Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File: EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier: 907PMuDeHMOUCMI6/iNPsuGdaNQcgQ4bZxmCKXJtP4o=
Subject key identifier: BA:CD:20:38:B6:AF:25:9D:9D:47:DD:A4:DD:78:5A:1B:7B:A9:6C:F3
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer: /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial: 0197488D0734F5C2BEDCBE0EE03F141EE379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 04:01:31 +0000
Manifest this update: Sat 07 Jun 2025 04:01:31 +0000
Manifest next update: Sun 08 Jun 2025 04:01:31 +0000
Files and hashes: 1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: p6/4e9vr9TuepSMkftwfdF0oIVPZYxVqOHin4hs8a/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:07:34:f5:c2:be:dc:be:0e:e0:3f:14:1e:e3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Validity
Not Before: Jun 7 04:01:31 2025 GMT
Not After : Jun 8 04:01:31 2025 GMT
Subject: CN=bacd2038b6af259d9d47dda4dd785a1b7ba96cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:2c:01:c8:52:84:87:9e:c5:e1:01:1e:d9:
cb:6e:4b:33:d5:82:a7:92:00:79:63:6b:26:a1:2b:
7b:95:3b:ad:2b:28:aa:46:46:34:92:f8:f4:2c:0a:
1f:10:1c:1b:ac:00:ea:25:a6:03:58:47:d3:85:78:
2b:e2:f9:ad:7a:e6:f7:66:3d:37:d0:d0:ab:6e:b4:
dd:c2:99:53:7e:78:4b:8b:2a:34:2d:9b:5e:5d:4f:
ba:40:41:0e:f8:c4:c2:13:f9:1a:12:bf:a7:8c:a9:
c6:84:1c:e7:41:f6:8e:ff:e1:22:6f:ff:0c:f8:73:
70:26:a8:a8:d2:50:b4:b2:37:c7:2b:b9:45:6e:69:
4d:9d:52:4c:74:2d:f3:fa:40:7d:f1:44:a0:36:48:
5e:ba:36:a3:f5:dd:37:63:ee:03:17:96:63:a9:21:
9f:d6:26:5a:a0:b6:13:53:31:eb:4a:ff:44:56:41:
9e:31:34:18:62:9b:ca:9b:85:a8:f6:be:c4:2b:e5:
c4:30:e6:34:1e:22:43:18:a3:e6:07:b5:ec:8b:44:
cc:56:51:8b:2d:40:a8:cd:47:28:b7:d4:f7:40:71:
4b:8d:c2:02:dd:e8:fb:ec:8b:20:12:0d:59:55:e9:
fb:35:0f:d6:2f:54:bd:49:df:18:34:11:41:85:57:
23:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CD:20:38:B6:AF:25:9D:9D:47:DD:A4:DD:78:5A:1B:7B:A9:6C:F3
X509v3 Authority Key Identifier:
keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5e:71:82:11:3e:7b:39:a4:c3:b2:1d:8d:f1:04:3e:ce:ce:
34:14:3c:ce:95:8d:b8:91:9c:a5:ce:5a:ff:1b:8a:6c:b6:b9:
58:18:02:5f:41:9c:29:b2:6a:54:65:94:4e:46:97:b2:cb:5a:
b5:9f:77:56:b3:b0:db:6a:ae:64:3b:f2:a7:2b:3e:03:e9:39:
56:e0:32:85:6c:60:41:52:2a:ba:5e:17:88:bc:53:41:58:6f:
ea:dd:60:f0:70:bb:17:92:20:6f:ab:99:67:0c:7b:62:53:ab:
d5:ca:6e:5d:a0:8c:a7:77:3c:b6:f2:7c:dd:a3:22:a3:d0:8c:
32:28:57:5e:63:8a:7e:33:fa:92:c9:d3:eb:65:ed:c3:0b:f3:
8d:bc:4f:31:99:ea:4c:6b:22:a1:10:33:6d:89:e5:61:24:c9:
ad:1a:ac:39:a4:d3:ca:06:09:23:bb:05:54:37:1d:32:05:13:
61:4a:3b:e9:11:d7:a4:0a:50:30:30:d9:24:c2:b6:a8:0c:a9:
dc:92:a9:d6:c5:4e:c6:72:58:08:19:44:f8:9a:a9:d7:1d:1b:
14:dc:0a:90:76:57:bf:6d:ad:28:dc:ae:69:bc:05:a6:c8:33:
31:a3:83:1d:f1:b5:38:38:c4:8a:70:a5:ce:81:c9:38:18:01:
36:87:26:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:49:01 2025 by rpki-client