Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
File: E2elkhpPFIx4qmwh-E8s_I2I6ck.mft (raw, json)
Hash identifier: kXWTG6K3N0H1SZ5j4KOYU/LIgk+xWE/7S3laNHMHl1g=
Subject key identifier: 6B:7E:76:C4:6B:A6:C5:3F:A5:56:D6:DC:EE:4D:A4:8D:78:D8:C4:9E
Authority key identifier: 13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
Certificate issuer: /CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Certificate serial: 0196C04AB98A6C095F78B86A4FCA33F403F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 17:00:44 +0000
Manifest this update: Sun 11 May 2025 17:00:44 +0000
Manifest next update: Mon 12 May 2025 17:00:44 +0000
Files and hashes: 1: E2elkhpPFIx4qmwh-E8s_I2I6ck.crl (hash: gGDrgsWdN65K1JySj5o2PJbZZyG5D3F9ewIcSpZ5IZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:b9:8a:6c:09:5f:78:b8:6a:4f:ca:33:f4:03:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Validity
Not Before: May 11 17:00:44 2025 GMT
Not After : May 12 17:00:44 2025 GMT
Subject: CN=6b7e76c46ba6c53fa556d6dcee4da48d78d8c49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:8b:e0:b5:82:d4:13:37:b3:05:6d:48:6f:
c6:dd:2c:06:c1:79:b8:6b:f2:26:50:c3:12:b0:a4:
25:e2:ca:9d:37:cb:61:0d:b4:83:2f:cb:dc:b7:24:
9d:ed:3d:a2:54:bd:b4:32:44:16:5b:5b:7d:41:01:
97:d8:26:54:93:98:58:ed:d6:d5:75:a2:d5:5c:2c:
88:f7:48:5c:f5:96:1e:56:b3:63:6b:c5:f4:ef:90:
c8:5a:75:37:8d:2e:0f:50:bf:3d:d4:f9:51:51:7d:
12:78:84:be:0d:f8:26:9c:f4:f7:cb:bf:92:82:33:
2f:2d:b4:ad:a1:77:c7:a8:bc:e8:32:5c:f0:90:75:
87:53:21:50:92:c9:d2:57:92:6b:b5:36:1c:33:73:
f3:36:7b:3a:ec:a9:11:10:9a:99:59:0f:01:5a:23:
ac:04:e6:f7:cf:8e:29:02:83:c4:de:20:39:90:c2:
5e:1a:74:86:87:aa:f0:83:27:00:60:ff:d1:b6:e5:
93:56:05:f7:7f:b9:02:09:2a:93:d8:47:27:57:af:
14:c3:4e:b1:cc:56:ec:ac:3b:b0:50:e0:9f:af:f4:
ab:c2:b1:bd:91:5d:0b:3f:69:ea:e4:79:c4:f8:2b:
10:11:b0:df:7d:fa:e3:31:f3:69:50:d8:c7:ef:61:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7E:76:C4:6B:A6:C5:3F:A5:56:D6:DC:EE:4D:A4:8D:78:D8:C4:9E
X509v3 Authority Key Identifier:
keyid:13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:16:f7:39:59:84:1c:aa:52:78:c1:59:6b:41:74:a3:af:1b:
ea:42:78:bc:b4:3e:7d:d9:e9:56:af:7b:b9:23:e6:cb:f5:0d:
97:21:9a:25:51:29:96:9c:ce:82:d5:58:d9:79:ee:fe:d8:9e:
ff:e3:e7:48:cb:bb:d1:19:ca:c0:3e:65:a4:e7:fc:d4:a8:4c:
e1:4c:6a:8c:7a:18:cc:75:f0:e7:f5:04:54:07:6c:75:aa:4f:
5e:7d:52:ee:42:a6:37:16:64:c3:50:0c:f0:13:4f:7c:ee:29:
7f:14:60:24:43:db:83:c8:86:d8:32:26:5f:e2:59:d1:34:fd:
55:b0:0c:98:92:29:d1:13:1e:4b:46:72:c7:b2:e1:87:a3:c9:
48:8d:da:db:cd:76:f1:bb:1e:13:be:29:5d:ca:df:54:a7:26:
00:22:29:72:09:57:72:89:f0:ee:6b:e8:69:58:b5:cb:6d:5e:
8a:cc:5a:1e:5d:02:9f:e5:1b:b3:aa:5e:69:68:1d:00:7c:5f:
1c:12:33:8c:a5:eb:0d:d5:0c:ae:bc:c0:e5:e5:2e:b5:3b:9b:
44:82:ee:ee:b1:96:a8:3b:7d:79:01:af:35:0c:68:22:aa:5d:
cf:53:c9:88:26:1d:47:41:48:7d:64:27:16:72:c8:44:dd:a0:
fd:88:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:15:00 2025 by rpki-client