Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier: Pz22hBlmEs19U29w2rEUZtWnIf0Rl6MpKHDXx4h0Kvc=
Subject key identifier: 94:50:8F:E8:06:5A:F9:B5:0A:BB:A0:C4:BE:96:16:A7:97:3F:9B:C9
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial: 019689255025702D4B21FFDC4F667CDCB9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number: 037B
Signing time: Thu 01 May 2025 00:00:45 +0000
Manifest this update: Thu 01 May 2025 00:00:45 +0000
Manifest next update: Fri 02 May 2025 00:00:45 +0000
Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: nDXdrfO7cQJBKp8MVLuM/AmRSHHT0Mfq7N4xjzLnrRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:25:50:25:70:2d:4b:21:ff:dc:4f:66:7c:dc:b9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Validity
Not Before: May 1 00:00:45 2025 GMT
Not After : May 2 00:00:45 2025 GMT
Subject: CN=94508fe8065af9b50abba0c4be9616a7973f9bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:69:68:22:47:fb:09:c2:84:89:e5:bc:b2:
b3:c1:64:71:f0:06:1c:a3:0b:d5:92:ff:4f:7f:84:
e7:a5:6e:f1:42:87:d5:4b:8d:59:3a:da:42:ab:64:
f9:0b:9a:de:2a:e7:3c:c9:6c:6d:65:ac:5f:d1:47:
a2:22:cb:7d:c5:6d:63:58:33:c0:6b:d7:38:66:ff:
a4:c7:ff:f5:7e:4e:d2:60:db:64:23:89:89:0c:cf:
5f:4a:3a:4e:03:22:f0:8a:af:e0:eb:ec:7f:d6:97:
bf:58:a9:d6:bd:d0:9f:d0:3d:48:87:a9:8c:13:58:
1a:84:76:36:23:65:6b:8f:1a:7d:90:ae:b8:6a:63:
b7:33:a1:6c:85:0d:9d:ad:f7:e1:80:06:0c:db:a3:
c1:bb:8a:ca:40:1a:10:25:bc:7c:fe:9d:22:02:d4:
1b:70:8c:8e:c4:a8:b7:f8:d6:94:0b:03:f5:f1:ab:
ff:a1:f4:da:d3:f4:6f:a3:98:59:bb:ab:2e:a6:c8:
a0:66:12:5c:4e:59:41:f5:3f:6f:4d:c1:e1:1b:ad:
11:f0:66:55:55:9d:20:c4:b5:3b:c2:02:d2:01:8d:
85:03:98:c9:72:63:19:6b:70:42:14:4d:b0:2e:16:
9f:e9:d1:43:33:3d:0d:13:49:18:b1:a3:41:64:d9:
e8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:50:8F:E8:06:5A:F9:B5:0A:BB:A0:C4:BE:96:16:A7:97:3F:9B:C9
X509v3 Authority Key Identifier:
keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:22:21:60:16:64:fa:f6:3d:bb:3b:9c:8d:5d:46:f5:12:fd:
c7:db:a9:06:b0:4f:61:c3:9c:be:4f:aa:7d:6a:d2:0e:52:72:
6e:41:19:85:85:cd:52:ec:52:ee:bb:87:8c:35:71:69:4e:1f:
0b:ff:52:7d:42:79:73:63:64:0a:22:9c:0b:ed:59:a1:b7:02:
2c:94:a1:a2:5b:ce:55:a3:2b:40:c7:6a:88:c3:44:d6:45:57:
09:dd:df:03:a6:a1:ba:68:65:28:07:19:dd:f0:2d:67:2c:bd:
9c:30:18:68:84:c6:80:b3:fa:91:fd:39:fc:f1:56:02:b1:55:
e6:ac:75:09:2b:0e:a3:0a:f4:2d:92:92:27:43:80:82:88:68:
be:3d:ee:cd:1a:4a:02:8e:4a:d9:4f:4d:88:f3:b1:3a:7b:a8:
5f:3f:2e:3c:8f:40:3c:40:0e:d8:48:ba:2f:c0:5c:14:9f:44:
87:81:85:be:23:45:7f:8e:e1:aa:15:38:9c:b7:c7:e5:87:17:
a4:43:9b:06:9b:b1:d2:0e:bd:88:92:46:80:e8:87:22:6e:13:
48:9f:22:8c:95:97:74:6f:30:a9:be:4c:90:fa:d5:9e:f2:83:
68:b1:84:1c:d5:ba:ce:2a:85:9b:f3:09:34:67:c0:db:37:28:
cb:bd:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:09 2025 by rpki-client