Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
File: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json)
Hash identifier: 5Jn0P+jKt0I61W67yI2XcAMsd+ryuI8pF/G+SAcmozQ=
Subject key identifier: D0:07:C6:7B:10:62:C2:EA:93:F2:E5:E2:9E:01:41:C7:9F:40:03:0C
Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
Certificate issuer: /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Certificate serial: 01976BF47A951CF106CF045A16EEE3F2C4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
Manifest number: 1588
Signing time: Sat 14 Jun 2025 01:01:13 +0000
Manifest this update: Sat 14 Jun 2025 01:01:13 +0000
Manifest next update: Sun 15 Jun 2025 01:01:13 +0000
Files and hashes: 1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: cDjqYp5jHe88GFvJBMHFMLrS7P3X+Ps26LPp3iNs9l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:7a:95:1c:f1:06:cf:04:5a:16:ee:e3:f2:c4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Validity
Not Before: Jun 14 01:01:13 2025 GMT
Not After : Jun 15 01:01:13 2025 GMT
Subject: CN=d007c67b1062c2ea93f2e5e29e0141c79f40030c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:db:77:ff:f0:d7:6c:a6:32:a1:b6:37:97:
e6:68:ca:6f:ca:39:d5:03:1c:a7:b0:dc:da:cf:9d:
95:53:1f:2f:fb:e4:d2:61:d8:93:fe:21:e2:67:0c:
1e:27:14:f1:ca:90:34:2e:fc:cf:ae:10:8b:57:81:
89:4b:c5:6d:64:a3:40:f9:82:fc:f9:39:dc:85:5d:
18:6d:8d:52:88:52:23:ab:51:60:62:fb:73:2a:38:
6c:dd:5a:19:1e:a1:76:2e:1a:9c:79:d5:b1:d3:08:
96:aa:b0:dd:b0:89:5b:b5:01:3a:66:3c:91:7d:02:
e4:75:06:a2:1c:02:b8:7c:a5:67:29:3f:9c:42:db:
68:45:f0:25:0f:b5:19:b8:93:e5:c6:d4:23:2e:5c:
49:3c:8c:60:a0:c0:2c:21:e9:54:d8:96:de:63:a3:
36:90:79:0a:53:08:46:87:79:d9:ec:c1:90:f6:e6:
dc:2c:a6:fc:7f:b0:2e:ac:e3:0b:4d:30:ec:ab:49:
85:f6:c3:47:22:f6:c0:8e:a0:5d:14:3b:c8:33:95:
f2:75:9c:84:47:59:eb:75:97:4f:a0:d6:a2:b8:8b:
27:68:c2:49:5f:9a:fd:45:be:06:4a:85:80:47:dd:
57:15:6c:e7:89:26:64:02:65:b8:e2:17:41:1c:95:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:07:C6:7B:10:62:C2:EA:93:F2:E5:E2:9E:01:41:C7:9F:40:03:0C
X509v3 Authority Key Identifier:
keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a8:42:95:9d:ee:39:2d:a1:24:16:22:e6:50:59:99:b3:54:
58:ed:ae:dd:c9:98:67:ca:51:9d:1b:0e:4f:e1:1d:99:46:3a:
5b:ba:81:7e:05:92:75:9c:d9:01:ab:f7:44:d0:f0:96:0f:c4:
af:49:f9:30:44:3e:88:61:3f:47:67:ba:da:56:5f:24:60:65:
6f:0c:02:4a:f1:55:63:cd:3b:12:ba:39:2d:30:f7:f3:e1:8e:
56:4b:6a:61:cc:fa:eb:e5:9e:1a:7d:9a:69:be:10:20:05:18:
bd:02:04:59:ca:22:d7:33:60:9c:cd:1c:c7:2e:fa:46:a2:9c:
e2:c8:6a:30:2b:77:99:84:91:a7:11:92:ca:98:1d:4c:61:0a:
42:c1:11:42:b5:9c:57:ec:2d:7d:07:b4:aa:9e:77:97:e9:4b:
83:2d:2a:b7:b7:2e:f0:0c:c6:47:bf:f2:d1:60:0c:9b:ba:df:
08:cf:af:3e:ac:78:73:a5:b6:5b:d1:36:54:b5:bd:37:17:ae:
85:4a:ee:83:52:98:94:d2:05:1c:61:42:86:90:91:82:60:d8:
08:89:39:42:fa:09:55:d0:be:c5:85:fd:88:51:fa:b3:c9:eb:
dd:e7:48:f6:af:66:e9:74:fb:05:18:9f:6b:85:d7:01:45:5c:
41:a1:d1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:48 2025 by rpki-client