Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File: EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier: V0TnbWy7gICAk4GpHZ1ItjRKG1zK0RSIWrE5x7nwLIA=
Subject key identifier: DB:F4:3F:72:63:F2:51:2F:2B:6E:44:63:CF:22:58:2F:21:9A:17:96
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial: 01958EF3B09528D886AA8D8E61BEFD6DFC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number: 0D96
Signing time: Thu 13 Mar 2025 10:01:29 +0000
Manifest this update: Thu 13 Mar 2025 10:01:29 +0000
Manifest next update: Fri 14 Mar 2025 10:01:29 +0000
Files and hashes: 1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: 0G/tVYRtDIRBfXtP7HZH014f41FfNar53jQduTSNTWI=)
2: Jzm46CCydGnaow81u1_xNN5mK1k.roa (hash: 6dqJE3+wgexU/DPorZ1i735/Z7zxtOoeBz+MZoeVtcw=)
3: M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa (hash: ISb1VwFVgG+G0QkVMeOYR3KKNz/PbEusd5lSF/7EVsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:b0:95:28:d8:86:aa:8d:8e:61:be:fd:6d:fc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
Validity
Not Before: Mar 13 10:01:29 2025 GMT
Not After : Mar 14 10:01:29 2025 GMT
Subject: CN=dbf43f7263f2512f2b6e4463cf22582f219a1796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:7c:92:1d:3d:ec:2c:ca:dc:14:c4:be:8e:
48:bb:1a:d9:52:12:2f:cc:55:dd:e5:98:e4:e0:d3:
11:b9:64:12:7c:ab:70:1f:85:96:9d:74:9d:29:39:
bd:85:fd:b9:d1:56:ad:9f:84:79:9e:0e:d8:c7:a9:
b5:a5:78:03:ae:77:d6:3f:e3:6c:34:11:f2:78:4a:
9d:7e:22:4d:0d:d1:86:30:25:e7:22:1b:ac:e0:23:
f2:05:80:0a:22:09:f4:bb:37:3e:d0:56:60:c0:cf:
a8:a3:94:c7:cd:ba:9d:ff:1a:43:7c:7d:5f:53:ca:
5e:59:46:1e:a8:76:3a:2e:f8:c7:c9:7d:0d:2a:2f:
3d:4c:be:e2:23:16:fe:c1:b4:e2:2e:81:07:b8:90:
cb:76:58:e6:7c:d9:9c:0e:15:38:34:71:00:7f:3a:
93:eb:79:d9:98:0c:05:75:b8:9d:e6:a1:47:62:9c:
9a:9f:65:e3:30:dc:41:ea:06:5d:70:95:ca:3a:8d:
32:5e:42:35:e4:6e:5d:76:06:ee:40:a9:cf:52:2a:
5a:00:98:2e:49:ba:97:30:db:18:d5:77:93:d4:7b:
a5:ed:8f:a7:a6:75:ff:9b:d1:2e:92:4d:94:06:0b:
75:96:4c:e1:29:36:b7:e2:b2:a8:47:17:79:7d:4e:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:3F:72:63:F2:51:2F:2B:6E:44:63:CF:22:58:2F:21:9A:17:96
X509v3 Authority Key Identifier:
keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4e:c2:1e:45:88:bd:be:d5:4e:c9:34:1e:01:81:da:e8:77:
ae:6c:b0:d6:13:35:65:ed:b3:35:af:5f:6b:be:bf:e0:4b:4b:
d1:b2:de:62:07:ee:fa:ba:f8:18:f3:36:44:42:65:d8:49:bc:
bb:1a:00:e2:a1:94:c3:66:b8:9b:45:12:13:7d:24:13:5a:35:
59:7a:65:8c:f9:42:6c:28:32:e7:1d:d7:51:4d:05:68:59:0e:
d5:44:31:7b:78:6f:e0:f9:f0:e6:61:f2:77:44:6d:77:85:af:
35:ae:68:b6:bc:8d:fa:fe:92:f6:e7:f1:45:66:2b:0e:b0:08:
47:d4:c2:bb:b6:74:18:4c:ed:48:fd:02:c4:3c:59:64:c9:bd:
20:6e:13:06:43:80:82:5d:06:54:df:34:9f:bf:18:2d:b1:a7:
25:26:78:fc:6f:90:a5:b3:25:c0:95:d3:ec:c5:9b:5d:80:96:
1a:6c:f4:98:7f:ef:d1:8a:b9:f4:37:4a:bd:4a:13:e9:a1:9f:
94:b6:7e:98:88:87:a7:2d:bc:f1:67:ce:c9:ef:95:5d:d5:30:
18:d8:c3:19:6a:cd:6d:2f:70:14:e8:25:81:46:cb:59:27:7b:
d5:81:b1:90:b2:94:51:dd:99:f1:58:73:66:a0:4a:50:d6:1a:
7d:bf:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:27 2025 by rpki-client