Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: LquMhevSvW6gfHSEpBMjxAV2SOTPJvvkxjOFvBgqdfk=
Subject key identifier: BF:2F:88:DB:E3:B4:F2:FE:69:E3:6E:12:BE:B8:CB:07:60:D9:B6:BF
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 01964F35C89BE738C0C89A578F9BAEFD8C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 11AB
Signing time: Sat 19 Apr 2025 18:00:46 +0000
Manifest this update: Sat 19 Apr 2025 18:00:46 +0000
Manifest next update: Sun 20 Apr 2025 18:00:46 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: m5XORRUF1oTOJUAXJkx4+B9RK6PujyqUGCgnnpv+4Fc=)
2: f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa (hash: jPD7nunzn9cSBTS41yie793CY1UObq7bXZ4qPAfEbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:c8:9b:e7:38:c0:c8:9a:57:8f:9b:ae:fd:8c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Apr 19 18:00:46 2025 GMT
Not After : Apr 20 18:00:46 2025 GMT
Subject: CN=bf2f88dbe3b4f2fe69e36e12beb8cb0760d9b6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:da:20:84:31:59:d9:82:c7:41:1e:d7:ea:
00:ab:9e:ff:e7:97:d7:d2:94:d5:b5:4b:74:3d:c6:
a1:85:10:7f:35:c2:fc:4d:cb:43:c6:82:77:61:6c:
c6:a2:39:55:50:2b:60:0b:a2:f0:12:13:26:ee:9d:
63:59:fd:8e:70:e5:c0:20:13:b3:1c:76:01:65:75:
3d:2c:7a:a8:59:95:38:01:34:55:3d:78:e5:59:15:
06:1a:f5:0c:fe:03:9d:de:aa:b3:0f:79:9b:7c:94:
c3:7f:fc:89:31:ae:bd:b5:58:44:3c:4b:1f:d7:73:
2a:27:a9:54:6f:39:5e:99:82:25:22:c9:f7:25:6b:
d2:f1:91:5e:49:7e:a2:90:4f:c9:7c:61:62:de:c1:
39:79:83:6a:19:57:75:89:df:96:b0:a8:c2:08:f6:
95:d3:3b:be:f7:41:cb:1d:8c:34:88:16:57:ce:b2:
31:e8:00:76:78:17:f3:4d:74:d7:87:1a:5c:47:a9:
50:a8:2c:9a:14:dc:20:01:ae:76:a3:df:31:9d:28:
02:75:89:8b:30:b6:0f:fe:d8:96:e6:ea:ab:f3:89:
0c:6f:bd:32:ac:30:64:15:b6:cc:38:30:73:3d:ee:
73:19:c8:c0:e1:8c:72:bc:84:0e:8d:51:f3:fa:5e:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2F:88:DB:E3:B4:F2:FE:69:E3:6E:12:BE:B8:CB:07:60:D9:B6:BF
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1c:c4:7c:9f:a8:ea:65:8c:d2:7a:c3:1e:16:a3:62:f5:36:
33:a2:69:eb:d8:f3:a6:01:ec:c8:81:91:e3:48:01:fc:2e:05:
22:b7:f6:4c:7b:6d:e6:e8:a1:17:d8:f6:dc:2a:87:eb:44:d9:
c1:d3:a3:7f:fa:df:5b:1c:bf:08:c8:28:e5:2f:d2:e3:1a:54:
1a:13:5f:f2:00:2d:55:a0:c8:19:ef:d3:aa:f6:ab:22:7b:5f:
db:3a:ed:60:10:8d:c2:22:b9:ff:d9:3b:d9:98:09:2b:b1:89:
78:42:db:8c:c8:d1:68:88:ba:d0:64:22:df:31:47:1f:c9:2e:
ec:83:3b:b9:bb:21:bf:2d:5c:0e:f0:fc:40:02:89:ea:9d:19:
f8:20:9d:d5:5c:40:36:0d:91:56:9b:a3:af:1a:95:5b:b8:47:
fa:97:bf:65:81:6f:55:17:80:80:5c:19:77:14:1f:8e:ad:c5:
99:d9:d2:43:1c:d1:ec:06:ef:a2:3b:9c:2f:db:63:ae:72:fe:
41:12:bc:2a:7d:ed:f8:59:d6:0b:0c:6a:82:9f:19:98:8f:8a:
cc:28:9e:06:56:2e:82:ec:18:f8:92:89:d5:53:9c:ba:79:bb:
bc:e6:36:e0:f7:fe:82:5f:7c:1c:95:03:81:d9:1b:ec:bc:66:
e8:c3:49:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:12:39 2025 by rpki-client