Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File: EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier: avD6FyDprPXHDhJ3X6IaExXIPfVpOLhJR6c2djTvDVE=
Subject key identifier: B6:93:EF:AA:34:8D:1B:58:49:64:B2:B5:87:58:63:24:FA:95:5F:CC
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer: /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial: 01967868BE1A6A4A771FDEEACA1928E67A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number: 0F08
Signing time: Sun 27 Apr 2025 18:00:52 +0000
Manifest this update: Sun 27 Apr 2025 18:00:52 +0000
Manifest next update: Mon 28 Apr 2025 18:00:52 +0000
Files and hashes: 1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: GQaIn8rJ2tnA9jTwHghgMicjI5uT1HerMVEdIuk7xhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:be:1a:6a:4a:77:1f:de:ea:ca:19:28:e6:7a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Validity
Not Before: Apr 27 18:00:52 2025 GMT
Not After : Apr 28 18:00:52 2025 GMT
Subject: CN=b693efaa348d1b584964b2b587586324fa955fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:4a:6e:56:5c:05:0e:76:72:b3:6c:a0:5c:
0d:28:2c:91:29:f9:5e:ec:eb:58:32:d5:67:42:3e:
03:99:89:b0:4e:32:9f:2c:84:bf:0d:f0:42:f5:fc:
79:70:d4:df:f3:22:94:1b:27:34:19:3f:05:2e:d7:
a0:d5:81:9e:63:7d:8f:de:9c:31:7d:a2:a0:bd:8c:
50:1b:01:b3:9b:13:f0:75:10:d9:ba:67:18:c5:dc:
35:e1:ee:76:4f:bf:be:6c:fb:2e:f4:05:97:f7:89:
31:a1:b4:b2:a3:b0:2e:97:e5:f3:03:d7:3b:17:06:
bc:c4:30:a4:11:b1:4f:b1:28:9f:34:bc:d5:9d:88:
06:89:ea:e0:24:49:31:af:6f:90:d7:f4:15:8a:8c:
cf:2b:27:4d:17:bd:ff:5f:4a:81:32:94:91:d1:5d:
1f:11:48:6e:ae:34:40:e1:48:3f:5c:6a:70:83:1d:
46:70:d9:c6:2c:c0:19:3f:d0:cd:b3:76:2c:cc:31:
7c:f7:53:82:11:59:6d:61:b7:44:8d:83:c0:9e:fc:
66:7f:64:c4:70:d0:eb:d3:18:ce:d8:e4:9c:a6:68:
79:d5:4c:dd:fe:7c:09:96:5f:72:bd:25:a4:3f:3d:
bb:e6:1b:37:67:5b:b2:1e:ce:ff:37:04:ce:44:0e:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:93:EF:AA:34:8D:1B:58:49:64:B2:B5:87:58:63:24:FA:95:5F:CC
X509v3 Authority Key Identifier:
keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:de:a5:ca:14:d4:4b:84:e5:fa:11:d8:44:03:2d:5d:c3:d5:
ec:aa:19:d2:7a:56:0e:c2:e7:3d:b2:3f:e2:39:87:e1:38:c5:
a4:3b:38:0d:65:4c:40:57:fe:e2:31:83:40:5e:9d:33:e7:e4:
a1:04:40:55:d9:82:ce:c2:39:1b:ab:08:e3:77:04:6e:5c:03:
a6:c1:4e:6e:76:87:30:1a:f1:8c:90:53:d4:8f:9a:88:fb:7e:
fa:86:90:fa:ad:b3:cf:1c:1b:fc:a5:97:91:dc:12:43:a8:08:
de:af:3a:59:54:e6:58:6a:31:d1:66:ec:11:68:7e:64:4d:13:
78:00:06:7e:52:ff:45:3e:88:1a:17:6a:ff:95:1e:0b:cb:7f:
a5:35:7c:91:98:70:98:39:0e:83:c6:1d:dc:37:6c:a2:27:d7:
bc:44:3b:5f:b2:85:97:29:ca:b7:bb:33:f4:b4:bc:d8:f1:b8:
ea:40:43:21:c6:a0:4d:6e:0f:84:ce:fc:be:dd:04:ea:e9:5d:
1d:42:fb:fd:64:e4:1d:cd:4d:03:76:2a:1f:c5:d2:07:5b:1c:
85:4a:a1:c7:da:16:47:03:8a:04:52:00:0d:c2:4c:19:2d:f8:
85:2e:21:35:99:1c:82:c8:a5:07:8e:e7:c7:a1:bc:d5:65:6e:
bd:57:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:40:46 2025 by rpki-client