Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
File: sUgIa40dx_EOND_RZXGSOadVvTQ.mft (raw, json)
Hash identifier: 2o/qKLPgyiYn525/2gxhelGlUQKZam86R8LFK7nuBes=
Subject key identifier: 8E:90:2E:45:B3:24:DD:29:F7:A7:27:4B:46:66:CB:40:43:A1:E5:F2
Authority key identifier: B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
Certificate issuer: /CN=b148086b8d1dc7f10e343fd165719239a755bd34
Certificate serial: 0196BC00295E6CA4E86EF04261B22262532E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
Manifest number: 0EAF
Signing time: Sat 10 May 2025 21:00:49 +0000
Manifest this update: Sat 10 May 2025 21:00:49 +0000
Manifest next update: Sun 11 May 2025 21:00:49 +0000
Files and hashes: 1: sUgIa40dx_EOND_RZXGSOadVvTQ.crl (hash: fM+0wiS+hShI4SoP0g+Ap3XJx681/AME5TZOymv4KZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:29:5e:6c:a4:e8:6e:f0:42:61:b2:22:62:53:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b148086b8d1dc7f10e343fd165719239a755bd34
Validity
Not Before: May 10 21:00:49 2025 GMT
Not After : May 11 21:00:49 2025 GMT
Subject: CN=8e902e45b324dd29f7a7274b4666cb4043a1e5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:56:04:67:6d:b4:2a:31:a8:e9:23:a2:a3:
2c:d6:da:6c:cc:94:fa:c6:fe:d5:61:bb:81:c9:87:
12:08:6a:c6:f2:87:3d:52:d6:54:30:c9:65:8e:fe:
15:bf:18:a9:7f:97:a2:ae:4e:fc:20:bd:ba:38:5c:
bf:3e:2f:80:7c:cb:94:a0:9e:02:c1:eb:1d:75:ea:
17:24:af:b6:06:6b:f1:0c:2a:30:46:be:10:c6:43:
bc:62:81:52:b0:64:61:b6:07:e8:5a:b1:e6:e3:b1:
4c:aa:a9:fa:c9:cb:9c:30:06:c4:54:90:e0:d0:17:
78:28:3d:1c:8a:00:b2:98:20:21:85:73:af:5f:5b:
ae:a4:cc:85:e8:07:40:05:c3:8f:a5:0f:90:74:3c:
2f:8b:79:e8:a3:ae:28:be:3f:f7:e0:3a:10:44:3a:
48:d2:3a:c0:2c:92:98:a8:de:69:fe:ff:d7:9f:d3:
cc:2d:3e:9c:25:b2:a7:d6:c3:9f:3a:68:90:ad:ea:
1a:e7:56:b7:10:66:a4:79:ea:b5:2c:cb:55:23:90:
5f:6a:5b:13:25:8f:aa:fe:c3:3e:ed:2f:a8:27:7a:
56:8c:55:c6:b8:c7:72:78:d2:24:14:76:aa:db:04:
62:56:6f:a5:51:de:e3:40:d8:46:d1:c0:c7:63:ed:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:90:2E:45:B3:24:DD:29:F7:A7:27:4B:46:66:CB:40:43:A1:E5:F2
X509v3 Authority Key Identifier:
keyid:B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:90:ec:85:0a:3e:ec:63:8b:e9:de:c0:a2:a0:f4:08:3e:52:
09:93:75:40:16:e6:7e:81:29:b3:dd:8e:ff:b0:db:e6:13:5c:
b7:f7:55:4e:63:09:72:10:a6:da:11:d2:91:ed:36:50:55:da:
fb:01:3f:ad:16:e4:1b:d2:17:5a:02:5b:06:a3:2e:cc:f7:ee:
41:13:cf:cb:a5:03:cf:93:f1:63:c8:ad:d6:77:b8:c9:84:29:
bc:86:d3:69:47:85:c7:48:3d:e3:21:57:7b:59:cb:1c:f2:88:
8e:4b:89:f8:42:7b:33:81:f6:b3:d8:b3:49:48:aa:b4:28:44:
e9:2c:54:70:23:3e:0e:03:87:41:dd:1f:7f:25:d9:0f:46:c8:
3a:1b:a6:dd:57:ad:e8:0f:d4:7c:a9:0c:d2:1a:43:0c:fa:04:
f6:be:ad:f9:b0:61:dd:3c:19:76:1d:91:50:18:5f:cf:e6:85:
de:9b:55:a0:51:a4:2a:d4:60:d5:43:40:0e:99:92:6a:f5:f5:
44:f3:af:b0:66:8d:53:54:80:ca:78:0e:a4:0a:4f:1e:5c:d3:
39:d5:c1:0a:90:49:ee:c4:19:7b:9c:db:11:34:6d:38:28:83:
d0:22:b7:4b:a5:87:5b:d9:54:00:6b:d1:0b:d7:92:cb:68:44:
70:30:7e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:05:53 2025 by rpki-client