Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
File: EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json)
Hash identifier: VEikkZrIMrc9JF+EYIZA9L2SACH1tsUtofFwLTysG58=
Subject key identifier: 0C:94:D4:B1:BD:B2:A8:60:09:25:4F:70:27:34:4D:D9:B5:7A:4D:C1
Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
Certificate issuer: /CN=11a823c64271f796946a4682596e732835cc4ec8
Certificate serial: 0196534A5AB29FE14E78AF7F59E54C47C5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
Manifest number: 0BA4
Signing time: Sun 20 Apr 2025 13:01:43 +0000
Manifest this update: Sun 20 Apr 2025 13:01:43 +0000
Manifest next update: Mon 21 Apr 2025 13:01:43 +0000
Files and hashes: 1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: g8nbw2zlvKpJXUNNi/AI0cROGgEzFPHc67xRyy0BGqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:5a:b2:9f:e1:4e:78:af:7f:59:e5:4c:47:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8
Validity
Not Before: Apr 20 13:01:43 2025 GMT
Not After : Apr 21 13:01:43 2025 GMT
Subject: CN=0c94d4b1bdb2a86009254f7027344dd9b57a4dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:a6:82:5f:7a:02:0d:17:9e:dc:e5:de:77:
dc:23:17:e3:e9:94:a4:fd:33:06:e4:47:af:3c:19:
e7:a5:c0:ce:8b:05:3c:27:e8:f8:b0:06:e1:8c:b6:
c9:0c:27:88:43:8d:7c:f8:2e:ab:b5:56:a8:31:45:
56:5f:9a:bf:71:f7:ee:85:f2:65:78:b8:6f:1f:b3:
db:e4:57:ef:e2:dd:69:f6:f0:39:b2:86:34:22:1d:
41:4f:c8:38:cf:25:16:61:db:1e:79:96:de:26:82:
c5:01:df:49:f6:f2:0c:72:8c:3d:f1:75:73:8d:d7:
a0:70:e6:6f:c5:e7:60:9e:3d:ff:d3:f0:2e:42:6e:
57:45:35:91:92:61:14:ff:b1:2a:90:50:01:d1:57:
d6:18:84:5d:b9:fb:0c:61:ef:93:3c:d6:fd:17:c0:
5d:34:ca:f5:d7:ff:9b:63:0a:4e:24:59:3d:c2:d5:
78:40:f6:b8:aa:a9:1d:d9:b3:8e:bb:11:c0:ca:21:
b1:d0:fc:2d:26:55:f7:e4:df:a9:8b:41:46:cd:23:
d6:30:9d:dc:cc:35:d0:48:f0:6a:c3:50:90:cc:c9:
44:d1:34:2a:2f:dc:69:a2:57:50:e7:a0:77:3e:d3:
51:b9:de:1c:c3:98:42:63:8f:80:c8:48:27:b7:6a:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:D4:B1:BD:B2:A8:60:09:25:4F:70:27:34:4D:D9:B5:7A:4D:C1
X509v3 Authority Key Identifier:
keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ea:9f:f9:bb:47:31:24:6a:ea:d6:63:5c:29:ba:55:3d:b7:
6f:ba:3e:aa:0a:fd:16:1a:d2:ee:06:ac:9d:87:34:1b:01:32:
ab:90:70:5f:f3:7b:75:83:bb:48:59:2e:ad:7c:76:38:ed:51:
23:13:b7:f6:86:72:ec:57:01:13:8f:b1:b3:6b:1d:69:3c:b1:
4b:0b:14:d8:5c:6e:1b:41:15:be:30:50:62:71:7e:0b:f1:fb:
1a:98:ec:d1:b9:66:58:6a:19:93:5a:87:c7:d4:0c:90:bd:72:
08:fe:22:eb:ec:ab:23:7b:d5:25:7c:a0:a7:36:8f:eb:0a:c6:
4d:7d:63:1d:56:f4:fb:03:7c:e2:29:b8:07:25:e9:5d:52:6c:
67:7b:bb:8d:b4:b2:c9:e3:c7:c2:f3:4b:f3:92:18:60:04:83:
28:c7:65:d2:6f:06:2f:6c:a6:9b:64:5c:bb:96:ec:a0:98:d0:
cd:4e:f3:1c:0c:18:65:39:fe:c6:9a:01:10:92:4b:e7:9f:6c:
e3:1b:bf:78:eb:b1:5f:4d:1f:c3:68:a3:29:aa:9e:67:f2:df:
f5:4c:2b:bf:4a:fe:8c:a0:7e:70:53:e8:be:2f:36:96:1d:b0:
2d:b7:1f:3f:ae:0a:6b:d6:cd:9d:50:aa:f9:5f:9f:1f:0c:7d:
c9:62:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:50:54 2025 by rpki-client