
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
File: eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json)
Hash identifier: CAQQqBFv9CgmI3mCQ03vzyY79OV+VrQTlPBQ7SaUaUs=
Subject key identifier: 4B:5F:3B:EE:12:DB:DD:31:0E:4A:8D:4B:56:6D:AC:A6:28:07:76:14
Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
Certificate issuer: /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Certificate serial: 01968D01BB385B37AD8AE37FC3EF6AD29DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
Manifest number: 0BEC
Signing time: Thu 01 May 2025 18:00:22 +0000
Manifest this update: Thu 01 May 2025 18:00:22 +0000
Manifest next update: Fri 02 May 2025 18:00:22 +0000
Files and hashes: 1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: s5D4pycR95uoWJXx5TnGb43RUl1xfbnO/ymhwgJdcBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:01:bb:38:5b:37:ad:8a:e3:7f:c3:ef:6a:d2:9d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Validity
Not Before: May 1 18:00:22 2025 GMT
Not After : May 2 18:00:22 2025 GMT
Subject: CN=4b5f3bee12dbdd310e4a8d4b566daca628077614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:b0:5c:07:87:96:28:bf:8f:e8:46:e3:77:
d0:45:69:aa:2e:ef:db:c5:a5:63:2a:22:e8:6b:aa:
92:ce:fc:24:81:5f:b5:ca:85:36:4e:21:43:e6:3e:
3e:5b:39:d7:80:8e:43:db:2a:a1:6a:59:9a:60:4f:
60:57:f2:77:6d:e9:49:d4:1f:27:ac:65:9c:6b:2c:
54:65:d1:25:51:a3:f4:8a:cd:7f:9a:9c:d0:aa:40:
13:ee:cc:43:04:a5:97:9c:7a:36:83:7d:7e:ff:9b:
77:41:13:cd:fb:89:b0:38:0a:4b:68:c3:a5:fa:5a:
54:0a:93:ae:51:47:de:1e:d0:c8:6b:77:4b:f3:a3:
bb:9e:76:d0:5e:25:c7:5e:db:73:58:e0:b9:86:78:
b0:d8:9c:8d:fb:5e:7d:ce:8e:c5:18:5e:e8:90:b7:
96:46:f9:f7:0a:3e:f9:85:f4:3f:28:70:86:11:7a:
60:63:6a:df:c0:7f:31:eb:b5:9a:6e:67:6d:32:2c:
fc:4f:e3:0e:12:41:1f:b2:aa:bb:62:17:53:7c:11:
f4:20:5b:1e:81:7b:c6:bf:ac:9f:65:8c:6f:de:23:
1a:86:90:de:98:b4:55:d7:69:5c:a7:02:ad:fa:73:
97:f7:84:73:b1:46:81:f4:60:ee:c5:42:cf:5c:f4:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:3B:EE:12:DB:DD:31:0E:4A:8D:4B:56:6D:AC:A6:28:07:76:14
X509v3 Authority Key Identifier:
keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b6:b4:6a:d9:10:6e:ab:df:16:8e:ab:8a:bd:50:c5:13:8e:
56:35:a9:55:ca:da:bf:98:8b:13:04:26:f3:97:6d:a4:e6:f5:
6a:cc:d0:2b:bb:00:f9:94:cd:07:d8:b6:0e:45:e0:d9:fc:06:
d0:f8:e8:1a:d4:f6:15:76:a7:9c:b9:4f:59:b6:76:9a:0a:5f:
70:d0:81:e0:4e:51:e1:fa:87:df:a4:61:1a:4b:3e:4e:71:a6:
c2:63:6a:09:96:58:e9:27:74:f0:28:30:41:36:1f:68:da:1c:
50:35:9f:4f:7d:b8:f0:16:be:85:2c:5e:9d:71:65:07:eb:d1:
57:dc:83:59:64:f4:d5:f5:58:a3:7e:9f:31:3a:ba:29:7d:90:
a3:24:84:1c:d4:53:1f:d2:27:9f:a2:97:fb:ef:e0:40:cb:03:
65:08:85:f8:1a:3b:7c:31:78:e7:df:44:d5:cb:f3:0d:3e:c3:
da:8f:90:9d:e5:4c:ab:92:b4:10:26:b1:b7:3d:97:14:99:fc:
18:14:b1:70:40:94:b4:bb:f9:04:53:c2:74:43:0e:1e:a3:c4:
ec:7b:a8:f6:d3:d0:27:5e:02:e3:b2:95:6b:d5:36:49:4f:b4:
9d:3e:89:c6:4a:a5:41:30:df:84:f7:a7:fc:60:ae:10:fa:51:
55:85:e3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:51:25 2025 by rpki-client