Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
File: eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json)
Hash identifier: mSlkcCMRDJsbjYrfqOe6Xrr+oi64Dk6cgoMybBAAhUw=
Subject key identifier: E1:83:99:A9:69:04:56:F2:42:BE:DE:9E:85:3F:E0:E1:6B:6B:4B:69
Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Certificate issuer: /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Certificate serial: 0196CEE1E561AEE538B9AD7C8FD1007CC32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
Manifest number: 098D
Signing time: Wed 14 May 2025 13:00:32 +0000
Manifest this update: Wed 14 May 2025 13:00:32 +0000
Manifest next update: Thu 15 May 2025 13:00:32 +0000
Files and hashes: 1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: +lshDM+p2TMIZGxo3nuvXrjlnuA4q1fKtIZ8QIuXvx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e1:e5:61:ae:e5:38:b9:ad:7c:8f:d1:00:7c:c3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Validity
Not Before: May 14 13:00:32 2025 GMT
Not After : May 15 13:00:32 2025 GMT
Subject: CN=e18399a9690456f242bede9e853fe0e16b6b4b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d0:fb:09:76:a6:28:ad:f4:e1:9c:ed:7e:6e:
aa:87:fa:c9:45:2b:82:04:5f:1b:7e:bc:bc:4d:78:
30:44:73:ac:35:c5:f8:58:42:9e:89:88:f2:1b:79:
92:ec:9b:89:3e:e9:83:8f:f1:dc:c4:b0:11:7e:18:
46:44:96:82:4b:1d:2d:89:1c:91:d4:7f:8a:58:21:
9d:59:e5:16:4f:a4:72:93:cf:b2:d2:1b:7f:c7:0b:
8e:b2:32:db:d7:31:de:7a:57:5b:eb:4b:3e:fd:d2:
80:1b:94:f4:9a:99:dc:bd:7c:83:7e:86:5c:89:39:
b6:6d:93:a6:61:7d:e5:f9:94:78:13:ae:67:a3:6a:
01:07:eb:0d:d3:46:96:ea:3c:96:ab:5d:f5:5a:39:
94:e1:77:ad:27:17:16:d0:35:d8:93:59:86:59:fb:
4c:ee:87:8e:60:64:ab:fd:e2:6a:c8:96:e4:e3:24:
43:f2:17:bc:44:8e:d3:c6:35:5e:a4:90:75:2c:25:
dd:dc:f4:6b:ef:8c:26:46:2c:10:7b:9c:a0:d1:20:
f9:15:76:03:b4:fd:b7:f9:e6:19:d1:ed:12:6a:74:
12:f5:1d:b9:b0:1c:8b:8f:67:e7:29:92:0b:9b:ca:
52:e6:cb:b2:06:01:a0:f2:76:dc:4d:f1:02:cb:ba:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:83:99:A9:69:04:56:F2:42:BE:DE:9E:85:3F:E0:E1:6B:6B:4B:69
X509v3 Authority Key Identifier:
keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:dd:d2:55:b9:09:04:93:a1:4a:58:a2:44:b7:fb:96:3d:b2:
59:a5:32:a5:1f:62:23:a8:96:c0:a3:66:35:78:e0:fc:e8:59:
b3:11:d0:47:63:38:1a:9d:fc:b5:97:7b:8a:ba:c8:96:d0:57:
2c:29:c1:1f:87:0d:c2:22:23:32:b3:0a:c0:84:0e:eb:c2:c0:
53:b0:92:96:17:fd:84:2e:1b:5b:44:90:ff:40:e1:c8:c0:70:
b6:bf:eb:96:6b:17:fb:8b:82:a1:e0:ef:b0:fe:a0:92:73:4f:
c5:18:77:86:65:06:c3:fd:79:7c:a9:93:d8:93:9a:8e:8f:fa:
83:05:dc:25:53:b4:45:de:a0:14:ed:6a:4e:ff:60:ec:a3:9d:
b9:09:c5:1e:01:fe:f3:33:71:bb:9b:bc:5d:c9:c4:95:c0:89:
e9:94:ca:49:a4:27:0c:82:23:98:a8:40:21:ed:8d:c3:0f:e8:
a3:d9:51:57:2e:62:d4:04:9a:04:f8:42:06:78:a5:c4:32:b6:
5e:3b:06:8f:0c:65:51:5a:15:94:66:8f:ff:db:a8:b2:64:11:
b1:f5:17:dd:7e:0c:be:90:b8:6b:17:ec:5a:bc:39:49:08:91:
39:42:85:fe:1f:2e:7e:09:c5:9e:91:40:f2:ff:14:1f:3a:f5:
31:a0:da:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:22:02 2025 by rpki-client