Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
File: ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json)
Hash identifier: fsg0XqTCbRRQzZdhrlefQY0FHSIQBPIaAS0hUPI0JQs=
Subject key identifier: 4A:F2:49:E4:8A:F3:00:A1:F2:B3:FA:E4:76:60:CC:7A:3C:E6:8E:80
Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
Certificate issuer: /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Certificate serial: 019660CEDC24930E2700C81A9B69170EEE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
Manifest number: 0CF9
Signing time: Wed 23 Apr 2025 04:01:31 +0000
Manifest this update: Wed 23 Apr 2025 04:01:31 +0000
Manifest next update: Thu 24 Apr 2025 04:01:31 +0000
Files and hashes: 1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: E33pfrkTGesF6hJQGF5LpLIyhKbeV8SdXNez0gGXMvs=)
2: TrL7vyhk-vrmOcVyXUhkgoFF8IM.roa (hash: Hfs6eqQDDmF2iRkKQ4LyqXry5vY1cydb2ruM4NvmGtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:ce:dc:24:93:0e:27:00:c8:1a:9b:69:17:0e:ee:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Validity
Not Before: Apr 23 04:01:31 2025 GMT
Not After : Apr 24 04:01:31 2025 GMT
Subject: CN=4af249e48af300a1f2b3fae47660cc7a3ce68e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:a1:34:6b:e4:89:0c:cc:1c:a7:c6:8b:74:
80:f1:46:c6:e6:8d:84:df:0e:5d:d1:ae:83:a3:b5:
83:4f:d5:0b:68:0c:a9:88:9f:04:4a:67:34:88:27:
7c:8f:cc:74:c1:6e:d1:e6:33:ff:3d:63:62:aa:ce:
60:21:1b:70:22:e3:d7:22:04:e7:47:9a:0b:e9:fe:
a7:2d:b4:c2:2d:02:1f:c4:c8:78:d6:9a:17:66:38:
47:3c:15:e2:aa:29:91:17:92:93:34:e0:ab:e1:48:
23:e4:9b:03:81:91:2e:c5:23:61:f2:9f:e0:19:0a:
24:38:de:49:24:db:a7:d1:6e:e4:63:ec:c5:f9:f1:
2a:fb:6e:3f:06:f2:34:b1:52:2f:24:20:28:11:1e:
63:49:19:bf:58:cf:e8:ee:ef:e6:ce:27:14:21:c9:
cd:78:2b:5c:f0:76:bf:44:d9:19:49:d7:b0:60:20:
24:f0:19:79:ac:bd:2c:33:36:15:49:3b:58:64:6c:
17:9f:c2:80:87:86:5c:ad:3a:7d:22:e7:b9:73:63:
ac:4b:c9:01:0e:dc:9f:9c:2b:e9:0c:62:cb:c8:53:
d5:f0:e3:bc:82:37:1c:cd:4a:c9:b1:ad:71:70:07:
6e:a1:bc:d7:f5:62:c4:06:d7:44:16:6d:d4:0a:3a:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F2:49:E4:8A:F3:00:A1:F2:B3:FA:E4:76:60:CC:7A:3C:E6:8E:80
X509v3 Authority Key Identifier:
keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6a:46:9e:07:e2:72:69:5d:37:2e:11:1b:b7:7f:42:9d:70:
48:71:5d:e0:fc:dd:48:cd:92:17:7b:2a:7c:4d:67:97:26:e5:
13:05:58:84:6b:d1:7c:e7:cd:b1:06:05:75:2f:96:72:0e:0e:
84:3a:da:c3:42:8a:e7:37:43:13:16:27:73:76:2f:97:b7:50:
2a:3a:7c:20:73:40:83:e2:b7:e2:b3:09:17:8c:6a:b6:91:39:
c6:f4:50:a9:36:de:d6:1b:de:e8:b1:58:4e:0f:4f:59:f1:e2:
76:85:84:e3:a8:7e:e7:ee:db:ac:91:a8:ac:f9:14:9f:44:df:
66:6c:dd:6a:1b:04:d8:ef:52:d2:93:12:72:17:b4:30:3d:33:
56:2d:2d:18:47:00:02:e9:e8:76:21:bb:a8:ec:a7:53:6a:91:
03:7d:c8:21:5d:c9:74:2c:0e:b3:95:d2:00:77:ec:57:7c:ac:
ac:d8:80:d3:48:22:a8:ba:b5:56:a9:34:e2:15:a4:b2:ae:f5:
01:d7:30:e7:46:be:d8:47:fe:84:94:ae:88:64:da:42:b6:c6:
1e:9c:6b:2d:98:e3:08:88:13:49:fb:8e:40:02:fa:95:f9:ae:
44:c9:1f:be:1d:9a:92:5c:21:b6:21:36:9c:f7:20:b4:19:d1:
60:41:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:59:58 2025 by rpki-client