Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File: 4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier: hMEaoCy0YaepOU7HWVUAcUqc9uuD0ym+bUL5ktUPFbQ=
Subject key identifier: 35:D0:56:47:05:13:45:79:78:A5:8E:F7:DE:00:65:31:2B:66:2D:63
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer: /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial: 0196CD6161CFE3B49CD2E06957CC78F9DF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number: 1538
Signing time: Wed 14 May 2025 06:00:33 +0000
Manifest this update: Wed 14 May 2025 06:00:33 +0000
Manifest next update: Thu 15 May 2025 06:00:33 +0000
Files and hashes: 1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: GjkjodqjE19Xr7vk3zazweN1VoEzJwJBHGf7mxwtBPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:61:cf:e3:b4:9c:d2:e0:69:57:cc:78:f9:df:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Validity
Not Before: May 14 06:00:33 2025 GMT
Not After : May 15 06:00:33 2025 GMT
Subject: CN=35d056470513457978a58ef7de0065312b662d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:2f:8c:af:70:ef:e8:22:79:ba:ba:de:b8:
3a:90:08:79:f5:02:ad:be:6c:b0:9e:5d:df:b2:f5:
ee:f4:fd:55:82:99:5c:f2:03:7a:3c:fd:7e:56:c7:
c5:7e:b9:fc:ec:57:76:55:16:4e:42:70:29:a5:d5:
8d:c9:4c:cd:10:f8:c6:03:a0:0c:8b:b0:1d:e4:e3:
1e:f6:9e:64:72:fa:bb:c2:40:88:e5:20:be:0e:10:
a3:34:8a:2f:78:95:4f:17:9b:c2:d8:6b:b3:2b:0b:
cd:90:ea:2e:06:a0:2f:41:2d:e6:86:3c:e4:4a:0b:
f4:0e:ca:f2:41:96:f7:13:99:45:d3:69:3a:d3:82:
96:e2:d4:04:1c:90:8f:d3:71:7f:21:bb:32:cb:83:
a3:bf:60:02:53:17:2d:02:37:d6:58:45:d4:f2:f7:
01:22:9d:d2:6d:64:a3:c7:44:74:f9:84:fc:f0:66:
c7:63:75:33:b6:4e:77:52:26:78:49:f9:68:5c:88:
ef:de:e5:8f:5f:cc:e8:34:f1:c1:4d:27:b2:a2:4d:
a8:72:e5:22:ca:b4:d1:0f:bb:46:26:e8:b9:44:4d:
3f:4d:e6:ba:f0:6c:e4:40:b9:c6:ff:18:f3:ca:1d:
62:b2:6d:2e:6b:f4:e1:c4:79:6f:c5:58:59:2f:24:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D0:56:47:05:13:45:79:78:A5:8E:F7:DE:00:65:31:2B:66:2D:63
X509v3 Authority Key Identifier:
keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3b:95:8a:a3:1d:1c:e2:6a:88:22:64:a6:11:ba:6c:2d:00:
ad:60:a3:97:4b:87:83:2c:c8:3a:c7:ce:d2:64:e0:33:bc:98:
b1:78:a6:46:cf:d3:82:64:a8:7e:86:c6:48:14:9e:e9:3d:11:
38:4f:86:4f:08:fc:30:f7:31:3c:2a:1a:69:7b:91:77:aa:4a:
b8:dc:6f:5d:76:5a:c6:1e:32:7e:91:2f:0f:ff:23:58:fb:dc:
15:22:1f:ff:e5:39:ce:7b:57:66:ba:f9:47:ae:d0:87:45:93:
bb:2e:6f:1e:a4:06:03:64:cd:28:60:3f:48:61:29:34:a3:ec:
4c:43:e8:67:14:ad:8c:f3:c3:6d:24:26:a2:e5:5b:fe:1e:f6:
b5:07:ef:f9:32:db:80:9b:b6:17:c9:79:c1:3c:03:9c:22:67:
79:ac:18:0a:0f:57:1f:68:c2:0d:b3:e4:5d:66:21:b8:23:41:
4f:1c:ac:56:31:df:f4:1e:00:b5:c8:78:d5:58:4c:24:eb:00:
07:c2:14:83:d7:50:50:58:d2:99:0f:87:92:6c:ba:4e:84:68:
1b:cf:07:e8:36:e4:19:c5:27:9c:bd:6c:45:23:39:8a:7c:16:
c0:38:c3:36:66:4f:3b:27:90:f0:e7:4b:6c:1e:a2:13:55:40:
12:bb:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:13:28 2025 by rpki-client