Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: 0HCraJiDqWBBwj7L3RePMoswZbaSmGMnPrWaGF1+Wgs=
Subject key identifier: CE:3B:9B:5B:56:F4:8C:E5:76:53:6E:E8:6D:86:24:41:AD:9B:6B:E7
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 0196561358D4459A4628FD661F90A6D60F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 02:00:30 +0000
Manifest this update: Mon 21 Apr 2025 02:00:30 +0000
Manifest next update: Tue 22 Apr 2025 02:00:30 +0000
Files and hashes: 1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: Us44ynT2rlHrx3I6cg8BJpe6F3gJ8lqIRBnThB6WOc8=)
3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:58:d4:45:9a:46:28:fd:66:1f:90:a6:d6:0f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Apr 21 02:00:30 2025 GMT
Not After : Apr 22 02:00:30 2025 GMT
Subject: CN=ce3b9b5b56f48ce576536ee86d862441ad9b6be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:96:5e:27:a2:0d:8a:c4:f8:ba:1e:d6:86:
d6:40:68:7d:4e:0c:8c:76:f6:e3:e3:ec:61:38:28:
59:dd:69:d2:1d:69:7f:c8:f4:ed:4a:cb:7f:67:81:
0f:54:5d:b8:88:d7:d5:fd:09:c2:77:9b:ac:73:3c:
44:7c:5b:e8:09:f6:fc:bc:1e:6f:f0:58:86:0d:31:
af:58:fb:f9:7b:d7:0d:44:9f:e4:e1:7f:f2:18:3d:
7a:2c:5e:3c:c6:ec:ec:fa:72:01:11:ed:1f:a4:55:
94:e1:75:63:54:12:68:1f:62:01:d1:97:aa:d0:ad:
fb:12:84:4d:d9:bc:b4:a6:3a:2d:35:af:cd:19:b7:
b7:ab:2f:9f:22:e1:30:e5:2e:1a:e3:dc:d8:53:13:
c5:8b:ef:2a:82:8a:eb:18:f3:ff:dc:96:c8:d7:5f:
5f:9c:cf:98:0f:3c:d2:97:ca:17:57:b8:e8:59:26:
2a:81:0f:80:40:8d:92:91:aa:7a:62:2d:aa:84:ba:
86:dd:34:0a:f7:eb:07:22:d7:2f:04:36:02:77:0e:
ca:59:47:b4:ba:67:4d:79:b2:02:fd:8c:25:65:28:
4f:5c:73:54:2d:17:23:5a:7a:b6:8b:d9:cb:20:32:
0e:e1:b4:0e:8d:7c:c4:69:d0:90:2f:6e:eb:b1:22:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3B:9B:5B:56:F4:8C:E5:76:53:6E:E8:6D:86:24:41:AD:9B:6B:E7
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:99:10:7b:ae:06:e9:eb:90:b3:28:2b:b3:0e:c4:1e:18:dc:
aa:a2:13:5f:de:5a:69:41:42:62:2c:3c:73:4d:77:9b:de:df:
f8:33:05:f7:9a:23:c7:52:6d:6e:93:f3:4d:26:71:5f:b1:46:
ad:a7:34:61:82:8d:06:86:ad:f6:cc:76:27:75:58:2a:63:c0:
aa:03:20:65:a8:4d:d4:4b:9a:b3:40:78:ca:ec:59:64:b7:7e:
00:02:63:0e:b6:da:ac:8b:5d:db:1f:f0:87:eb:3f:84:55:40:
14:77:95:ff:59:b4:e5:1e:0c:cc:18:4f:9b:04:e2:0e:0b:ed:
56:77:14:22:97:45:0f:aa:22:78:b1:46:82:cb:76:5d:f7:23:
6b:89:39:43:00:8b:57:a8:98:6e:7d:d5:72:02:d7:cd:0c:29:
7f:fb:62:8e:e0:52:2d:06:77:f6:b0:79:ce:d5:59:bf:ba:12:
a8:e2:c9:39:92:2f:51:06:0e:bd:ae:c8:99:b0:ce:2d:b6:63:
ac:fb:89:98:b8:ee:8f:bd:4f:40:0b:35:db:06:b6:6c:20:16:
62:50:8c:2c:f1:5b:92:d5:f7:93:c1:a3:50:1a:67:6f:e3:34:
51:4b:5f:0f:7b:3b:54:2c:e7:bb:b4:a4:3e:96:a9:3b:68:3e:
3d:44:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:03 2025 by rpki-client