Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier: l2fL1RyPmQJZn6g5ySrMXVYuh6tZ0V/PVuF4knL719M=
Subject key identifier: 76:92:4A:57:DE:22:E5:E4:60:67:14:D8:CF:18:73:D8:09:5E:E0:C4
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 0196556E6190CC58CD54B0B9EF678D6FF4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number: 115C
Signing time: Sun 20 Apr 2025 23:00:19 +0000
Manifest this update: Sun 20 Apr 2025 23:00:19 +0000
Manifest next update: Mon 21 Apr 2025 23:00:19 +0000
Files and hashes: 1: JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa (hash: TBZiChrAp6rj4kAjmButXnHCPDHWsopt5A7i33tulpw=)
2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: /nNI+7WsWA1GB9kzrN3iFmr7jLXWj5NHsYBFljmOdHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:61:90:cc:58:cd:54:b0:b9:ef:67:8d:6f:f4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Apr 20 23:00:19 2025 GMT
Not After : Apr 21 23:00:19 2025 GMT
Subject: CN=76924a57de22e5e4606714d8cf1873d8095ee0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:c2:ae:86:c5:19:95:e9:7f:d0:d3:0c:e4:
fb:0a:a2:0d:3f:a1:1a:5c:e9:4b:14:19:d9:72:e6:
a8:0a:01:61:61:63:8e:a2:86:6f:4e:b5:18:2a:99:
48:e6:4b:2c:19:f3:58:80:25:07:21:81:dd:7c:dd:
cf:79:22:d2:d1:67:51:55:e5:34:aa:5d:8f:ea:fa:
68:19:36:75:c6:70:f1:6f:8f:0a:7d:dd:19:f8:be:
41:dc:31:d9:eb:f7:ec:1e:c5:10:cf:97:31:3a:bf:
66:ec:d3:b1:9d:be:26:59:44:10:f5:14:2c:40:ed:
05:f5:7a:ed:8b:62:18:44:b4:29:39:bd:bc:d5:32:
5a:97:df:cf:a9:0a:67:a8:54:c0:68:d5:fc:3f:89:
bf:ac:0f:8a:ac:7f:9a:d8:c3:f3:e9:91:02:f3:04:
ec:39:b2:ac:87:78:78:f0:12:24:f4:0e:0f:7d:db:
3e:d4:b1:2f:1b:48:fb:25:15:24:34:fb:e7:d5:61:
78:48:a9:79:a6:5c:6b:66:0b:37:94:1d:8e:d7:df:
1a:16:f5:97:ec:c3:1a:4f:35:f4:8c:fd:ea:66:e7:
f1:86:61:53:36:0c:17:cc:b4:8d:d0:b8:cb:9a:8b:
bf:7b:fc:f3:70:2d:dc:77:ac:06:87:ce:c0:d5:14:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:92:4A:57:DE:22:E5:E4:60:67:14:D8:CF:18:73:D8:09:5E:E0:C4
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b1:f2:9f:58:90:f1:49:3b:68:79:bb:e1:01:ee:1d:9b:d6:
25:27:df:34:1e:bf:b6:84:c2:8b:47:57:fe:2c:74:7f:55:92:
58:9d:f1:f3:1b:3a:40:01:a4:dc:7e:94:cd:e7:b8:21:32:d8:
36:6c:8a:7e:40:55:21:29:1b:5d:4e:44:08:f3:24:e9:11:5a:
df:85:2f:c3:fd:eb:af:98:b5:65:34:f4:7c:0d:26:76:f4:a2:
ff:3e:7d:fa:ee:41:b1:1a:63:9f:0b:fb:4f:6c:66:50:b5:5e:
84:a0:59:f8:00:b5:53:07:9d:0f:79:fb:02:f3:38:c3:13:f7:
a9:2f:5d:60:c8:fb:d2:ef:fd:9f:cc:fe:3a:a2:ef:02:0f:3b:
71:00:82:e0:56:87:c3:99:b1:51:7c:e9:8c:94:eb:cf:c1:d4:
80:92:7e:cc:3b:be:92:42:d4:27:32:a1:ef:99:93:c6:00:5e:
0f:19:0b:47:b0:d7:a7:93:e4:2c:e2:1d:99:a9:ff:7f:13:e9:
3e:0c:86:c1:13:38:a8:c9:96:57:bb:9e:dd:29:09:e9:1f:53:
7c:5a:75:ad:76:52:4e:a8:e5:b6:a7:20:95:66:35:93:02:06:
60:03:fb:6a:a9:c5:10:e6:20:6b:28:ef:4f:47:cd:7d:ce:92:
66:e3:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:15 2025 by rpki-client