Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: 8AqL9lQTvhlMKdqmPfAPDOK4ZChwLgH+orA/zgwB7Zg=
Subject key identifier: 9A:AF:E2:AA:57:26:51:6C:D6:0D:1F:96:64:D9:F4:2F:37:E1:84:CB
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 0196AE0E0109D210D1D510F29A39689E67B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 1528
Signing time: Thu 08 May 2025 04:01:15 +0000
Manifest this update: Thu 08 May 2025 04:01:15 +0000
Manifest next update: Fri 09 May 2025 04:01:15 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: v27PhxwOkzopIqHgB9uppggWX5Jz9XScywt3RFQgj80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0e:01:09:d2:10:d1:d5:10:f2:9a:39:68:9e:67:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: May 8 04:01:15 2025 GMT
Not After : May 9 04:01:15 2025 GMT
Subject: CN=9aafe2aa5726516cd60d1f9664d9f42f37e184cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:02:a6:d2:4a:58:18:ee:1c:d4:63:ce:d2:
25:03:79:f4:72:08:e1:2a:b9:df:0d:c2:1c:48:fc:
09:3e:86:38:e2:21:fb:59:60:77:50:ba:95:be:e7:
e5:5d:8f:9a:43:7d:fa:21:ba:c9:b1:a0:ab:eb:bd:
40:b7:32:ae:bf:71:a6:ca:3b:34:de:5c:71:f4:23:
36:6f:bc:9c:60:d9:b4:2c:42:18:a2:a2:cc:ef:77:
03:89:a3:0d:78:4e:74:4d:80:40:ac:e6:22:79:02:
c7:38:12:7c:09:10:5e:f2:2b:b8:bd:ea:fa:ff:4e:
e1:5c:0e:1e:89:c6:1a:0e:b7:99:59:b4:37:40:09:
db:a4:57:1d:c7:9e:ac:e1:db:33:14:e4:c8:22:c4:
22:8f:99:8e:ba:a5:9d:58:70:63:1b:f5:c7:aa:62:
46:99:73:58:46:10:e3:88:83:9f:83:53:87:f0:03:
52:27:f0:7c:4d:d0:61:75:54:1f:7d:51:0a:9f:04:
29:a8:d5:ff:77:09:ca:46:d0:88:7d:e2:5f:09:93:
01:32:b6:e1:c6:ec:c8:96:b8:f0:59:23:78:bb:5e:
60:b9:c7:06:24:21:46:51:50:ce:4a:97:98:2c:4c:
87:11:4d:a1:6a:32:98:79:e4:b2:8c:d6:a7:da:a1:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AF:E2:AA:57:26:51:6C:D6:0D:1F:96:64:D9:F4:2F:37:E1:84:CB
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c9:c9:f8:db:81:f7:9d:a6:ad:43:1b:be:a7:9d:99:b9:40:
06:72:91:f4:68:49:44:a4:70:fe:10:cb:76:d1:e1:2c:2b:e8:
fc:53:79:18:d1:de:e8:31:81:5f:2e:0e:1c:cd:e6:fe:d1:da:
e0:47:2b:b0:05:b5:d3:f8:6c:e2:a1:95:b2:f6:aa:ba:ae:bf:
49:51:57:76:91:02:d0:6a:37:8a:27:68:7e:11:13:e8:78:6d:
24:3e:66:b5:f9:79:cf:2d:d9:bd:18:a7:e2:81:95:ab:00:94:
cf:24:38:3c:ed:f6:66:9e:2e:28:8d:ee:8f:eb:ae:e0:15:11:
38:b1:1d:1a:0e:c4:c4:66:d7:6e:10:e4:12:b9:59:ba:c6:f8:
ed:8a:28:f9:0e:a5:df:bc:39:26:03:9b:92:e2:59:2a:81:13:
02:47:a1:37:53:90:9a:93:b6:d8:03:bc:84:14:0c:ac:0c:ac:
21:84:ab:13:e4:5e:13:f3:7f:33:34:13:ab:5f:53:4f:25:41:
5a:b4:44:5a:4c:cb:1a:c6:ad:6a:0d:f7:2e:bc:aa:31:15:00:
97:32:bc:c2:d3:55:62:f7:34:68:c2:e7:04:34:cf:53:ea:99:
d0:57:f9:c2:f7:62:e2:27:ef:ce:9c:80:1b:11:66:1e:62:7f:
6b:78:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:53:21 2025 by rpki-client