Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: KH0r+TScuqy/PoqnAttL65Xp7E5gsYkkV8HWjGtr60M=
Subject key identifier: B4:24:6A:6B:1E:6B:62:6B:E9:F6:76:9E:7B:D2:05:38:E1:1F:3B:76
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 01965D28515893DAD7647AB47CB9A5A8372D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 11:00:45 +0000
Manifest this update: Tue 22 Apr 2025 11:00:45 +0000
Manifest next update: Wed 23 Apr 2025 11:00:45 +0000
Files and hashes: 1: 6FHQUBmvLail0AxeSMM8FFT8dQA.roa (hash: H5uT4+VjIdOpYm4p1Ez2YYLSN2170bhAaYGMnJDWIdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: oPYwifE9np8xlFQn9iFjS1+K548PyC7ckkIykkOME4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:51:58:93:da:d7:64:7a:b4:7c:b9:a5:a8:37:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Apr 22 11:00:45 2025 GMT
Not After : Apr 23 11:00:45 2025 GMT
Subject: CN=b4246a6b1e6b626be9f6769e7bd20538e11f3b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:bc:fb:27:91:11:85:66:b0:7a:ab:a2:0b:
2c:6f:91:90:38:51:58:b1:ee:8f:14:28:f7:22:cb:
5d:64:f5:2c:6e:c6:cb:c6:35:3c:97:4c:37:ce:43:
20:b2:d7:bf:0a:ef:4d:c6:f4:27:15:85:74:6a:9d:
71:e3:06:b2:ba:75:2f:5f:a2:b5:aa:50:da:74:51:
8c:5e:95:64:9a:bb:13:4c:0b:2d:00:6b:40:41:7e:
12:22:5c:d1:d3:1d:55:4e:3b:85:1c:fc:6c:d9:0d:
a7:fc:e6:7a:06:8f:2c:1b:94:93:dd:67:6e:b9:11:
7a:10:a4:c0:b8:16:67:ed:3b:01:d9:7f:98:8f:17:
2d:2d:54:dc:13:1b:34:0f:39:c5:c7:0f:ff:9c:ff:
fe:35:23:ae:15:79:f2:12:47:b8:5f:b1:dc:a1:53:
a7:74:3f:1c:ca:af:1f:e1:c4:1c:13:d1:28:42:9f:
e3:3e:36:4c:a5:c6:bc:1e:1d:df:3e:da:dd:58:1a:
7b:43:68:8a:cc:76:d0:8c:21:5f:66:d6:b6:0b:83:
c7:5f:63:d0:f8:cf:48:9f:86:92:cc:63:60:dd:1f:
fd:93:c9:15:45:43:c0:09:d5:a0:65:b9:5a:48:8c:
b5:b4:37:a6:e5:7f:41:0d:1f:52:23:60:aa:a7:a4:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:24:6A:6B:1E:6B:62:6B:E9:F6:76:9E:7B:D2:05:38:E1:1F:3B:76
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:28:0d:4b:20:b2:e8:80:e0:94:83:2d:c7:ee:34:22:49:49:
0e:90:d5:0e:f4:80:1c:cc:e4:b1:ee:96:06:5d:eb:4e:86:70:
69:c1:fd:52:79:24:6b:4a:c8:f2:80:88:25:30:93:fd:78:44:
dd:67:07:39:60:fe:b3:c3:64:96:9c:64:1a:39:a8:51:ed:19:
a3:0e:a0:2b:fc:85:ac:16:51:9b:88:16:fc:ea:76:05:5b:f5:
bd:7e:4b:7c:73:13:99:9c:6b:48:11:01:1e:9b:76:f0:56:89:
7b:c5:49:93:e2:fc:f6:84:a4:aa:a6:26:21:f0:d2:39:76:07:
93:70:c2:70:14:a0:3e:d3:ac:1b:2b:c8:28:80:1c:14:88:ae:
18:7b:8a:06:54:48:7d:ac:c6:39:00:a9:d1:03:4b:a8:16:91:
bb:3f:d5:99:02:dd:bd:67:e8:c8:39:e8:56:d9:a8:03:88:f3:
c7:3e:b6:0b:78:2f:67:ad:a6:7f:77:17:b1:5a:77:05:1f:ef:
24:de:ec:88:75:c5:86:51:94:6a:df:23:46:77:35:5c:31:a0:
f8:29:6f:de:73:6f:09:ff:26:66:8b:89:6f:70:5e:94:86:5a:
47:a6:c3:43:48:9f:8b:e7:cb:40:8f:50:ca:21:04:b5:5f:41:
77:59:46:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:40:18 2025 by rpki-client