Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: ZRglptxKD1cL+uD8jwZyjYsUrYxRjl1e/Dv56jY0CVQ=
Subject key identifier: 27:57:51:9B:E7:A6:8E:19:F1:D1:54:10:B5:28:73:26:57:99:0C:3A
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 01965DCD295503016C8C5D5E184C14038A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 14:00:48 +0000
Manifest this update: Tue 22 Apr 2025 14:00:48 +0000
Manifest next update: Wed 23 Apr 2025 14:00:48 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: mpAHOzEp/CM92vKHlQGEUVosujfjNs0PhjMSxPR/XPc=)
2: XOs9GWbQQcB_n_z1bgeOfcG86tI.roa (hash: +cMtfCuRrVq0izGBXZFPK0kvh5ocAHr52g05OcQaim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:29:55:03:01:6c:8c:5d:5e:18:4c:14:03:8a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Apr 22 14:00:48 2025 GMT
Not After : Apr 23 14:00:48 2025 GMT
Subject: CN=2757519be7a68e19f1d15410b528732657990c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:20:6c:71:c6:f5:87:ea:bf:8e:31:7e:1a:
7b:ae:e2:4e:06:32:5a:dd:6c:54:f5:44:f2:cb:10:
35:40:13:a8:9a:2a:75:c6:e0:a8:4b:e4:f1:0f:5a:
40:6c:c8:d6:29:91:2b:b5:26:ea:7a:7b:3c:84:5f:
e7:cb:97:49:3d:71:d4:53:c2:00:c3:b9:3b:70:9d:
76:03:67:b6:96:bd:85:bb:c0:a6:ab:9c:55:a0:1f:
72:c0:25:fe:eb:37:b4:2f:89:aa:7c:e3:6c:12:7e:
84:7e:f3:7c:79:b8:f9:fc:90:1c:ca:f5:82:45:bd:
cd:4c:ba:34:b2:dd:1b:a8:80:5b:86:ba:23:28:fe:
69:d8:5a:68:25:fa:2c:ec:b8:a2:f9:e2:a9:57:53:
d5:08:1c:c1:a0:95:d5:89:54:84:6b:4b:85:22:3a:
92:96:50:7d:b2:36:4c:48:48:01:cc:10:0e:80:6b:
4a:ce:a2:14:39:3c:f3:aa:dc:1e:83:42:31:bf:d0:
49:75:23:84:4b:ef:9f:45:76:e7:86:49:36:5a:8e:
69:7f:c6:66:c4:fd:42:fe:2f:fb:4f:03:bc:b4:37:
45:01:00:95:88:41:0e:8a:bb:be:4f:71:88:e1:37:
d7:51:11:07:fb:f0:8a:a4:9c:db:76:70:f2:a6:56:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:57:51:9B:E7:A6:8E:19:F1:D1:54:10:B5:28:73:26:57:99:0C:3A
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:16:8c:03:ca:d3:ae:d1:30:13:02:26:95:0d:bb:6d:08:de:
8b:6a:10:cd:f3:14:d9:62:e1:72:13:62:7a:eb:1f:d1:e0:3f:
e1:41:bd:8d:2c:9c:cf:fd:8e:04:e7:01:19:ad:8c:b8:54:ee:
91:c5:78:09:4b:00:c8:30:7b:84:9c:71:db:32:d6:12:1e:59:
09:0c:d0:34:b6:de:80:7e:10:bd:67:ab:62:d2:72:b2:58:43:
99:1d:56:7f:d6:6f:76:6d:a6:54:54:1e:61:c0:ab:69:84:f6:
1e:f8:06:7f:05:9e:fc:cc:c4:46:3b:f3:0d:c4:b5:65:cd:d7:
06:df:ef:fb:49:8e:a2:0d:45:ab:83:4a:69:66:bf:69:63:81:
5f:1d:0c:05:fb:9a:37:0f:eb:b3:04:fb:4f:d4:b9:23:d8:f0:
d5:d8:9b:9b:8d:29:be:ed:8c:17:74:4f:6a:b8:aa:a9:30:9d:
66:77:7b:92:18:1e:d4:4a:b8:27:2d:34:de:08:0d:f0:53:6f:
40:bf:03:84:9e:41:2d:d7:e4:43:55:1c:36:f6:3c:24:d4:f6:
93:28:db:33:34:eb:05:db:bf:50:7c:91:eb:74:7e:7e:3e:ad:
d1:6e:4e:36:36:00:6b:b1:1b:47:f0:f1:fd:63:77:a2:e7:79:
b7:8f:9b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:24:02 2025 by rpki-client