Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier: Q8NMARk+2w+x5INkiFSkXU6E1O4kW8ulQtsN1t3wgzE=
Subject key identifier: 21:AE:6C:81:42:94:97:15:DF:D4:7D:C3:27:C3:5B:04:87:C3:CF:C4
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial: 0196789FB80611C81D4DE597E83D104AC098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number: 088F
Signing time: Sun 27 Apr 2025 19:00:55 +0000
Manifest this update: Sun 27 Apr 2025 19:00:55 +0000
Manifest next update: Mon 28 Apr 2025 19:00:55 +0000
Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: MzUbYrR595gEqOv7YhdbCXgcBSIOGA4djPGZC495UXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:b8:06:11:c8:1d:4d:e5:97:e8:3d:10:4a:c0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Validity
Not Before: Apr 27 19:00:55 2025 GMT
Not After : Apr 28 19:00:55 2025 GMT
Subject: CN=21ae6c8142949715dfd47dc327c35b0487c3cfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:79:0b:4d:c1:49:6e:2e:12:96:d6:98:ee:
c8:71:0a:31:fb:cf:71:dc:5c:ea:2c:3c:e2:c6:0a:
40:1c:6a:2a:6a:b0:fe:47:40:03:b2:ee:c7:1b:fc:
49:e0:8c:e8:0b:f4:2b:cc:fb:9d:8f:e5:b9:3f:83:
b1:02:9e:81:77:12:fd:59:76:65:60:5c:27:39:8d:
cb:d6:12:f6:5a:e2:93:a4:15:0e:18:8e:e2:fa:0e:
7f:35:f4:b4:64:74:22:5c:2a:dd:de:4e:d4:a3:c5:
65:4e:4b:c5:12:5e:80:ce:1b:d9:dd:36:f1:a0:d0:
9d:aa:9f:81:91:e7:56:c1:d9:2f:37:ca:4b:89:7c:
ea:85:bd:72:e8:29:21:20:54:51:06:40:04:9d:a2:
21:57:fd:a3:71:7d:8e:1a:d1:b0:20:e7:fd:50:07:
45:87:fd:8b:aa:a5:b0:1f:34:05:50:e7:10:7a:2f:
62:aa:38:4e:6f:50:7f:0d:3d:ba:cf:2f:88:e0:82:
6a:1d:41:e6:16:27:c5:13:cd:0d:32:7f:9d:79:83:
6c:1e:e6:51:8e:c5:9b:d0:47:89:39:ee:bf:fa:5b:
17:49:1c:91:dd:b9:43:1e:0d:4c:bf:48:87:68:f5:
ea:a0:d0:f7:b0:b7:2d:07:ff:f8:94:d7:a8:7c:4f:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AE:6C:81:42:94:97:15:DF:D4:7D:C3:27:C3:5B:04:87:C3:CF:C4
X509v3 Authority Key Identifier:
keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c4:a5:ac:d1:e6:1e:50:62:ef:17:8e:32:83:40:59:13:be:
dc:60:87:98:e6:ff:e6:d1:89:64:2a:3d:49:71:c3:7e:c8:e4:
77:09:ad:1b:cc:7b:a2:ed:6e:18:87:2b:6d:09:aa:45:59:ce:
cb:f2:c3:c5:a3:0b:4f:22:6c:87:64:4b:45:f1:52:0d:7a:db:
80:b1:3b:b4:1d:54:cd:53:63:45:fd:28:17:bc:cb:62:6f:01:
31:6c:91:e3:64:c0:78:25:22:f1:30:bb:90:cb:58:04:2f:b9:
81:aa:f2:e6:1b:c0:ab:75:23:d7:95:c0:53:1c:ef:11:50:03:
a1:cc:57:6e:f0:29:47:22:31:ac:0a:72:79:68:cd:b4:08:26:
49:35:05:09:ec:79:d4:29:db:08:65:3b:c4:94:d2:e5:78:90:
a8:c6:be:5d:51:94:0e:af:82:df:0b:ba:74:7f:88:8f:62:5d:
c3:ea:89:d9:83:d6:c1:08:f6:44:40:bf:16:26:e7:ba:c0:38:
36:17:8f:53:60:d8:71:03:65:e8:d3:70:f4:4d:0f:de:23:99:
69:ac:51:f6:38:1d:de:e8:63:8a:d5:63:76:dd:47:80:c5:84:
9f:b6:aa:3b:21:6d:6c:7e:50:b2:d5:cb:59:98:c1:a6:43:f3:
d2:1c:22:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:09:20 2025 by rpki-client