Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
File: eeJLR_iUPK1uBMn2RssQd8FA_fs.mft (raw, json)
Hash identifier: 9lB9G5P0cKiVAdh1RTG1olREo9YwfYuHG8hLyJt+Xwc=
Subject key identifier: 91:47:1C:D1:95:2A:DB:F0:BC:E5:D2:23:E8:24:4C:62:A2:4D:A2:3E
Authority key identifier: 79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
Certificate issuer: /CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Certificate serial: 01964DB4FCC8D6D73BE5E50DBA6947C5635A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
Manifest number: 08AF
Signing time: Sat 19 Apr 2025 11:00:28 +0000
Manifest this update: Sat 19 Apr 2025 11:00:28 +0000
Manifest next update: Sun 20 Apr 2025 11:00:28 +0000
Files and hashes: 1: Ff0yLRBnCd2a-1PZFAaKXEt87-w.roa (hash: QzNWCIaA542I7LzlR5+5wOCVAclFkGjaeVPYZqjN+Sg=)
2: HmjrrvNNU1yqGq3_xmYXZ7xuiFg.roa (hash: Kbry8XJIb38Dn/hCakpXS7cXVbuwiYg0BYs5Jt2kXbk=)
3: eeJLR_iUPK1uBMn2RssQd8FA_fs.crl (hash: 35K26ZH5QchMjV4t3/26vzuITnqMtScpHofAnbaEMlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:fc:c8:d6:d7:3b:e5:e5:0d:ba:69:47:c5:63:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Validity
Not Before: Apr 19 11:00:28 2025 GMT
Not After : Apr 20 11:00:28 2025 GMT
Subject: CN=91471cd1952adbf0bce5d223e8244c62a24da23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:83:26:cf:f6:ad:5e:7c:31:e7:67:32:bb:
af:66:8f:38:31:32:82:af:7e:e7:de:c1:d7:1b:f5:
a1:44:eb:4c:be:a9:8c:41:07:cd:7f:d9:bc:f8:e6:
02:86:d4:8b:2a:0b:95:7e:e1:f7:59:ba:48:f7:b6:
dc:f1:b6:a7:15:b9:a2:a5:eb:ae:04:58:9c:b9:aa:
9d:72:1a:df:b2:f4:3c:5a:e5:c5:7b:af:af:43:75:
65:6d:f7:4b:33:f8:09:85:8f:f2:73:14:da:cf:58:
f0:7d:0e:18:27:7d:a1:2d:bb:65:bc:ce:6b:c8:66:
61:87:e4:a3:f8:61:7a:c6:7c:f6:11:04:32:7e:d6:
03:64:7f:d3:13:45:36:5c:58:ba:6d:04:05:9e:06:
79:85:0c:71:dc:eb:60:41:95:b5:65:59:65:e5:62:
2b:20:68:05:d3:64:73:35:14:fb:9f:77:99:a9:24:
5b:7a:12:a8:e0:ae:97:c7:90:bb:e9:b1:6a:7b:83:
c6:da:29:be:0c:7c:3d:68:1c:bf:27:c5:f7:98:f7:
2d:98:76:29:94:3c:93:89:63:f2:f1:57:c8:5a:b7:
05:2b:a4:c9:a6:ed:5b:54:c9:53:77:3a:a9:f4:17:
1b:ad:38:eb:39:0d:8a:1a:d1:96:81:43:97:02:02:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:47:1C:D1:95:2A:DB:F0:BC:E5:D2:23:E8:24:4C:62:A2:4D:A2:3E
X509v3 Authority Key Identifier:
keyid:79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:af:82:b6:c7:ce:ee:ec:76:8c:09:13:07:49:01:19:65:c3:
67:6d:8f:55:5a:4e:65:2c:00:4b:74:32:85:5b:b0:53:c6:13:
66:c5:d6:3b:72:a3:13:8f:e9:e6:a4:7d:c7:4e:2b:60:d0:af:
19:73:55:a8:7b:0c:22:55:a7:13:91:02:35:ee:09:aa:d0:43:
e0:98:46:81:dc:b7:a0:a9:6c:64:5d:7b:fe:1d:ad:0e:3d:24:
c4:c1:bb:d1:b7:e3:88:59:93:90:f4:42:1f:84:d7:7c:58:85:
f3:02:9f:4b:fb:9b:97:73:dc:bf:d3:9d:15:57:1d:a4:a6:f3:
f1:b8:6e:0a:c2:27:84:6c:77:4d:98:8b:ea:30:b9:a7:00:de:
44:e3:d3:9e:a8:99:99:a3:ae:d9:3c:22:2b:cc:99:d9:b6:ff:
2b:24:0c:6b:50:f4:73:d1:00:be:1e:f9:bc:ab:0d:d9:0d:b2:
03:0f:26:d0:b6:3f:89:99:e9:19:c0:ee:31:b8:7a:f6:61:2c:
f3:56:2d:b0:f7:7c:54:a1:9c:1f:4e:73:9d:53:fa:d6:05:48:
6c:3e:ac:62:e1:a4:a4:41:02:ca:67:26:e1:6b:d4:cc:08:1c:
38:ae:99:c8:fd:91:70:d2:e8:f8:90:96:db:13:93:d6:ab:22:
91:cb:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:03:24 2025 by rpki-client