Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: i3ZluVY337GaPgtobNNiiHbDOtf97C1kupadQAkyf7w=
Subject key identifier: BB:A2:1C:BC:3F:2D:88:38:9B:EB:78:23:98:F9:EB:9C:00:6D:4E:5B
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 019590061FFB3B9D26A299C48C72949C8FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 0F73
Signing time: Thu 13 Mar 2025 15:01:15 +0000
Manifest this update: Thu 13 Mar 2025 15:01:15 +0000
Manifest next update: Fri 14 Mar 2025 15:01:15 +0000
Files and hashes: 1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: YCWfdWVW7u+epvNDvDxB+4yDG6vjfug95W+L/uj6cIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:06:1f:fb:3b:9d:26:a2:99:c4:8c:72:94:9c:8f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Mar 13 15:01:15 2025 GMT
Not After : Mar 14 15:01:15 2025 GMT
Subject: CN=bba21cbc3f2d88389beb782398f9eb9c006d4e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:f1:71:58:74:3d:0b:eb:e2:bc:c7:bd:10:
8b:35:d6:36:50:02:d4:af:e4:35:14:8b:ad:46:08:
0b:7b:37:d7:b3:bc:75:7a:33:08:41:87:57:59:1b:
cb:3b:1a:c2:96:64:ff:15:50:c1:03:56:7a:b5:21:
34:ac:eb:a5:ae:33:21:ad:93:b4:ad:6a:a6:b4:7f:
97:f3:5b:95:e0:69:d7:9a:da:35:a4:00:0c:bc:33:
7a:68:a1:a8:26:1c:e8:96:60:fe:02:55:9d:90:f6:
a8:2a:87:26:46:d5:1f:bc:a8:31:9c:c7:0b:3e:78:
03:35:4f:ad:e5:81:d4:34:56:8f:f7:ee:c7:54:f8:
b6:d1:bb:07:97:3f:e3:66:ca:e8:07:27:db:0f:bc:
50:ed:0a:81:be:d9:52:98:55:15:d4:46:4c:06:97:
15:c5:21:32:74:8c:5c:44:28:ed:e5:2b:ad:61:cc:
db:8f:47:ae:96:f6:5b:66:2e:56:f3:77:c2:8f:40:
16:32:38:69:d5:6d:02:65:89:f9:56:ed:0b:85:98:
5d:3e:98:96:b7:7f:a4:f5:c8:e8:c3:9c:c4:e2:53:
a0:f9:ba:24:0e:be:bf:ad:e4:91:9a:43:82:23:9c:
9b:89:b8:eb:05:a2:f3:e0:cd:f8:8b:f4:0e:13:2d:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A2:1C:BC:3F:2D:88:38:9B:EB:78:23:98:F9:EB:9C:00:6D:4E:5B
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e0:84:71:96:c4:6b:c0:6f:90:89:81:80:9c:95:8d:6a:68:
c4:18:d8:2c:c8:e4:0c:cc:19:39:80:85:eb:b2:ad:cd:c4:a1:
5f:67:6b:bf:4a:58:39:4d:f7:68:e1:b3:ab:4a:5e:6d:5a:6d:
e6:1e:7b:61:92:9d:ec:31:9b:a9:53:64:a0:33:80:e7:80:9f:
ab:55:a6:c2:52:b8:af:4a:fe:50:48:29:99:fb:1f:2e:5d:55:
47:bc:8c:f0:ad:99:44:ca:03:5c:dd:3b:11:36:18:10:0f:d3:
99:a2:8b:cd:46:a6:fe:72:08:1b:5f:a3:fb:dd:3b:c9:55:a9:
0a:fa:22:89:ae:5e:5d:87:05:35:3a:85:33:99:8b:22:42:82:
c0:d5:31:d6:c7:7e:b8:ad:9b:44:d8:fc:d9:46:a4:83:51:1d:
a6:a3:54:f5:43:12:44:20:ca:eb:50:04:2d:6a:60:10:b5:44:
23:fd:38:41:b4:02:8b:63:66:42:08:77:57:80:2c:c5:b7:7c:
50:c1:74:51:ee:26:c7:c4:e2:ff:53:22:e4:3b:5d:08:4b:ea:
90:ac:b4:28:c9:fa:43:72:53:1b:83:32:89:de:2e:5b:14:32:
10:ed:80:fa:fa:1f:b4:68:af:2e:b0:a4:35:b9:fa:db:c1:c2:
b5:86:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:01 2025 by rpki-client