Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
File: EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json)
Hash identifier: 0zVEOHuZktdoZKaJ3RJ8NJGUoiI/UowInskXDOSpoz0=
Subject key identifier: 6B:F9:9E:59:20:69:B2:2E:0A:B8:07:81:87:0A:32:6F:9E:7E:DB:2C
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial: 0196A208F4BDC417CB624DBD8B999C0017AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 20:00:17 +0000
Manifest this update: Mon 05 May 2025 20:00:17 +0000
Manifest next update: Tue 06 May 2025 20:00:17 +0000
Files and hashes: 1: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: 5UV6kivLbg4koBVwb4Khxu6WkjVkATdiOoOwL4Wpym0=)
2: LJjxj6e05gMbMPexgYm_2K1KfnQ.roa (hash: kmiUoJw8fQAjfgqPrnvVFc9aSxKxADT5/r3oB44gMLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:08:f4:bd:c4:17:cb:62:4d:bd:8b:99:9c:00:17:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
Validity
Not Before: May 5 20:00:17 2025 GMT
Not After : May 6 20:00:17 2025 GMT
Subject: CN=6bf99e592069b22e0ab80781870a326f9e7edb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:fb:ec:3b:06:58:84:19:93:20:3a:0d:73:
8a:eb:2c:e7:f4:30:2f:1a:50:0e:cb:19:2e:b3:b6:
c3:7c:2e:26:bf:09:5a:8a:15:ee:32:76:23:d1:0b:
b5:16:bd:0d:b0:eb:96:43:2e:dd:46:cc:21:8e:21:
dd:a3:2f:79:26:5f:84:e1:b7:54:b4:fc:50:b8:4a:
a9:fc:77:b0:2e:88:39:13:2c:e5:5d:87:b6:7b:13:
d8:92:5e:19:0a:d8:40:61:40:a0:33:ce:d0:0c:11:
7d:8b:75:a9:e5:9a:82:30:c1:91:10:e9:96:21:ce:
9a:76:5b:bd:ef:bf:c7:d7:bc:2b:de:9b:07:a2:07:
88:f6:8f:47:44:02:34:d2:80:8e:09:e5:3f:aa:07:
4b:18:f1:58:dc:24:eb:5b:b1:a7:8e:75:e6:d7:10:
18:4c:72:60:7a:0f:a9:32:1d:91:f3:49:65:86:31:
f1:38:cf:61:d7:84:c8:8e:33:fb:49:f3:f5:81:4f:
ae:f9:f9:e7:fd:99:9f:ff:1e:7d:5e:a0:a7:de:c8:
14:0d:0e:ee:8f:13:6d:98:c9:7d:74:0d:d3:ce:4f:
6d:b2:4e:37:f8:fd:07:bb:fd:61:1c:37:76:04:e9:
ec:43:d0:1a:4d:2c:55:be:f4:20:0b:20:b4:3e:03:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F9:9E:59:20:69:B2:2E:0A:B8:07:81:87:0A:32:6F:9E:7E:DB:2C
X509v3 Authority Key Identifier:
keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:63:fc:a4:a9:b6:76:92:08:9d:94:01:db:6b:31:c7:f6:e0:
cf:25:14:0a:0d:41:e9:c3:70:29:a9:51:70:4d:2e:e5:84:a1:
81:ec:55:e1:0e:4b:4d:0d:05:4b:14:96:e0:3c:1f:e4:fd:98:
ea:97:14:4a:48:81:13:af:eb:32:5a:2d:a1:11:15:3e:02:6f:
5b:ca:a2:f5:5f:12:dd:d1:09:93:c5:df:d1:8e:36:70:68:3f:
11:18:fa:63:18:d1:dd:e8:f5:66:8a:21:53:87:af:c6:d6:6b:
ba:a2:e9:f6:9a:6c:b8:6a:75:82:0d:b3:49:41:6a:fb:4b:64:
4b:8e:3f:e0:30:30:49:a6:6b:88:a5:0e:12:22:07:fd:bb:e4:
f5:a7:97:b5:0b:38:07:47:c0:3b:e2:f3:9b:ae:47:f3:62:66:
ff:1d:2d:e8:42:84:9b:96:33:0d:e9:1d:78:a8:cc:b7:c5:91:
88:e4:00:de:44:14:96:81:dd:17:8a:4a:dd:70:66:81:5e:a8:
35:67:f5:d7:26:20:02:75:43:4d:fa:ce:11:03:33:ae:c5:e0:
12:21:42:40:e8:aa:78:29:f7:62:44:7a:1a:07:10:50:cd:09:
22:bb:3f:c7:c9:d6:36:71:dd:58:ef:06:9b:fd:a8:51:54:f0:
dd:1c:55:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:46:23 2025 by rpki-client