Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
File: ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft (raw, json)
Hash identifier: 4/HAYW1HZWcFL7invGyYUaPLl022FavWFKPXIKuGKsE=
Subject key identifier: 47:4C:35:C2:11:27:F9:79:20:02:A5:5A:84:C6:7C:3E:8B:65:5B:16
Authority key identifier: 12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
Certificate issuer: /CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Certificate serial: 01967DC571E23F966FD9E5D29ECEEB666FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
Manifest number: 0898
Signing time: Mon 28 Apr 2025 19:00:13 +0000
Manifest this update: Mon 28 Apr 2025 19:00:13 +0000
Manifest next update: Tue 29 Apr 2025 19:00:13 +0000
Files and hashes: 1: ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl (hash: 89vrGxMFl2IF2O5X2KWv/PsEG0bh1lMsuxdOen4JN9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:71:e2:3f:96:6f:d9:e5:d2:9e:ce:eb:66:6f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Validity
Not Before: Apr 28 19:00:13 2025 GMT
Not After : Apr 29 19:00:13 2025 GMT
Subject: CN=474c35c21127f9792002a55a84c67c3e8b655b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:20:59:79:58:93:6d:1e:b2:c9:db:99:c6:
b3:1b:63:9a:4d:81:45:50:f2:7d:1a:c7:bb:ed:6c:
35:37:01:3d:68:d9:48:e5:be:5f:95:01:df:9c:dd:
f8:15:d3:4f:77:da:74:c4:c9:0b:07:c9:64:8a:a5:
33:4a:0f:cd:a2:e9:a3:25:ff:d9:ad:3b:de:e7:4a:
7d:a5:e3:98:0a:08:02:69:78:62:d7:82:8c:33:b7:
e6:94:c2:91:54:06:43:30:2f:f6:a4:d1:2c:92:ef:
45:de:3b:ac:c0:5f:38:35:b9:15:d0:78:d3:ca:7c:
31:b4:1c:62:c1:3c:9d:92:5b:a1:3c:d6:76:d4:eb:
0f:f8:62:14:5f:56:40:d3:b1:78:4c:5f:28:97:03:
b4:37:6e:ec:ac:16:ee:c8:8e:86:fb:f2:f2:cb:a7:
51:d3:fe:25:4d:b9:13:7d:0d:11:74:67:48:aa:2d:
5c:b2:ea:92:a0:16:4a:61:b4:29:46:1a:aa:c2:75:
e3:36:21:05:7e:b6:85:4c:ab:ae:76:66:dc:66:18:
3d:b5:fd:dd:60:15:81:1a:b5:61:9c:35:89:18:3c:
91:12:cf:67:55:1a:25:5a:17:e3:1f:76:8d:98:db:
43:be:5a:6e:1d:51:37:92:ce:6e:4d:45:3f:79:3c:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4C:35:C2:11:27:F9:79:20:02:A5:5A:84:C6:7C:3E:8B:65:5B:16
X509v3 Authority Key Identifier:
keyid:12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b1:c5:ac:7b:ad:eb:08:c1:50:9e:8a:7a:c4:73:66:58:ee:
8f:8a:e6:ae:e9:05:34:f6:e6:6d:66:8e:e6:8d:08:c2:d0:14:
38:50:e7:d7:78:19:03:b7:66:d2:a9:c8:42:51:a9:85:04:f3:
62:c1:ed:29:31:64:f9:55:9f:0f:7c:b1:d7:7c:12:6f:93:b0:
50:ef:d3:3d:05:c1:3e:6c:6a:dc:15:2f:8d:95:c6:c5:63:30:
ca:16:c8:14:df:c4:9e:0d:0d:19:79:8b:f6:da:9c:ea:36:10:
5d:29:ea:d7:3b:6e:aa:66:45:97:89:0d:0d:06:c8:b8:3e:57:
f4:3d:d5:b6:30:8e:36:c4:7a:a9:96:e2:7c:23:7e:d7:56:22:
17:06:94:e7:05:42:b0:15:ee:4d:83:b2:24:71:ca:a5:21:a4:
c5:16:61:1c:14:0d:3f:eb:91:46:53:18:7f:d1:bc:29:22:9e:
f3:e0:24:bd:58:6d:3d:b9:4e:7a:ad:e9:b9:42:52:10:3c:1b:
40:20:4c:c3:2e:4a:1b:d4:1d:23:e0:f4:04:01:4b:da:ff:20:
48:f7:ef:37:ae:61:ad:48:5b:c8:c5:c4:6f:4f:6f:66:19:37:
02:dd:04:a8:fa:67:2e:3e:21:96:2a:6d:1b:14:fa:0d:11:88:
c0:4d:c0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:35:03 2025 by rpki-client