Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: E55YKhXzSGbV9Z1PUuuqNi1mSDFlmQbm9l7hmvkvciQ=
Subject key identifier: C6:61:A5:F1:C1:77:FC:12:1C:DE:01:47:AD:DE:B9:18:0C:00:76:40
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 0196A31BCB57396634EB8A431AB6CA9C671D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 1294
Signing time: Tue 06 May 2025 01:00:29 +0000
Manifest this update: Tue 06 May 2025 01:00:29 +0000
Manifest next update: Wed 07 May 2025 01:00:29 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: +UAeBadgntO4tQf+XdcL+FeiG2YDB6A3+vF8SJuybMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1b:cb:57:39:66:34:eb:8a:43:1a:b6:ca:9c:67:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: May 6 01:00:29 2025 GMT
Not After : May 7 01:00:29 2025 GMT
Subject: CN=c661a5f1c177fc121cde0147addeb9180c007640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:2a:0c:9e:37:f2:8d:96:4b:d6:df:fc:83:
03:87:36:0f:ed:21:f1:21:b4:4c:1a:b4:61:42:a1:
19:96:99:b6:bb:22:ec:7e:4f:14:47:2b:fe:8f:1a:
f4:2c:77:a0:31:e6:19:5e:0f:68:87:6a:f8:1e:84:
80:8b:33:e0:f4:f2:c4:2c:f2:66:74:d2:a1:6e:3e:
92:61:c9:a4:ec:21:7a:2e:6d:78:e8:3c:3d:6d:e2:
20:32:0a:5d:d5:54:f0:fb:16:be:1b:e4:c0:54:53:
cc:9c:05:04:59:2a:19:84:e6:69:46:e6:25:5f:55:
7a:7e:a1:bf:94:b2:64:22:0f:7f:2d:d1:dc:27:c3:
09:39:5d:6b:f6:27:a7:c2:c6:e3:93:39:05:a6:7c:
55:30:5a:68:33:b7:42:8d:cd:c5:f9:47:76:02:ba:
aa:ed:a0:96:90:57:ae:f7:79:1a:c8:ac:f1:73:19:
33:87:52:c5:64:9e:3a:65:d4:02:63:3a:7d:0d:fa:
b8:e9:c5:22:de:25:5a:ce:ce:f5:86:a3:19:67:90:
0e:ae:59:1e:b4:e5:70:03:75:c5:6e:ce:a5:10:d4:
02:87:15:49:80:2e:29:d1:cb:b1:b7:c6:cc:6b:3d:
b0:40:d1:62:4f:e7:33:27:68:3d:4a:dd:0a:00:fa:
f7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:61:A5:F1:C1:77:FC:12:1C:DE:01:47:AD:DE:B9:18:0C:00:76:40
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:81:55:31:83:a6:2b:27:62:ee:27:1f:89:ae:4b:5d:4c:4d:
3d:a2:c0:b5:fe:12:20:53:c3:a6:da:a5:8b:c5:19:bd:1d:05:
9d:72:9e:26:55:b4:3f:66:91:da:7c:e8:89:ed:9d:e0:c1:f2:
bd:ad:0a:4c:b3:79:73:d4:88:68:30:f9:2b:3f:42:a7:4c:7c:
f6:1f:32:b5:6c:86:94:15:7a:00:28:46:d8:fd:42:99:30:d4:
e9:a5:1a:21:01:af:4c:57:57:e2:f3:d2:cf:50:0c:12:f6:cf:
dd:5d:cc:97:0c:40:49:e4:44:e7:56:40:dc:b2:b2:0a:bb:f8:
2d:5a:67:f7:10:9a:39:90:9f:fe:15:56:bf:57:9e:99:c5:f0:
55:d6:9d:63:c2:0a:60:8f:a3:9f:c3:c8:c7:37:fb:2f:3d:e1:
30:93:d8:ec:4a:71:bc:da:16:2a:3a:37:1b:05:76:ce:86:7b:
d4:93:0c:4e:1d:06:6d:53:b1:d4:03:9b:b1:90:c0:a2:22:08:
5e:96:d3:92:b8:b3:f1:25:da:76:b0:db:8d:84:e8:72:cd:4f:
26:16:d1:97:a2:41:1b:e2:c9:cd:5b:72:a0:6b:61:35:13:2b:
e2:2d:6c:a7:59:fe:a5:60:f0:20:53:e4:ab:dd:71:64:bb:6d:
8c:8d:96:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:50:34 2025 by rpki-client