Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
File: ewGNKlH-8tdsYmAFVsZtV8t-knA.mft (raw, json)
Hash identifier: iTeEpVSrYeOpv8O2FU8MBCJblYojpUbuUmzjFJEr/wc=
Subject key identifier: 84:60:23:A8:17:B2:1B:C5:5A:6A:45:9D:8B:AF:9F:21:A2:14:89:09
Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Certificate serial: 01964AB3E80173CBDC21DBAED9DDB83A96DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
Manifest number: 0519
Signing time: Fri 18 Apr 2025 21:00:26 +0000
Manifest this update: Fri 18 Apr 2025 21:00:26 +0000
Manifest next update: Sat 19 Apr 2025 21:00:26 +0000
Files and hashes: 1: ewGNKlH-8tdsYmAFVsZtV8t-knA.crl (hash: CvdtQDB4nNLXtbMlYcWjAvzWMk1R1yNi4Fqfc250yL0=)
2: rWkvauBEMYRnIGnTGjbge3-FesI.roa (hash: NZqLavHilBq1RJJKbmTkXGJJieLsNjrQomu+4A2D7i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:e8:01:73:cb:dc:21:db:ae:d9:dd:b8:3a:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Validity
Not Before: Apr 18 21:00:26 2025 GMT
Not After : Apr 19 21:00:26 2025 GMT
Subject: CN=846023a817b21bc55a6a459d8baf9f21a2148909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:b5:e6:65:07:a7:4d:5d:ca:68:d6:bb:b3:
b2:81:6b:62:ce:39:ca:78:6b:4b:4f:38:7e:a7:12:
36:67:dd:77:0b:10:92:29:7e:63:25:b8:07:17:6e:
94:fd:0c:d8:8f:1c:d8:5e:77:d6:46:e3:ca:12:ac:
fd:0a:b8:5a:d0:d8:23:a3:8f:f3:75:22:e4:67:2a:
c5:3a:80:b0:c8:75:84:c5:cf:15:8d:3d:20:b2:9b:
f5:66:89:b8:6b:ee:37:b7:05:bd:d1:8d:5b:0b:be:
5a:7e:54:bc:77:d3:a8:a0:55:8b:44:d0:2a:4d:97:
d4:48:c5:9b:9b:a4:b7:12:02:c6:03:f0:b6:0d:f5:
8f:ac:a0:5b:80:69:38:9c:92:4b:96:0a:aa:4d:aa:
28:4a:6d:58:b5:50:87:cd:e2:c1:c1:be:74:8a:ba:
c9:bb:7a:1c:32:29:0f:6e:1c:df:e8:95:e4:1b:11:
19:3c:db:d4:eb:29:04:5f:cc:45:a3:b6:92:a6:a9:
55:f4:17:4a:4b:bf:9b:01:e6:35:1a:50:e5:8b:59:
0a:90:2a:a7:6b:c0:51:36:8f:c2:fb:6c:be:be:9b:
85:bb:fa:fb:3a:dd:d2:ca:63:26:cc:59:60:77:62:
43:bb:00:b9:d7:08:f3:6b:b6:c4:1b:6e:32:08:7b:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:60:23:A8:17:B2:1B:C5:5A:6A:45:9D:8B:AF:9F:21:A2:14:89:09
X509v3 Authority Key Identifier:
keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7f:d3:1b:35:05:f9:77:f9:02:da:a7:d3:87:e1:31:7f:ba:
62:de:55:c5:0f:64:2e:2a:cf:d7:34:34:09:bc:26:f4:f2:07:
95:0a:de:08:76:b1:d7:df:21:14:f7:13:a0:ae:f9:47:d8:c5:
fc:41:5e:69:1b:33:e3:b6:68:df:ff:19:ff:54:6b:16:c6:0c:
ca:7e:25:73:dc:9f:94:70:8b:56:63:59:d5:33:54:41:10:0b:
f3:bf:01:f0:a5:a5:56:fc:cb:5d:d6:49:6c:1f:ec:a1:0d:ec:
92:56:9f:cc:c8:66:0a:ca:d4:44:bb:9b:93:6e:ca:cd:f8:73:
68:0f:48:15:02:d8:ab:54:c8:65:1e:4a:63:8d:f5:1e:44:30:
14:3a:e1:2c:47:9e:08:9e:82:e8:0b:95:a6:43:bb:1d:23:2c:
ae:f2:41:d4:41:a4:fd:b9:c1:88:b9:65:6b:7e:54:c4:24:ce:
71:b7:7f:bf:82:8a:d2:96:1c:8b:88:e5:ed:2a:58:40:93:67:
93:b2:80:ca:49:30:74:f9:a6:30:29:11:fd:ef:e1:40:c8:ca:
48:d2:4d:7a:45:95:06:68:13:7b:25:9a:5e:ad:7b:a1:c1:f0:
e7:9a:02:94:c5:04:02:d7:65:d1:64:30:6b:f0:fc:44:f8:d5:
31:c9:fa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:18 2025 by rpki-client