Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: lxg1aLB4MxcuT8Hv8oUcLKZQreLgTKkOYDRk1rTszTM=
Subject key identifier: EB:EB:32:6F:6D:7F:ED:A2:B2:29:EA:BA:8D:3F:F3:13:44:83:B3:D3
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 01958C97188AB1807F7C1FBC45DEB96BCBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 10BC
Signing time: Wed 12 Mar 2025 23:01:07 +0000
Manifest this update: Wed 12 Mar 2025 23:01:07 +0000
Manifest next update: Thu 13 Mar 2025 23:01:07 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: tcBvQRRGZj41ocCRcsj4F8pdRnS8fFjrLiLmgpjTDUE=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:18:8a:b1:80:7f:7c:1f:bc:45:de:b9:6b:cb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Mar 12 23:01:07 2025 GMT
Not After : Mar 13 23:01:07 2025 GMT
Subject: CN=ebeb326f6d7feda2b229eaba8d3ff3134483b3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:ae:90:f8:6d:c8:12:4f:62:94:2b:5e:c0:
49:7f:c9:14:c4:7d:51:d5:cd:8b:d7:52:36:ba:fc:
79:46:fa:15:46:55:7d:15:c6:2c:7b:81:e9:cf:26:
46:23:ff:bc:88:f7:b7:f7:dd:f0:fc:2d:70:b6:ea:
a3:88:89:f9:93:1b:7d:b0:ad:97:39:ed:2a:5b:e9:
b1:74:31:e5:f3:26:d6:5d:12:31:76:35:27:e0:f1:
b9:13:82:98:d7:7d:43:7c:57:0c:47:d5:8a:2c:62:
2c:9b:9e:3c:0b:02:d0:42:70:d7:27:f0:37:a1:03:
e2:fb:03:77:ae:29:78:94:37:ea:58:e5:2c:b0:72:
d2:78:60:4d:83:28:22:e7:a3:ea:d2:e0:06:2e:54:
f6:53:16:f5:7d:e5:48:37:d3:7a:a3:78:d9:a9:32:
af:11:ba:bc:cf:0b:64:ba:19:06:db:52:be:a2:cc:
e1:4b:e3:e0:13:81:8d:5b:25:ea:c0:73:b0:c8:1c:
9e:b8:97:22:17:1a:14:08:08:cc:1e:b7:b4:a9:2f:
7c:00:d6:b9:12:1d:a7:a8:38:73:bd:cc:b3:0d:1a:
b6:ad:ac:7a:a7:42:0d:cd:15:7c:99:de:fe:74:f3:
11:a2:79:e5:68:f0:98:c3:ac:67:da:a4:09:60:5f:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EB:32:6F:6D:7F:ED:A2:B2:29:EA:BA:8D:3F:F3:13:44:83:B3:D3
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ea:d1:4d:d6:b1:6a:21:30:28:08:ce:91:74:53:65:02:a8:
da:32:3c:7e:b2:8f:1b:b7:22:f3:8e:a6:2a:bd:cc:88:1f:a1:
9a:5b:0b:c6:5e:77:e7:3f:d0:45:a0:05:f7:08:2d:0c:2b:83:
6f:bb:6a:77:e7:a8:61:9d:e2:f0:88:31:51:0e:70:35:d7:af:
67:d7:d1:96:17:63:72:2b:5f:93:71:02:71:f4:94:6f:48:87:
c1:ee:fb:ce:d6:5f:15:35:2a:61:7a:1d:4e:13:b8:d0:67:c0:
ec:e2:ad:4b:fd:af:33:e6:26:b4:60:70:ff:ad:c3:83:40:da:
9d:cb:d0:89:da:19:3b:ae:46:03:25:b4:37:ac:32:af:58:47:
d2:3e:e5:50:c1:05:ec:c6:4b:cb:1d:ea:c9:07:67:6e:d1:8e:
0a:24:99:73:2c:b8:43:7e:c7:0d:1d:cc:1c:7f:f1:b6:7d:72:
6d:8a:11:d5:ca:35:9f:09:2d:4a:ed:79:1b:7d:86:ca:2f:cb:
17:54:00:18:a1:82:2f:95:f6:32:84:40:cd:52:0c:8a:44:ec:
e5:43:70:e8:e7:c7:59:b3:97:16:2c:07:d8:64:79:bf:7f:39:
5c:63:e9:80:0d:54:fc:37:b7:c0:fc:a2:c0:fe:2d:bb:71:0b:
96:13:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:11 2025 by rpki-client