Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier: DsqiYQKsIBTMPsx4tCzou/1V8/tItZa7aEXmj9aGM60=
Subject key identifier: DB:3B:A5:BE:44:45:9A:C7:44:6F:0C:0A:A5:30:8F:84:08:C8:2A:DB
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial: 0196AB7A34052AAB307F30E40EFA2AC81B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 16:00:34 +0000
Manifest this update: Wed 07 May 2025 16:00:34 +0000
Manifest next update: Thu 08 May 2025 16:00:34 +0000
Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: n8kNYFhZ548eN4oMwuu2NJ0fdBjH3Jt8x3zeQeAXPP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:34:05:2a:ab:30:7f:30:e4:0e:fa:2a:c8:1b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
Validity
Not Before: May 7 16:00:34 2025 GMT
Not After : May 8 16:00:34 2025 GMT
Subject: CN=db3ba5be44459ac7446f0c0aa5308f8408c82adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:b6:97:b2:e2:fe:71:ee:75:30:87:6f:18:
7e:96:57:05:2e:d3:6a:c5:de:81:af:99:d3:70:28:
87:af:f7:e5:2c:87:b0:a9:e3:bd:e1:79:aa:40:51:
a2:f1:b9:a9:a4:19:81:6e:c6:d8:8f:f8:30:3c:cc:
ba:6a:b0:fe:18:25:51:e4:2c:bd:d3:b4:1f:e2:fe:
9f:c5:3e:a7:a7:55:52:69:09:69:fd:e4:00:a1:a9:
83:2a:56:0c:ea:7d:c6:ab:d3:33:15:c9:0b:63:89:
16:2a:8f:b9:6b:7d:b3:6c:74:5d:3a:c7:3d:c3:d4:
2a:f7:94:fc:23:1d:04:dc:0c:77:f1:e0:3d:3a:99:
26:33:bf:6e:c4:d2:c9:81:4e:a2:44:0d:15:d2:ac:
ca:8f:69:f8:fb:2d:d2:c6:82:78:ad:ab:a5:04:22:
19:7f:b2:06:0d:62:4b:2b:f9:ba:e5:52:1c:17:f3:
35:b9:28:44:ef:1c:b9:32:2b:5b:16:aa:d8:a4:5a:
9e:e7:5c:64:19:f1:50:2f:fe:2b:49:e6:d4:80:3c:
da:c1:e0:cd:1f:ce:87:8f:68:6f:bd:22:76:a9:05:
96:d3:0c:9e:4f:91:da:80:88:36:34:c4:d0:45:c8:
a4:c9:55:f8:49:3c:c7:21:4e:55:b7:b5:9e:47:9e:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:A5:BE:44:45:9A:C7:44:6F:0C:0A:A5:30:8F:84:08:C8:2A:DB
X509v3 Authority Key Identifier:
keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:50:37:8d:4f:8f:07:e4:e9:c1:da:7d:ce:7c:26:04:43:d5:
00:10:27:35:1a:cc:12:94:66:7e:3c:b9:e4:43:a0:b1:1d:fa:
b6:2e:b6:32:1f:bc:27:c9:cf:f3:92:c5:cb:d0:7f:3f:fe:ab:
78:89:96:4e:ee:fc:9c:c9:22:18:44:a6:9d:1e:1c:e1:30:00:
b2:f8:37:8c:e9:da:6a:d5:4d:37:c9:eb:2d:af:05:9d:e3:a2:
19:f2:47:27:df:15:7c:dd:12:9f:e3:73:15:e5:cb:49:15:10:
14:a5:c6:19:a4:61:68:47:e3:34:e5:bf:03:e8:4e:a4:3f:19:
5d:5e:bb:31:77:a7:db:ac:c3:ac:1a:a0:b9:b6:fb:e8:30:fe:
6b:d3:e5:11:07:23:dc:7e:05:08:52:80:88:79:22:73:77:45:
44:b4:d2:af:65:e6:e1:bb:1d:ee:1b:b0:af:5c:b5:66:28:51:
4c:5e:b8:e1:89:a9:bf:27:11:a6:98:c7:d1:b9:42:35:52:66:
c5:dc:ca:c1:c8:44:87:90:f5:a8:22:70:af:bb:9b:0b:77:13:
5d:7c:4f:b3:b8:3d:1c:99:54:43:e7:e9:2f:7c:a6:7b:d5:58:
30:00:34:0d:3c:75:82:8c:9b:9c:e5:76:1c:89:32:ca:34:fa:
30:31:1d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:58:49 2025 by rpki-client