Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File: 9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier: 7TBlcV0tKehCic0jHdwUSuHQEkpQKuAgV1M1WVi5SVg=
Subject key identifier: 8A:A6:AE:ED:E0:2B:40:20:8C:DC:77:89:1C:DE:12:8D:1F:8D:8B:8B
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer: /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial: 0196BC6DBB001B7973121B39BBD4F69709EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number: 0D38
Signing time: Sat 10 May 2025 23:00:29 +0000
Manifest this update: Sat 10 May 2025 23:00:29 +0000
Manifest next update: Sun 11 May 2025 23:00:29 +0000
Files and hashes: 1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: Z0Ikb3iXF+VsSjgAGE170zB+VfwiSSyJ4nIOMrshRsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:bb:00:1b:79:73:12:1b:39:bb:d4:f6:97:09:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Validity
Not Before: May 10 23:00:29 2025 GMT
Not After : May 11 23:00:29 2025 GMT
Subject: CN=8aa6aeede02b40208cdc77891cde128d1f8d8b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:04:fc:70:ca:2b:e0:79:eb:e7:24:a0:bb:
53:bc:fd:42:81:70:47:cc:f3:9a:c1:dc:e6:a8:d4:
50:97:76:49:88:21:82:37:a0:eb:cd:fe:9b:44:e4:
b1:37:98:fb:ec:91:9d:5b:52:98:42:b7:6e:b9:80:
ed:7d:e6:5d:72:2a:60:d9:24:56:5c:b3:3e:75:cb:
83:3b:a3:8c:ef:7c:db:64:bc:0c:07:76:6b:79:bd:
a0:51:4a:23:1c:c8:48:44:2f:94:e7:cb:07:5a:53:
1b:b8:82:39:e0:33:9b:d6:7b:57:97:68:44:a9:d8:
d4:ae:41:6b:d0:60:51:b5:47:90:45:ce:6e:f5:e1:
16:7d:01:3c:8d:88:67:cd:bc:3c:27:8a:da:82:82:
f0:67:c0:31:32:05:61:09:62:31:85:ea:32:eb:f9:
ad:fb:80:7e:61:92:83:46:dc:c4:20:e4:ea:b8:f1:
c4:d9:ed:c9:85:02:2b:f4:de:05:a0:ff:78:69:a7:
66:d8:32:c0:77:0d:1b:11:c7:c8:65:0a:74:18:4d:
04:6d:6c:23:02:cd:a7:b7:bd:6c:c6:df:b5:00:12:
07:5b:18:57:3a:29:e3:e5:92:9e:27:ca:0a:58:24:
80:23:70:77:8f:f7:68:e3:d1:b3:98:6e:a3:af:8a:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A6:AE:ED:E0:2B:40:20:8C:DC:77:89:1C:DE:12:8D:1F:8D:8B:8B
X509v3 Authority Key Identifier:
keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:78:7d:8a:75:ce:d0:81:ab:a1:95:d3:15:1f:44:c4:36:71:
ce:af:a5:82:d6:6f:9e:ab:0d:85:2b:a1:1b:d5:27:18:93:92:
cb:e4:39:e8:b9:d1:87:b9:22:99:59:d3:66:6b:8d:8f:43:e4:
f4:7f:dc:fb:63:80:94:ca:9f:b9:6f:c9:b6:7f:36:f2:2a:29:
7a:08:9a:4a:bb:9d:b9:15:03:25:2e:11:3d:cc:cd:1c:50:8b:
ae:33:0e:92:56:79:a9:e1:08:3f:26:44:aa:38:49:1e:c4:d8:
ba:e2:29:cd:40:ea:49:33:9e:e2:2e:b9:c8:ef:c4:31:ce:ff:
f5:a0:4c:9d:f9:bc:4f:e7:6e:64:12:be:60:14:c3:58:fb:3f:
1d:1d:cf:50:13:45:22:94:1c:10:34:23:87:42:a3:bb:05:b3:
38:a6:8c:31:c1:c2:19:06:3d:69:3c:85:f5:84:db:e7:40:9d:
05:b7:fd:a2:17:72:f0:bf:13:df:68:7e:d8:89:91:0a:07:65:
5c:88:12:f1:af:ae:99:3c:e5:b2:a8:29:9f:08:35:29:1c:26:
30:3f:2a:da:3c:f8:bc:19:5f:7d:1c:af:b4:9b:7c:a2:e0:9b:
73:70:3d:fc:e0:47:79:59:76:f0:68:76:38:ac:a0:0d:db:be:
47:fe:9b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:09:49 2025 by rpki-client