Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
File: EsqtEcXYmB2YPDAehqGs8tgRqsE.mft (raw, json)
Hash identifier: unZxGOQk/aoV3w4pyhPA09byJTIafLqGAuBePUtDhTg=
Subject key identifier: 19:F2:C5:91:08:4C:CC:53:D6:61:4E:2D:5A:F3:07:BB:36:60:CD:55
Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
Certificate issuer: /CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Certificate serial: 01965FBBB44DD2F7B2F6EC8E6ACAC4BDC0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
Manifest number: 0EFF
Signing time: Tue 22 Apr 2025 23:00:58 +0000
Manifest this update: Tue 22 Apr 2025 23:00:58 +0000
Manifest next update: Wed 23 Apr 2025 23:00:58 +0000
Files and hashes: 1: EsqtEcXYmB2YPDAehqGs8tgRqsE.crl (hash: 23OepN+aqpCVBX/HzDPX4wyrzuzONFTBetdBhcBmlZ8=)
2: wCYSBxlEFn9C3bKzEBin_RqzoTU.roa (hash: HuM1kg7JZIqnFeWlmolggLVBCkZTp9UadWTeRelOxb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:bb:b4:4d:d2:f7:b2:f6:ec:8e:6a:ca:c4:bd:c0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Validity
Not Before: Apr 22 23:00:58 2025 GMT
Not After : Apr 23 23:00:58 2025 GMT
Subject: CN=19f2c591084ccc53d6614e2d5af307bb3660cd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:a3:2b:0f:84:82:26:5e:5e:b6:86:0a:c5:
b4:27:cc:53:8c:ae:4f:c0:f9:b8:da:ef:30:de:33:
03:bf:a4:7d:21:9b:4a:a9:a3:e6:78:ae:b0:23:0f:
43:e1:26:00:ab:10:2f:55:2f:9f:fa:da:86:62:98:
90:b7:04:be:fe:49:cf:49:cf:35:04:30:99:74:a6:
ce:b4:ff:5a:ae:a7:65:10:13:07:84:26:7e:20:8e:
bd:59:fb:c7:52:9b:ef:b9:d3:4e:3a:7c:1d:72:93:
59:c3:b9:82:aa:bc:b9:22:bc:48:b0:70:43:13:ad:
90:63:08:6b:a3:cc:86:1c:9f:a6:bb:b7:09:95:54:
b5:b5:4b:d5:43:5a:53:0b:db:99:c6:89:5f:24:6e:
2c:1e:28:98:ca:0b:78:0c:9a:2b:61:3a:5d:4c:99:
e2:00:16:41:7c:21:a9:16:ff:8b:b1:ed:dd:69:af:
48:42:e6:b8:23:43:16:0e:a3:bf:ae:46:7a:b3:04:
b5:e5:2b:b5:16:f1:d8:3b:63:59:cf:c9:6b:8f:ea:
59:c3:a4:c1:57:26:fb:bf:89:10:a2:1f:34:6c:ae:
c1:56:85:68:b8:44:39:e3:cc:e1:b6:5b:9c:90:94:
e4:b3:a1:cc:e6:70:1b:77:c8:2b:c9:2c:a3:ed:12:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F2:C5:91:08:4C:CC:53:D6:61:4E:2D:5A:F3:07:BB:36:60:CD:55
X509v3 Authority Key Identifier:
keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:90:66:9f:27:1d:20:c3:ca:4b:54:56:cc:57:a5:7e:ba:16:
b4:f6:84:65:ac:2d:bf:7b:5d:ab:f5:b2:71:91:fa:7a:3f:42:
67:65:1d:8a:32:d1:e7:82:29:06:9b:83:2b:90:49:d9:8a:f6:
6d:33:21:98:29:67:88:f0:ad:b4:dd:19:f8:91:37:72:27:e8:
24:09:00:04:a3:8a:3d:0b:8d:81:86:64:e1:9d:3c:9d:3e:c8:
34:00:c5:a1:a2:22:2a:39:a9:e7:d5:4e:a0:8f:1b:83:b1:30:
51:e6:cb:e9:20:38:35:a4:49:d8:96:14:b5:0e:a5:72:f0:34:
76:6f:97:ac:32:1a:ae:63:f6:fa:b4:0f:0f:30:fc:7a:61:15:
01:eb:93:c4:cd:90:42:bd:06:ee:8e:16:9e:bb:38:00:92:99:
97:c0:f8:bd:aa:d0:33:70:ed:84:c8:3a:75:b8:82:75:24:f9:
f5:4a:9a:13:b6:00:c3:66:5d:d4:2e:75:5d:02:a3:67:81:bc:
85:f4:49:e6:3f:52:1b:72:9e:85:3c:7c:5f:3b:62:10:f0:ad:
e2:f7:ae:e9:4d:ac:81:23:70:22:86:50:5f:f5:c2:d2:b9:90:
77:b1:01:5a:4a:9d:6c:a7:a4:68:95:64:7b:ca:6c:bd:ef:ea:
e2:63:2c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:21:17 2025 by rpki-client