Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: WAj+Z/YYZVY7XaFqeMCybDvuPttI01wM4NKO1DAFRGs=
Subject key identifier: 33:C9:8A:91:6F:B4:72:29:CE:61:2C:64:16:08:9E:9F:9C:9F:27:C7
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 0196A50A5B7F513393AAF474832682CFBC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 1524
Signing time: Tue 06 May 2025 10:00:41 +0000
Manifest this update: Tue 06 May 2025 10:00:41 +0000
Manifest next update: Wed 07 May 2025 10:00:41 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: x+Yw6hRb05U2LptUgZD6QfZB1dHSY6/R4dJ0l2fJS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:5b:7f:51:33:93:aa:f4:74:83:26:82:cf:bc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: May 6 10:00:41 2025 GMT
Not After : May 7 10:00:41 2025 GMT
Subject: CN=33c98a916fb47229ce612c6416089e9f9c9f27c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:02:68:f1:29:d2:11:d5:f0:de:03:c0:72:
2e:65:ff:cd:5b:32:d8:74:8b:4a:ac:ae:5f:50:b6:
23:0e:af:14:28:c4:15:17:32:9d:e4:a5:d6:d5:92:
20:46:aa:0e:a5:54:ef:22:30:07:8b:a9:c5:f1:fa:
9a:97:c7:d7:de:76:77:04:e5:af:33:26:5b:3b:9a:
4d:c3:ef:74:ea:cb:e5:cc:20:a4:99:8c:42:54:52:
22:dc:72:86:0e:c1:98:b8:73:40:04:d0:aa:6a:9e:
c8:36:0b:82:cb:4d:17:68:de:43:b9:93:92:23:5b:
51:cd:8f:4e:38:b3:20:84:97:59:80:9d:d2:92:b7:
f7:4b:fe:0e:e2:cc:67:13:dd:8f:ad:a6:73:ea:67:
4f:1e:b0:75:3d:58:87:93:f6:14:a3:08:1e:bb:7d:
bf:c0:40:ea:fb:7c:28:29:98:43:f5:d3:44:b6:ed:
ee:0e:21:88:e7:1b:9b:a1:d6:d2:19:42:6d:9a:ea:
8d:b5:cc:e6:0a:ef:dc:9f:d7:ae:7a:d2:48:da:7d:
5c:d8:3a:fa:f9:e0:ab:f0:f9:dc:5f:f1:d1:fe:53:
c5:7d:9e:e6:0f:d4:b9:da:65:97:67:a6:13:52:e4:
af:9f:92:83:d0:20:fe:b8:60:43:2d:22:fa:96:e6:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C9:8A:91:6F:B4:72:29:CE:61:2C:64:16:08:9E:9F:9C:9F:27:C7
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4a:94:a4:77:1f:81:f1:e1:94:1b:4b:0f:37:96:ea:e5:9a:
03:0f:44:49:6a:7d:8e:91:8f:23:92:c5:30:f5:43:35:fc:9f:
f8:cf:2e:81:00:f2:90:18:a8:23:c3:b2:81:c3:27:db:be:25:
b0:5e:a4:b8:ab:3a:11:67:44:58:eb:1c:ea:fa:c2:cc:6e:c7:
e8:2e:5c:ad:27:e0:23:44:8e:75:da:9e:e6:f7:6e:86:56:96:
a5:73:19:34:8b:6b:b2:48:e9:17:4a:3c:84:ba:ff:55:a5:13:
0c:e2:b9:bc:b9:21:1b:f9:25:73:9c:eb:76:22:8d:5a:fe:d2:
0d:02:82:8e:05:3b:b0:ba:4d:e2:a4:fd:b6:bf:2c:d1:a5:1d:
04:5d:6f:38:b5:28:54:03:1b:c8:e5:1b:6b:1b:81:c2:1a:cc:
27:03:af:2c:60:72:b5:7a:a5:b9:f6:0f:22:04:81:b6:44:31:
3b:9d:e8:55:41:3d:8b:0c:fe:ca:9b:1a:54:d7:f7:16:f0:b5:
99:c3:a5:6a:22:f2:1e:88:3c:03:bb:f9:e9:ea:bb:a7:9b:28:
8f:b9:d1:bc:54:64:88:d0:9d:70:b3:1a:ea:e5:dd:6f:e7:49:
11:6d:e5:81:20:b5:c1:36:9b:c9:48:b5:47:12:cf:43:2d:e8:
1d:29:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:57:17 2025 by rpki-client