Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: gYNj5sJx3iRZhwHu08a8GkzuiG/4bPJz1SxEagGuanU=
Subject key identifier: 0B:9C:21:C8:29:C2:EE:D9:D5:65:DB:A1:B0:F3:F3:E0:19:A7:73:F3
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 019637D1E19684710DB3D81951B0BC346A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 0E57
Signing time: Tue 15 Apr 2025 05:00:23 +0000
Manifest this update: Tue 15 Apr 2025 05:00:23 +0000
Manifest next update: Wed 16 Apr 2025 05:00:23 +0000
Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: 3dzvVzXFR36Tn3XdBZow5syt2am5lxbq6Rkkb8uClXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:d1:e1:96:84:71:0d:b3:d8:19:51:b0:bc:34:6a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Apr 15 05:00:23 2025 GMT
Not After : Apr 16 05:00:23 2025 GMT
Subject: CN=0b9c21c829c2eed9d565dba1b0f3f3e019a773f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:73:b1:5a:2a:87:06:37:98:89:68:58:5b:
96:9d:bb:27:70:31:56:35:6e:e3:17:9e:b9:ba:34:
9d:25:fd:64:05:0d:bc:74:19:5a:2e:b4:bc:93:dd:
53:d3:dd:94:fa:b2:c8:b1:ba:dd:c0:4e:a5:01:f4:
97:df:63:38:cf:14:ec:8d:c3:7d:74:96:fb:3b:24:
7e:32:8c:e2:ad:85:fa:c3:43:08:3c:07:45:a7:b2:
53:23:a7:ff:71:d1:9d:46:f1:66:a4:77:b9:60:b5:
1b:48:10:94:8f:db:5a:a1:c3:b5:df:77:5a:57:ab:
55:6b:8c:8a:3d:fb:f4:a8:92:8e:bb:32:e4:d0:86:
23:a6:33:43:ff:8e:de:3b:09:62:ee:4f:8b:a5:33:
ae:8c:94:d3:05:6c:4f:57:77:3c:52:41:29:09:16:
85:d4:21:a8:da:36:67:f3:a9:d1:ce:e0:1b:8a:0b:
7a:af:19:c1:a8:a6:03:2e:8e:27:a4:56:30:98:93:
1d:e7:38:f5:85:6e:5d:5d:02:9e:4c:b4:9f:20:8f:
57:62:ae:0a:59:56:e6:44:7f:81:6c:2b:99:99:98:
29:cc:cb:23:6f:89:01:0b:24:30:38:1a:d4:cf:43:
0d:db:b9:2f:68:55:22:ed:8c:fe:99:c4:97:d4:19:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9C:21:C8:29:C2:EE:D9:D5:65:DB:A1:B0:F3:F3:E0:19:A7:73:F3
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:be:26:d2:d9:e0:a1:94:5d:7a:4a:fc:14:96:d9:14:f8:f3:
2a:3b:1b:05:9f:c0:72:98:62:e2:1f:73:73:79:f0:8b:86:8d:
7f:b1:08:12:21:e7:79:94:66:80:20:b7:ab:25:e7:4e:b1:96:
d4:44:1e:1b:e5:b7:1f:2e:a2:1e:40:c3:ac:69:95:04:9a:eb:
37:92:5a:58:31:71:a4:a9:aa:3b:13:f8:b8:47:88:2c:5f:86:
2d:f4:87:85:7f:f6:43:1d:2b:7a:ed:e5:ba:90:ba:f9:70:35:
a4:d9:99:bc:23:f7:fe:d0:45:a4:27:7b:65:c5:68:e8:a8:80:
38:5c:4f:0a:39:f3:9f:d1:06:df:be:63:93:ae:b1:ec:ae:8c:
50:70:a3:e7:64:50:9f:36:91:f8:17:2a:c8:ec:0b:d9:4f:25:
2c:43:c9:ed:20:9b:75:39:86:8a:4f:43:21:8b:cf:dc:88:03:
a0:c9:3b:9f:8e:74:b1:86:ab:b2:53:7b:51:0a:a3:e7:83:a4:
bb:5b:8c:fd:66:b5:ba:d9:d8:6d:33:5a:80:4d:cf:81:cc:45:
47:b6:dc:6f:36:e6:3b:be:a3:db:0a:ea:11:c6:57:35:5b:64:
01:72:99:e1:02:f1:3f:2d:54:15:c1:7c:97:cb:39:10:06:e0:
bb:3c:0f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:55:10 2025 by rpki-client