Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
File: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json)
Hash identifier: eSuhU3dCbsIzNnu5FRfblIhZLM9rJZs6MKXjbJtvhAs=
Subject key identifier: D3:23:26:1E:67:48:D2:E1:2C:94:7B:36:29:0A:95:FB:15:B6:6E:34
Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
Certificate issuer: /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Certificate serial: 0196BEC9F9483D1748EE9B790B3703145B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
Manifest number: 0C14
Signing time: Sun 11 May 2025 10:00:29 +0000
Manifest this update: Sun 11 May 2025 10:00:29 +0000
Manifest next update: Mon 12 May 2025 10:00:29 +0000
Files and hashes: 1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: OGbGgR7s1OKKG15XVA2S0CWdqXyAt2oXI92WCbIJ810=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:f9:48:3d:17:48:ee:9b:79:0b:37:03:14:5b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Validity
Not Before: May 11 10:00:29 2025 GMT
Not After : May 12 10:00:29 2025 GMT
Subject: CN=d323261e6748d2e12c947b36290a95fb15b66e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:b4:b7:93:f1:12:04:c3:f2:e9:e3:53:69:
3b:7b:92:a6:cc:a0:ce:70:c9:78:63:80:84:3c:ef:
3b:e0:5b:4f:75:85:f0:a0:ee:cf:5c:81:95:c9:45:
7d:98:ec:94:d0:c8:a5:f7:a8:49:c5:5b:64:b7:5e:
dc:05:79:9b:b8:f6:04:02:e9:69:90:7c:41:a1:86:
d9:2f:70:0d:b7:7a:51:a5:81:9e:9e:7e:46:0e:4f:
e8:60:69:a0:c4:6a:b3:8e:f6:4b:37:ac:a8:e2:4d:
28:e9:21:c8:c0:ee:7b:e5:61:8a:f7:62:c4:a2:d8:
99:21:b2:2b:5d:12:bc:29:62:a3:af:d2:ce:40:d7:
61:f7:21:99:1b:7d:8b:26:ea:3e:2f:17:39:b1:13:
a3:86:0a:97:f7:3b:5a:40:80:2f:b5:c4:60:ba:6f:
e6:41:cc:0f:f3:05:67:b9:ce:6d:b5:dc:fa:4a:18:
ea:92:6d:88:6c:cc:82:8f:e6:52:62:1d:e6:8d:3c:
1c:eb:c2:ef:a3:e0:01:89:07:43:6f:6a:f7:aa:05:
c8:fc:59:07:8d:9b:04:0a:94:3b:cf:af:19:85:14:
02:91:77:99:8f:2e:bb:f3:4d:bd:35:17:e2:ca:72:
34:54:7e:84:cd:61:c2:d2:06:73:fa:7d:39:d7:c7:
a9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:23:26:1E:67:48:D2:E1:2C:94:7B:36:29:0A:95:FB:15:B6:6E:34
X509v3 Authority Key Identifier:
keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cb:98:34:55:cb:40:1a:6b:3a:c8:e3:92:f7:fb:eb:07:13:
51:b9:c5:78:d5:08:b3:d6:7c:8a:6e:ce:26:cc:e4:01:9b:08:
69:3f:ca:81:e5:80:4a:67:2a:35:5f:46:0b:09:e6:fb:3b:5a:
98:06:72:b0:a6:fe:b0:11:db:c0:a0:b6:09:b8:d8:29:b0:13:
ba:60:cb:20:dd:a9:f4:0b:f5:49:c9:0f:62:6c:c4:95:1c:6a:
b0:26:16:34:0a:1c:0e:d4:f3:d8:1d:82:33:1b:93:96:06:cc:
13:bb:29:e4:99:6a:cb:d4:bd:a4:4a:99:0b:1d:df:70:33:3c:
67:fa:03:6e:2c:49:a4:b7:98:2e:cf:14:b4:6c:1e:16:16:ce:
b4:06:9c:19:e2:43:da:72:d6:95:bc:9e:3c:8d:cb:67:1e:25:
1a:ff:0b:e4:bb:38:96:10:d5:c5:42:5a:7c:86:b7:7a:56:b7:
08:25:dd:4d:b0:20:9f:d9:de:39:c7:5b:67:c6:a3:0f:4b:0f:
df:1a:0c:ee:05:23:fb:ce:53:4d:0c:d3:9a:6a:15:07:8c:c4:
35:de:98:65:e9:90:25:1f:3e:18:9b:db:a6:b0:54:cc:18:04:
5e:ff:d4:cc:15:cd:30:05:41:86:d3:04:7e:22:0b:47:57:70:
c4:a3:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:28:47 2025 by rpki-client