Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: oyXpnLaV63OVYZkxSNYRxTHqnnW/BgS90F0f8czCy+c=
Subject key identifier: 3B:14:1F:2B:B9:36:E5:E0:11:0B:EE:65:BD:A0:35:4A:34:57:8D:0F
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 019649A242A960BF3EA16BFDF7C6A56BB263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0C11
Signing time: Fri 18 Apr 2025 16:01:32 +0000
Manifest this update: Fri 18 Apr 2025 16:01:32 +0000
Manifest next update: Sat 19 Apr 2025 16:01:32 +0000
Files and hashes: 1: 1FgrVACY6GX6cCkfjVp_PNMUkZ8.roa (hash: d2I0wmnqM3spvipArjFjFYyaGXGv03P9b0jZc/8LN6Y=)
2: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: HkFubEERDIbWtp9/XBUUKxDpQeuvA4uX6E9n6TT2IPM=)
3: o3E4tuCzrJrGsji5NuASGDB-HXs.roa (hash: bSAUmFEcCz0OQZhQLj9JhVCVTIH61k4i+3xl0JyI4Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a2:42:a9:60:bf:3e:a1:6b:fd:f7:c6:a5:6b:b2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Apr 18 16:01:32 2025 GMT
Not After : Apr 19 16:01:32 2025 GMT
Subject: CN=3b141f2bb936e5e0110bee65bda0354a34578d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:f6:00:e6:6c:4c:6c:6e:83:c2:25:38:c8:
1d:2f:7b:51:fe:e8:85:ad:52:a3:8b:fe:e7:8f:e1:
a3:06:fc:16:d3:00:dc:4f:3c:81:d3:36:63:96:91:
6e:01:0e:88:20:a6:4b:d6:be:08:73:29:b9:72:35:
d1:9e:d4:70:d1:b7:3d:97:c6:19:63:1a:07:fe:5d:
eb:17:68:ab:d2:29:9d:35:f3:37:a6:94:46:a8:d0:
c7:51:19:76:7a:15:6d:da:28:08:08:17:d0:57:d0:
f5:77:01:73:33:25:dd:9f:41:b6:46:46:7f:29:c3:
87:fb:c9:10:07:46:9b:8d:d0:db:91:c5:97:ca:09:
4d:ab:df:2a:e9:78:80:5b:8f:15:dc:dd:be:75:c2:
73:c0:48:1f:8f:d4:08:a9:b8:b9:b2:ee:bb:e4:6e:
34:87:d7:d5:62:48:10:61:13:72:f3:a9:35:0e:5d:
49:12:76:f5:fa:d7:a5:25:5f:28:af:6f:5a:9d:09:
82:71:bd:f9:53:7b:a7:fd:fb:db:af:30:12:2a:3d:
49:3c:69:79:ae:2c:fb:00:cd:59:4a:78:8f:47:4b:
17:2d:22:44:b7:ac:ac:d5:71:0e:eb:8a:3d:c9:68:
d2:49:d3:e7:64:38:10:ab:5d:e3:43:c3:0b:a8:d5:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:14:1F:2B:B9:36:E5:E0:11:0B:EE:65:BD:A0:35:4A:34:57:8D:0F
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:42:39:f6:cd:c2:be:2a:bd:fb:c7:dc:61:c0:52:c3:66:70:
9a:5c:03:e5:a5:ed:15:55:33:92:16:49:46:f0:c4:8c:7b:cb:
86:0e:87:3e:93:e4:e4:c3:42:06:91:03:36:80:18:39:9d:9e:
d3:00:3f:d2:89:c4:11:bf:a0:6f:c8:03:87:88:8b:44:a9:8e:
31:01:ce:12:3d:63:53:8a:51:04:1b:00:06:d6:54:6e:9f:91:
3b:8c:20:32:6d:d1:a5:3d:c7:f1:bf:42:d4:b7:ff:e5:5a:68:
22:ec:51:8a:b9:2b:9e:33:a0:fd:0e:69:51:7c:3b:58:10:72:
2a:f5:1b:51:57:6b:e3:1e:98:30:a4:3b:d2:51:4b:0a:ba:0d:
d4:2c:50:ca:d3:ab:f1:f7:4b:37:5f:08:2c:f5:81:77:48:35:
7f:45:4f:14:d2:a5:82:83:7b:f4:36:dc:7b:d9:ed:01:6f:6e:
2c:99:7c:d4:c6:92:28:4b:e0:11:ab:b8:a0:49:7a:2e:35:ea:
48:44:cc:5a:2d:00:1e:3c:06:b9:b6:ee:f8:ba:f4:6f:01:8d:
06:28:69:f9:e6:1a:91:e8:46:a2:36:44:5f:99:ad:e4:f1:a1:
0d:34:55:4c:70:39:c8:20:98:a6:a7:65:60:de:9b:1b:12:b8:
e3:80:ae:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:11:59 2025 by rpki-client