Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File: EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier: CgirQj7mBc1TobpDpZkMeN59fHLXsaV+cPQ+F0jvfIM=
Subject key identifier: B2:2D:38:EF:E4:E8:62:DE:16:D2:01:CE:2E:78:A4:C3:C9:65:54:69
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer: /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial: 01958B1693747A4770A9CF4843579649C9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number: 102B
Signing time: Wed 12 Mar 2025 16:01:07 +0000
Manifest this update: Wed 12 Mar 2025 16:01:07 +0000
Manifest next update: Thu 13 Mar 2025 16:01:07 +0000
Files and hashes: 1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: UX5MB43rHJWdbvT3yGMWTtBtEKln7iAxfZeLfHrYBHI=)
2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:93:74:7a:47:70:a9:cf:48:43:57:96:49:c9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Validity
Not Before: Mar 12 16:01:07 2025 GMT
Not After : Mar 13 16:01:07 2025 GMT
Subject: CN=b22d38efe4e862de16d201ce2e78a4c3c9655469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:2f:da:ac:6d:44:c8:6b:b7:e7:f1:b4:0d:
9e:c4:74:0f:fe:e2:67:f3:6b:d9:d8:16:a6:26:0f:
f4:f2:2a:83:dc:ba:1e:b0:5f:26:06:93:4f:3c:ef:
a7:00:d9:8a:ea:f4:59:89:fe:2b:4c:e4:f7:ed:72:
9d:53:81:68:6c:90:e6:d4:cc:bd:49:c9:0a:85:01:
a9:d0:02:d7:ac:4b:dd:4a:e3:78:42:1e:8c:d7:8b:
d3:40:b2:a7:51:1e:63:07:bc:e8:26:ce:55:60:04:
e1:9a:d0:ed:79:ea:90:0f:a6:19:20:ec:d5:00:99:
fe:c7:72:15:3b:58:18:90:ca:7d:ae:14:09:5e:73:
7a:21:d3:fc:b0:14:2d:65:ea:74:67:bf:01:b0:3a:
96:06:78:d8:9f:df:d6:54:3d:0d:fd:c8:d2:6b:fb:
23:16:d8:96:e0:42:d8:5a:5d:bd:28:93:51:a5:1b:
a1:55:69:15:58:4a:35:fa:a4:c8:3e:9e:27:c2:50:
59:60:3b:bf:e9:d4:aa:2a:42:0c:d2:bf:f8:e6:ad:
a9:b3:15:a1:fb:cc:1c:a9:ce:d4:86:6a:68:1a:2c:
de:14:85:f0:42:e0:de:51:90:c8:ec:58:9c:f9:68:
94:d4:88:58:77:d0:ee:e4:08:1f:cb:ab:ab:57:9c:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:38:EF:E4:E8:62:DE:16:D2:01:CE:2E:78:A4:C3:C9:65:54:69
X509v3 Authority Key Identifier:
keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b3:73:a3:14:6f:66:13:7e:6c:5d:ab:bf:94:f2:3a:2f:42:
50:17:f0:41:8f:c2:7a:e8:74:0c:96:51:30:43:a2:b7:60:79:
e7:63:4b:39:6c:f1:62:7c:77:6c:e8:d7:43:16:a1:f8:ab:35:
c7:49:8e:fd:07:0a:36:06:c3:8e:b6:87:1f:81:e8:93:b2:f8:
e8:8c:34:46:5e:82:76:5a:3c:a6:f5:72:16:9b:1e:b2:eb:df:
55:5e:ed:9d:a1:88:d0:71:c6:3f:30:95:2a:c0:c9:01:c7:33:
c9:f8:88:12:d5:6e:66:2e:46:b1:1c:0b:a3:34:a9:19:a0:01:
a3:ef:b9:bd:fa:f5:b2:16:47:f6:3e:fc:67:7c:a7:03:63:5c:
19:b0:f7:b4:86:ab:30:c3:5b:4b:08:72:65:81:67:6c:23:7c:
c3:fb:f4:73:33:72:f2:8b:5e:ce:c9:8b:8d:d0:6f:7a:69:d3:
66:f8:05:dd:d4:3a:96:ac:4c:f5:21:8e:b5:ed:57:56:3a:9b:
9c:b5:18:0e:a7:58:a7:a5:81:f2:f8:ad:31:6b:77:bc:be:01:
d0:28:b9:f8:8c:48:a2:09:6b:fc:79:23:93:76:70:10:6a:3a:
63:98:21:a9:39:43:a4:8b:61:b6:af:ce:84:1e:d7:ae:90:97:
4f:c0:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:00 2025 by rpki-client