Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
File: a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json)
Hash identifier: xOVq1+pWiOUuh2jhTd+kNd/pl/VmleoKzrF+tQEoeCA=
Subject key identifier: 12:16:5D:D5:70:D8:F5:28:34:84:9B:03:73:A2:26:6C:54:DA:48:E1
Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
Certificate issuer: /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Certificate serial: 01967454EF784681B6D703C13E266D893EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
Manifest number: 150B
Signing time: Sat 26 Apr 2025 23:00:45 +0000
Manifest this update: Sat 26 Apr 2025 23:00:45 +0000
Manifest next update: Sun 27 Apr 2025 23:00:45 +0000
Files and hashes: 1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: QrqI9GlfTCt0c9ofvZbc4q2mR4nccfhGyc2/j6gHCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:ef:78:46:81:b6:d7:03:c1:3e:26:6d:89:3e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Validity
Not Before: Apr 26 23:00:45 2025 GMT
Not After : Apr 27 23:00:45 2025 GMT
Subject: CN=12165dd570d8f52834849b0373a2266c54da48e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:f6:5f:b9:8d:7b:1e:1a:4b:31:84:b7:bd:
56:8d:d5:83:ef:8f:e8:7c:87:52:eb:d0:06:41:06:
91:61:4b:1b:f8:e5:07:d6:c3:dd:7d:2f:b1:33:99:
bf:05:1a:98:79:84:72:08:ce:96:36:09:a2:aa:09:
34:d6:eb:11:9d:d0:f7:91:0d:f4:0c:89:f3:4f:4b:
3b:2b:7d:ca:82:a1:61:84:74:15:0c:a5:8f:76:f4:
34:90:6b:d2:b1:38:d5:7a:a1:18:de:58:b7:d7:0f:
7b:8c:60:fa:1f:7e:38:62:d0:3c:b5:c3:6b:68:22:
3f:40:dc:6e:82:f4:af:3a:c2:48:de:eb:fb:1a:0f:
8f:a1:dd:3b:1f:c7:bd:c8:e9:77:d4:d4:9f:14:e0:
07:b5:1e:e3:44:8d:f9:a5:0d:eb:53:54:e9:f9:57:
31:60:e1:87:e0:b3:dd:d1:ec:bb:eb:fa:bf:45:a4:
34:ed:e7:90:71:89:a5:c2:9f:31:b5:58:91:41:74:
57:95:cb:f8:e3:11:1a:ac:4e:f0:f0:cf:58:2a:4a:
66:38:29:10:d2:c4:77:5b:57:b3:2c:97:00:48:1b:
57:31:ad:ca:99:1b:03:80:6f:61:89:90:17:48:d0:
b3:e0:19:f3:31:77:43:04:da:dd:15:87:46:ce:a6:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:16:5D:D5:70:D8:F5:28:34:84:9B:03:73:A2:26:6C:54:DA:48:E1
X509v3 Authority Key Identifier:
keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:66:4d:ad:d3:6e:e4:c9:17:9a:76:53:33:41:63:88:c1:ec:
02:a3:30:c6:f4:e9:b3:f2:d8:95:85:0c:0d:0a:70:61:f3:45:
d0:bf:b6:9d:68:c9:54:70:a7:e6:29:aa:9a:51:93:8d:c7:49:
98:56:01:2b:86:cd:7d:c7:7e:58:9b:7e:e6:10:d5:6d:a2:a7:
47:76:89:03:9a:44:31:6d:90:49:81:91:4c:c7:aa:22:00:f5:
71:b5:45:27:f9:4e:31:5b:5b:6d:13:75:da:81:1e:f7:f0:84:
a4:58:7b:b8:ac:1e:02:e3:51:1b:e4:d9:a7:b6:6f:7e:2d:78:
e1:32:c9:d9:1c:d9:e9:44:bd:61:5f:5c:81:be:ba:1f:ae:bb:
bd:e8:ca:c1:fe:e5:0e:06:e7:f8:29:be:96:e2:94:8b:64:fe:
f1:c0:84:72:28:98:ca:9d:dd:74:f4:2a:4b:41:14:ea:e2:ba:
bc:f8:8b:42:65:43:2c:9e:cb:b9:a2:fb:99:48:66:11:d0:0b:
2c:dd:b5:7b:bd:52:07:9a:0e:44:c8:1b:2b:d0:3e:b2:5b:b4:
72:f4:68:7f:24:72:31:08:01:82:45:aa:cb:4a:d4:de:b4:9f:
24:5b:6a:12:2f:fd:a2:05:02:14:3f:a1:ae:70:63:66:c4:4c:
46:5c:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:44:06 2025 by rpki-client