Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File: ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier: gb4P3HmxggJJ4zbC/MSx6trGpmyROF+nVj7q/QxaGww=
Subject key identifier: 29:26:AB:56:AC:20:9C:78:77:38:16:26:31:5E:B0:CB:EE:30:29:84
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 01962972643A210B111C2B11556D4E56E5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number: 10F6
Signing time: Sat 12 Apr 2025 10:01:24 +0000
Manifest this update: Sat 12 Apr 2025 10:01:24 +0000
Manifest next update: Sun 13 Apr 2025 10:01:24 +0000
Files and hashes: 1: Te1smkaZFoPIXpDeDnkA_3SYuF4.roa (hash: fsg7fcR1+A1zfqsZoPgI6UandEUlSTg2/PWpSOpOTeg=)
2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: gaytZwjeCnXencVdKPKNHzm3Y1P0La9pSuHGUI0TxLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:72:64:3a:21:0b:11:1c:2b:11:55:6d:4e:56:e5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Apr 12 10:01:24 2025 GMT
Not After : Apr 13 10:01:24 2025 GMT
Subject: CN=2926ab56ac209c7877381626315eb0cbee302984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8c:63:83:6e:8d:5e:1b:9b:55:70:4a:f6:a4:
e4:99:c5:3c:e3:3f:d9:ea:99:06:4e:03:c8:7a:d4:
f5:75:17:fc:33:6b:57:f6:4b:d9:71:52:14:33:90:
b8:ad:4f:07:58:3d:58:b9:ba:b6:dc:eb:61:2d:34:
31:03:45:26:93:a5:55:c3:d6:7b:a2:f3:37:0f:6d:
f4:f9:a6:09:93:02:aa:b9:d3:24:73:a9:7d:8b:fb:
11:c8:7f:85:0e:73:04:1e:68:a4:7c:d0:41:e1:66:
7f:b0:3f:be:8b:80:16:5d:49:33:b7:01:8c:98:39:
d7:93:5f:3b:37:d0:c7:5f:0b:80:47:81:3a:b2:0c:
d9:67:07:3c:35:31:c9:29:3b:f0:dd:c1:d2:cd:e5:
61:bd:a5:66:4e:e3:3b:fc:de:84:3f:15:f2:28:25:
80:62:d9:0b:ba:49:ed:1d:b5:f9:2f:fe:f5:d1:9e:
8c:73:79:87:c7:e9:d1:5d:45:0f:f5:f1:94:83:30:
47:91:54:17:44:15:4a:d5:6a:0d:af:88:39:9f:dc:
9b:fd:7d:fe:95:39:2d:b5:f0:4f:2f:41:33:61:d7:
7e:76:37:48:7f:e7:19:a1:d9:61:03:b9:6b:ee:4c:
ab:0c:06:f2:29:a7:d3:47:d7:9b:3b:59:c6:d2:3e:
34:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:26:AB:56:AC:20:9C:78:77:38:16:26:31:5E:B0:CB:EE:30:29:84
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2d:33:4b:4f:b5:9c:2e:72:ca:8e:9a:2a:c9:b4:7d:b8:a9:
87:78:28:f5:a6:ac:3b:9b:e7:ba:1b:ba:22:5f:b3:ff:6a:96:
1a:6e:1a:2c:13:61:62:ec:51:9e:95:14:cf:2d:13:8d:30:9d:
53:57:17:96:34:b5:fa:a8:47:e2:37:84:65:99:37:2e:ae:00:
27:af:4d:1d:01:7c:d3:3f:93:73:f3:d1:1e:23:ea:7f:87:1e:
d0:f8:19:e4:d2:75:e4:4d:4c:b6:42:41:c6:c7:45:1e:3f:ab:
1f:86:c4:78:37:4b:a5:44:27:d3:57:ab:82:3a:72:0b:05:61:
75:7a:b3:a1:c6:67:3f:70:7e:a3:aa:8d:f0:35:bf:b5:6d:5e:
73:09:cd:c3:09:91:87:54:a8:4c:e5:c0:3c:1d:45:0d:18:2f:
ec:d1:32:07:bc:c2:e1:7f:c2:65:f7:11:48:62:7e:38:0b:3f:
e7:85:23:e2:7c:93:4a:d9:d4:48:1b:a6:3f:5a:d2:47:6c:41:
43:b8:e4:eb:6c:7b:11:d3:8c:f1:1c:c6:f8:11:69:d4:5b:f2:
9e:75:66:d0:3a:f7:68:59:f3:09:14:a3:62:c3:6e:2c:5b:d6:
55:f6:58:16:07:c2:b0:f8:87:6d:32:31:99:06:93:db:16:7b:
80:cc:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:23:47 2025 by rpki-client