Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier: KGEO2Cc6dRDZ53Ms43BiT/QXDc1nYeFUBhNs0YEivHA=
Subject key identifier: 9C:BB:08:A5:CC:8E:DD:79:B1:4D:9E:83:BC:BE:40:77:00:F3:17:09
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial: 0196A0888C0956D8CA9C6EE32E070121139A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number: 0BF5
Signing time: Mon 05 May 2025 13:00:25 +0000
Manifest this update: Mon 05 May 2025 13:00:25 +0000
Manifest next update: Tue 06 May 2025 13:00:25 +0000
Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: 8ipPw8OQWUbNzeNf3/c0mwGm9y00SnMfXI34voTLtRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:8c:09:56:d8:ca:9c:6e:e3:2e:07:01:21:13:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
Validity
Not Before: May 5 13:00:25 2025 GMT
Not After : May 6 13:00:25 2025 GMT
Subject: CN=9cbb08a5cc8edd79b14d9e83bcbe407700f31709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:40:6b:8c:bc:48:2b:d3:d4:82:75:80:f8:
18:de:a9:2e:51:a4:85:a9:53:17:d3:1d:f7:9d:e8:
14:b3:06:5d:09:3c:c9:0c:c8:7a:f7:cc:22:57:52:
f9:06:be:a3:b2:79:1e:ad:93:a0:9a:e4:01:44:95:
1a:75:14:75:37:0e:19:ff:51:b4:2c:d5:67:ff:f7:
cb:4d:5b:82:d5:62:ab:69:45:05:58:98:03:52:54:
3a:97:52:1f:50:6f:dc:34:9a:09:04:7f:96:29:2d:
35:2a:0c:0d:ab:09:40:a0:f1:a5:0e:c4:2b:24:63:
b9:b5:81:1e:d2:90:d3:5d:4f:ad:56:b0:81:96:77:
83:75:0a:06:68:80:f5:21:3c:a7:d9:bb:07:fa:f0:
06:fc:61:12:e6:61:dc:73:73:ff:41:a0:84:e1:60:
11:06:f0:62:cf:42:38:ac:30:a3:58:b7:d2:99:98:
ff:79:73:9b:eb:ce:f5:fd:1f:bb:04:29:28:db:7d:
fe:dd:1c:55:7b:e9:4a:59:38:7d:f5:26:0e:a8:dc:
36:0d:b7:a1:4e:3b:c3:15:0c:17:e9:2a:fd:de:5a:
d9:f9:fe:a3:30:e3:46:f7:7b:5c:b4:3e:d9:26:ad:
f1:ec:03:b2:c1:c6:59:89:0a:49:06:ed:de:75:21:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BB:08:A5:CC:8E:DD:79:B1:4D:9E:83:BC:BE:40:77:00:F3:17:09
X509v3 Authority Key Identifier:
keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:98:2b:ea:56:23:a6:7b:42:db:3c:5c:5c:4a:01:b3:d0:ec:
85:63:36:79:fe:c5:0a:e7:5c:26:9c:91:b3:e9:ea:80:c5:85:
c6:fb:71:a0:89:bd:4e:11:f6:a0:fd:1a:30:bb:85:f9:6a:93:
2f:7e:1a:66:7c:d9:b9:ec:1c:a4:00:8a:7b:b4:85:40:f5:84:
0e:33:3f:ff:f3:8c:9a:19:95:a8:4e:83:ba:68:b0:2c:4f:94:
9c:bc:8c:6b:76:1c:af:c7:5a:10:32:04:06:49:a5:92:4f:a9:
08:41:77:11:08:30:1b:cf:22:da:d7:9f:ca:cf:3e:ac:60:2a:
2a:91:e1:71:ec:c9:f0:e1:cc:9d:cd:f5:ca:4a:a6:91:04:aa:
4b:d6:15:a9:a3:29:83:da:f5:38:99:78:1d:24:93:9e:f4:b5:
a8:0a:0a:43:47:7e:8c:4b:32:15:13:7f:e3:cd:40:fb:fd:e4:
5d:d0:fc:ad:7e:4e:a8:ec:81:47:5a:69:69:4e:c5:3a:f0:a9:
fc:a9:a2:61:f2:63:17:c1:97:1f:ed:d7:aa:5a:79:a7:7c:7e:
b8:dd:83:13:78:b2:9c:97:39:d7:86:80:53:e2:98:9e:f3:4f:
43:9e:20:51:79:d4:6e:9d:3e:35:73:1a:86:4d:40:13:f1:99:
e7:66:6d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:39:41 2025 by rpki-client