Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier: STE88B4lSVxfPXJQNuTtj+o/Eydt3PKLUP8NuzLyeiw=
Subject key identifier: 70:08:12:FE:B2:C5:28:40:A2:81:B4:A7:3A:AB:8F:B2:D1:E4:1A:6A
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 019652A4CA90C5A3FA64E4EE1037938F8067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number: 0E62
Signing time: Sun 20 Apr 2025 10:00:53 +0000
Manifest this update: Sun 20 Apr 2025 10:00:53 +0000
Manifest next update: Mon 21 Apr 2025 10:00:53 +0000
Files and hashes: 1: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: 0p+7SA8+78sACQGCNK2KlEQ2oxpZqTqMSpJbJW/oCws=)
2: YJThomDkTAxHB3sMffMKNvwlVog.roa (hash: q9KKD46ZbFaN4N+tLyZyztTGn9syCZbmt2p+6xanqyk=)
3: qRonRz0lP6v25g416Nv9KduKRpQ.roa (hash: BblAAkuZ7lKOAoNqkSnh1OQbrzmO29oSPkA4X1nAF2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:ca:90:c5:a3:fa:64:e4:ee:10:37:93:8f:80:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: Apr 20 10:00:53 2025 GMT
Not After : Apr 21 10:00:53 2025 GMT
Subject: CN=700812feb2c52840a281b4a73aab8fb2d1e41a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:69:51:d9:51:0b:bf:63:a9:e0:f6:e9:d2:
b1:c0:5f:bc:f5:17:2d:e1:ad:30:04:bc:f3:2d:f0:
57:66:99:f2:5e:d7:1c:50:86:cc:5c:43:15:05:61:
9c:2a:e8:33:1f:a7:11:2f:47:f4:64:83:24:e6:46:
8e:fd:ab:0e:63:ad:a7:38:8a:15:93:d2:cb:4c:92:
38:a4:0e:ad:4c:1b:8d:4c:9f:6d:bf:be:55:f2:c6:
cb:43:a8:28:5f:03:6a:4d:21:c8:55:7b:ca:ad:f8:
93:7c:12:a6:4a:d4:6a:0a:8a:75:4c:34:03:46:f4:
94:02:7d:40:5d:43:0b:8b:a6:5e:60:1a:15:ff:bf:
54:97:da:8c:87:4d:2d:8c:fe:d0:29:35:80:f3:9c:
81:e4:cf:62:78:05:62:32:3c:d9:85:1c:a9:66:8c:
9a:a7:4a:f0:ee:ad:74:84:b8:71:47:d4:9c:ac:7c:
44:42:b7:e7:ad:92:ef:f1:02:32:d3:07:d4:e7:88:
9f:c7:6b:a7:ec:77:f2:8a:44:94:77:e3:35:08:c0:
6c:9d:21:d5:31:24:45:7b:4d:98:84:ff:5f:12:25:
a5:35:a4:66:68:3e:70:3f:5d:35:36:25:82:68:2f:
75:a1:8f:54:b8:81:83:4b:d1:60:35:4c:30:56:4e:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:12:FE:B2:C5:28:40:A2:81:B4:A7:3A:AB:8F:B2:D1:E4:1A:6A
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:79:15:e3:ba:2f:c3:98:a6:4e:f3:27:91:fa:01:88:c3:c0:
fd:42:6d:99:3c:cc:7e:bb:81:a6:6b:03:ca:07:de:44:a9:df:
b3:27:25:35:01:ce:17:7c:fe:b8:9c:46:c9:42:19:9e:2e:31:
a9:05:07:f6:20:1a:52:98:07:4c:21:1a:87:a1:e0:59:e9:a4:
05:f3:9a:05:5c:cd:b6:45:27:42:76:40:13:13:c0:3a:58:c6:
23:ef:9e:33:ef:0d:72:94:b8:11:cc:98:61:eb:d2:df:3f:20:
2d:c5:68:0f:9f:d3:05:c4:9c:5a:0f:19:d0:b4:8c:b0:19:c1:
8f:7c:71:f3:d1:cc:27:9c:f7:36:d8:d9:c7:3b:aa:75:12:fb:
da:f5:85:7a:ee:22:09:78:92:2f:98:dc:32:f7:ff:48:e4:32:
a5:a2:42:e6:1e:41:d1:df:8d:32:84:b7:c1:08:30:f2:2a:45:
f2:67:86:09:46:c5:90:2d:05:5e:7b:d7:73:dd:86:f3:7d:a3:
cf:6b:46:86:2a:7c:b8:f9:b5:6f:ad:ca:20:69:45:f7:8b:3f:
23:6e:e8:9d:f0:59:20:89:21:6e:90:30:e9:cc:cd:35:4c:aa:
d9:f0:e4:0e:7a:a5:41:57:86:05:8e:bf:bd:33:fb:01:3c:78:
d1:0d:8a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:23 2025 by rpki-client