Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier: 6roWE6pSzJd1Fk9dZ35WjYgGUB4hVez7+wbNssrzBkQ=
Subject key identifier: 02:1F:F7:FB:A1:DC:DC:69:54:E8:99:BB:CE:82:84:CB:A8:9F:AB:1F
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial: 01969115DBCAD8D6F512F987AF428A287D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number: 05A3
Signing time: Fri 02 May 2025 13:00:50 +0000
Manifest this update: Fri 02 May 2025 13:00:50 +0000
Manifest next update: Sat 03 May 2025 13:00:50 +0000
Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: rkDYtA9NYXXQB5XOYCPL9SVOYmoXZ4EC0VdQ1ncgufM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:db:ca:d8:d6:f5:12:f9:87:af:42:8a:28:7d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Validity
Not Before: May 2 13:00:50 2025 GMT
Not After : May 3 13:00:50 2025 GMT
Subject: CN=021ff7fba1dcdc6954e899bbce8284cba89fab1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:89:dd:ae:47:b7:95:d5:37:16:3d:15:e9:
20:d4:fd:77:ac:b0:24:7d:ec:5a:3b:dd:1f:c4:b4:
60:02:16:88:42:e7:4f:2b:26:10:0a:3e:3b:88:14:
31:ac:ed:f0:14:a6:b6:1c:57:24:64:b2:d8:12:99:
aa:52:64:5d:8d:6f:90:c4:af:f3:89:17:cc:a8:d1:
d9:58:35:4b:9e:da:ac:11:b2:59:e2:83:77:75:49:
20:e7:96:ce:20:24:0c:b1:2a:1e:eb:e6:e4:f3:69:
d5:9f:02:4e:d5:91:60:11:2c:0a:01:ec:0e:fb:f7:
a2:2c:07:ae:6f:4f:13:11:00:bb:34:98:2a:1a:fe:
d4:9d:b8:ca:ce:70:dc:40:c6:29:de:30:96:93:c1:
4b:9e:81:25:b1:f5:e3:2c:ea:27:a1:61:db:1d:b5:
72:7a:7f:0f:ab:95:f3:15:43:ba:1f:91:40:cf:d0:
ca:36:e9:9d:5c:27:a0:12:24:27:e0:b0:30:e0:b9:
e2:97:9b:f7:90:c9:e7:1b:e1:f2:97:fa:19:51:04:
51:08:f7:55:d8:95:ae:07:8b:28:d1:dc:56:12:14:
62:62:46:7f:f2:07:dc:6b:df:e8:0f:0f:1c:d0:42:
be:40:04:69:e5:03:8c:c8:29:25:37:fe:82:50:30:
01:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1F:F7:FB:A1:DC:DC:69:54:E8:99:BB:CE:82:84:CB:A8:9F:AB:1F
X509v3 Authority Key Identifier:
keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8b:c7:98:93:9f:5d:9f:11:6b:6d:2f:51:b7:42:4d:79:d6:
d9:5a:7e:03:74:7f:a5:5e:3b:e3:0e:39:8a:0d:90:98:13:fe:
c3:3b:07:c9:fb:a4:f9:6f:35:e2:e4:7f:f0:ff:f3:dc:7f:29:
fa:54:c1:de:50:51:a7:a6:6b:ae:ea:fe:ce:85:ff:a7:fd:7d:
92:de:5d:33:94:ba:5e:17:99:f1:87:3e:61:3b:8c:34:eb:dd:
2e:7f:fa:45:8e:89:1d:0e:bf:34:bc:e0:92:bb:03:ae:2b:c8:
f5:48:93:9c:28:c5:d2:a6:c7:b2:ef:e6:64:c1:05:77:fe:df:
30:c8:68:c5:90:b8:28:30:08:29:9f:f8:33:60:c8:15:85:0d:
a8:4c:cd:cd:88:09:7b:f8:48:22:7c:6d:36:48:20:c4:ed:9b:
e2:c3:db:46:94:d4:a5:f9:6c:70:2b:f5:4b:8f:6a:e4:e3:eb:
03:4e:f3:7f:ff:70:8f:b9:26:e0:02:ae:ee:e9:9f:47:98:e5:
eb:ff:1f:e4:76:12:d8:18:0e:bb:ff:6b:c5:54:bb:25:77:91:
c5:81:42:e1:54:c9:2e:4c:25:75:35:66:6e:46:fb:eb:e8:3c:
bf:17:a2:80:74:81:7e:4e:46:b7:90:22:72:04:76:44:fd:a6:
0d:5d:91:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:27:15 2025 by rpki-client