:C1:8E:E5:B0:A9
Authority key identifier: 10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3
Certificate issuer: /CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
Certificate serial: 019675D5562DE70D8C7A98D1BF83CF6F58FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
Manifest number: 0437
Signing time: Sun 27 Apr 2025 06:00:37 +0000
Manifest this update: Sun 27 Apr 2025 06:00:37 +0000
Manifest next update: Mon 28 Apr 2025 06:00:37 +0000
Files and hashes: 1: ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl (hash: EtagNWg1GL/NF2flYjZZVwtl2wLhGyf1VBZHrnpadPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:56:2d:e7:0d:8c:7a:98:d1:bf:83:cf:6f:58:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d91cca2da3386e01bbff9f467b014cea2c24e3
Validity
Not Before: Apr 27 06:00:37 2025 GMT
Not After : Apr 28 06:00:37 2025 GMT
Subject: CN=9803235b05d8bcdf9b54d5b1ca6a43c18ee5b0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:41:28:0b:01:6a:64:c4:31:f4:a5:3d:06:
4d:d0:97:19:06:b4:4e:2c:29:1a:40:c4:a6:ba:b5:
8c:72:b0:c7:aa:0b:47:47:5b:8b:c6:44:ee:4b:0c:
ed:3a:b6:1a:1b:59:49:63:85:fd:fe:98:17:32:6b:
fe:29:93:da:8e:9d:8f:f7:74:74:b5:70:64:54:d5:
e6:78:cc:d6:36:1c:29:1e:4a:6f:4f:c6:79:f2:8c:
46:1a:22:05:88:0f:9b:bd:4a:e1:74:21:61:f1:02:
8d:70:13:17:c1:4a:a5:48:f2:5b:4a:63:3d:1a:1c:
a0:84:1c:88:b8:78:bf:33:f2:8d:c7:c9:ec:f9:7b:
50:b7:05:19:11:54:3f:d2:ad:4b:8a:3b:8f:95:b9:
98:11:4d:7b:d0:f5:26:4f:13:c2:eb:8d:02:ea:f0:
71:b9:20:93:f8:a1:88:0f:68:8c:0f:10:b0:77:c3:
47:41:07:88:8c:f0:dd:bf:0e:9f:03:74:b3:c9:62:
02:f2:ef:76:0a:62:9b:46:ea:51:a2:47:86:89:64:
08:c8:63:2f:0c:42:a9:22:ec:d2:67:9e:50:cd:c8:
3d:e6:60:4f:2d:c4:32:02:ba:e4:22:b7:f7:5d:7b:
66:2e:a6:ef:b7:41:64:1f:6e:1c:d7:ab:77:e5:47:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:03:23:5B:05:D8:BC:DF:9B:54:D5:B1:CA:6A:43:C1:8E:E5:B0:A9
X509v3 Authority Key Identifier:
keyid:10:D9:1C:CA:2D:A3:38:6E:01:BB:FF:9F:46:7B:01:4C:EA:2C:24:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENkcyi2jOG4Bu_-fRnsBTOosJOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6e444e-cec5-47f8-98cd-3b90f1134c3b/1/ENkcyi2jOG4Bu_-fRnsBTOosJOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:58:52:00:1d:94:51:66:72:f5:5e:a0:19:3c:d5:80:a0:d7:
82:40:3d:75:c5:33:38:1f:18:49:6b:56:65:af:9d:32:e3:2d:
bf:ae:7d:92:6d:93:40:0f:2f:64:92:9d:16:e9:60:37:a9:c5:
66:2e:f0:12:f2:b8:c9:ea:7f:49:a8:26:11:64:42:aa:16:06:
b4:d3:ac:f2:56:99:42:c4:11:5a:16:ac:34:15:9a:b3:dd:3a:
cc:5a:84:2c:28:ef:c4:4d:22:a9:3b:bd:3c:a7:31:18:af:50:
3b:30:b7:b9:2a:fc:8e:07:05:5b:e4:5b:3c:0a:26:b4:f9:f1:
54:ee:09:47:b1:87:58:14:80:26:8c:5b:9c:19:95:3f:11:b1:
ea:73:ed:bc:60:1e:d7:fb:8c:72:95:6c:82:62:16:36:80:d3:
c3:dc:b9:09:44:9b:97:83:b2:40:fb:f0:5b:a5:36:50:40:07:
69:f4:36:c0:92:a4:92:ca:10:de:e6:f6:21:2a:68:ee:1c:92:
dc:77:5f:5d:d6:c1:00:d6:86:20:3c:ef:03:ba:c0:c4:ad:12:
a8:e6:f0:78:77:6e:0d:38:ea:6c:4d:35:40:76:2d:47:44:24:
af:07:5a:26:ce:66:06:bf:ae:49:0d:93:a5:d6:a6:8e:f5:e9:
bb:f1:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:03:19 2025 by rpki-client