Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier: mO7x8Q5ptixyLn3Zy0lFmyJWvML3bglkPNisw+3gOaI=
Subject key identifier: 27:F2:04:94:0D:79:99:34:73:2E:DE:FB:E1:A0:57:53:4E:15:3A:9E
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 019611A0CF630E7B0F4B2387BDB10BD12129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 19:01:13 +0000
Manifest this update: Mon 07 Apr 2025 19:01:13 +0000
Manifest next update: Tue 08 Apr 2025 19:01:13 +0000
Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: 190J3siZXEJDVYuZXQd5e7pW5xyFzCA9n3zPLHswNhw=)
2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a0:cf:63:0e:7b:0f:4b:23:87:bd:b1:0b:d1:21:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Apr 7 19:01:13 2025 GMT
Not After : Apr 8 19:01:13 2025 GMT
Subject: CN=27f204940d799934732edefbe1a057534e153a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:65:66:e1:b8:e1:8e:4e:16:f4:b7:53:15:
d7:ef:ef:c7:fc:9f:4e:63:45:1a:63:6d:69:25:b4:
c8:e8:29:9e:bd:f5:a2:96:fc:18:58:1e:bf:1f:eb:
29:a3:a2:b2:bc:cf:78:8d:4e:ca:42:63:65:c0:9e:
10:d8:32:55:29:74:08:e0:f7:b0:6a:34:49:4a:68:
98:c9:54:9e:d3:4e:ed:af:c4:a3:12:d6:31:20:9d:
93:3d:4e:84:21:9b:31:18:01:74:0f:10:fe:33:ed:
dc:22:74:83:3c:66:dd:62:d6:01:d9:5c:c5:3e:f8:
56:95:e2:75:ac:a9:00:c3:7b:68:a0:11:49:60:18:
f0:52:4f:9f:3f:36:78:23:7f:c2:55:18:ea:12:05:
aa:67:47:34:9a:33:d1:b5:9c:d8:24:59:bd:8e:b0:
22:be:bb:a6:a4:ea:8d:80:2a:68:1d:c8:4b:8e:35:
24:96:a4:d4:a1:c4:67:26:3e:47:ba:38:3b:04:ed:
72:d7:de:94:8a:55:a1:f4:68:0c:60:c8:c9:3c:b8:
68:7b:3d:dd:cc:e4:19:1f:b2:71:a6:35:9d:69:25:
47:af:20:b3:8f:fd:aa:62:b2:de:6f:ca:e9:a1:65:
74:30:79:88:c9:93:2d:72:13:0e:ca:af:ac:c0:d8:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F2:04:94:0D:79:99:34:73:2E:DE:FB:E1:A0:57:53:4E:15:3A:9E
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6d:f8:e5:23:dd:80:3b:5c:ac:d4:99:91:ba:d0:31:04:66:
65:df:83:fe:6a:aa:33:ea:3b:c5:86:af:32:5d:ea:74:a4:f2:
f8:20:f7:94:47:75:fd:74:32:94:ea:73:b6:a4:be:51:68:ce:
10:5f:16:58:98:14:91:80:6a:67:b5:8c:73:64:dd:fc:0d:ae:
38:fe:69:fd:72:61:ab:99:81:1a:bd:22:35:9b:70:51:ba:b3:
95:1f:ef:3d:42:e1:bb:4f:04:7b:84:b2:b3:de:c5:1e:8e:4e:
68:aa:fd:16:a6:b9:47:2a:d6:97:21:a6:6e:7b:68:eb:25:aa:
82:ad:b8:2f:78:77:ad:c7:0d:b1:a4:26:5e:c7:0c:e5:d0:46:
71:67:df:47:a7:7f:b5:47:9a:86:5a:7f:86:9c:72:a4:ae:0a:
be:06:89:e8:a0:f5:e4:e8:38:3f:0f:19:42:ef:90:24:17:33:
4f:d0:aa:3e:70:93:d1:fb:91:26:e0:12:00:55:a2:8c:37:4d:
af:c1:9e:e2:26:53:0a:af:fb:ed:16:8d:aa:b7:4d:1c:18:6e:
b4:ca:94:c3:6c:35:b8:63:07:74:fc:a3:19:15:83:e5:91:66:
c8:e2:4c:62:d3:15:12:ca:dc:0b:7f:94:c7:8c:ea:15:59:bb:
6c:24:d8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:28 2025 by rpki-client