Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File: EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier: CQ/Xc11mhcav1tWrDwqxbC6C7ybdBLrVcXaMEHG9/ms=
Subject key identifier: CC:25:75:6A:D9:91:92:DD:65:B9:FA:E7:C7:A6:54:20:E2:4B:8A:74
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer: /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial: 019658A673EA5393B5BB6D4A0189E3D1DA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number: 0AB5
Signing time: Mon 21 Apr 2025 14:00:25 +0000
Manifest this update: Mon 21 Apr 2025 14:00:25 +0000
Manifest next update: Tue 22 Apr 2025 14:00:25 +0000
Files and hashes: 1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: nWqFFtt3soQp8dO4oJaOUx43UiCEWhJwUUQwcxEFKs4=)
2: hMWp2eYYKaaUSIum5EmKLwWKUa4.roa (hash: 8+yLsr+nQz8cs8V3LX83Tse1Iso+npvbmYLm0xnhp94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:73:ea:53:93:b5:bb:6d:4a:01:89:e3:d1:da:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
Validity
Not Before: Apr 21 14:00:25 2025 GMT
Not After : Apr 22 14:00:25 2025 GMT
Subject: CN=cc25756ad99192dd65b9fae7c7a65420e24b8a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:1a:22:0e:6a:10:10:86:1b:8f:6e:4a:dd:
09:6a:73:90:15:f2:b8:c3:65:b1:14:e3:0f:b0:79:
e3:b9:ca:b3:87:49:4d:6b:ad:c6:64:b7:8d:58:b4:
6d:7f:0f:87:85:d0:2c:0c:76:bc:2e:1c:5f:8e:15:
54:ac:89:99:65:d2:09:26:36:47:1c:08:3c:72:07:
ae:86:09:8b:50:24:f5:6b:6f:03:c9:cf:18:0d:a0:
4a:ff:50:db:ea:c2:2e:a4:d7:cb:30:19:94:27:f3:
6e:d1:88:1c:5f:15:72:88:37:94:f0:2f:68:31:e4:
11:34:17:0f:3a:e9:bb:a7:fb:53:af:8b:7b:6e:51:
68:ae:57:71:4d:3b:82:3d:ee:33:15:da:4c:1d:02:
bb:ae:86:a8:b4:fa:51:76:6a:31:5c:4c:7e:78:07:
71:09:5d:82:78:3e:c9:b6:67:11:eb:23:be:f8:7a:
b6:9c:a4:29:52:73:8d:e6:22:1b:1e:8b:9f:d8:61:
21:f6:c2:56:01:7b:66:cd:4a:bc:98:50:b4:f2:7b:
53:a0:c4:e7:5f:b6:44:5b:c1:dd:45:8a:df:80:17:
0c:36:f8:31:fa:6f:25:6e:4b:e1:b3:f1:08:1c:db:
48:39:bc:97:e7:fe:92:58:ed:6f:9d:15:40:37:0c:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:25:75:6A:D9:91:92:DD:65:B9:FA:E7:C7:A6:54:20:E2:4B:8A:74
X509v3 Authority Key Identifier:
keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:43:52:74:34:15:69:25:07:14:21:0f:af:fd:e1:42:24:48:
b7:8d:ca:a3:8c:28:0e:2b:16:0a:c4:e3:6f:d6:5a:50:a7:74:
cd:1f:ed:84:fe:32:23:9c:0c:6d:24:a0:63:6b:a7:ce:b9:ce:
60:d8:d2:33:d2:55:4e:3a:c0:5f:a7:31:15:c5:54:63:36:e3:
4f:cc:63:77:03:22:ad:50:cb:ef:ec:c8:64:8b:51:0b:85:dc:
1e:d2:d2:b3:b5:11:69:30:38:d6:0f:f2:76:4c:51:2b:b2:c0:
d0:2a:ce:5d:83:74:c2:71:bb:24:b3:81:dc:51:5d:43:cf:5b:
29:53:e6:5c:af:dc:24:88:99:9e:1d:16:e8:44:fe:87:e6:8d:
50:2a:04:5e:85:96:04:90:1f:db:f8:5a:b7:cd:a4:a4:b0:fc:
3b:75:65:3a:29:25:e1:b4:b1:a0:ec:f4:7a:a5:43:0f:71:a5:
fb:c2:77:4d:d3:09:f7:39:97:1c:64:00:6a:66:51:33:ef:7f:
28:d9:d2:89:59:2d:72:6c:8d:9c:7b:b2:da:53:95:66:ee:ad:
47:dd:9b:e2:65:33:7a:13:68:8f:40:21:8a:c2:46:20:32:6f:
da:43:3d:c7:6b:ed:c7:ef:3d:e9:4c:15:40:c3:5c:49:30:93:
85:ac:66:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:20:50 2025 by rpki-client