Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier: CTX1LmLQ1tpbmXMZmQQm4HIPsWV1OfVuxP0ig5XjVpw=
Subject key identifier: 50:F1:8D:87:5C:1D:1D:2E:4F:DE:2D:8C:C0:DC:05:41:B4:BE:C8:45
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 019754232A112DF2136AD63BF48E028277A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number: 128D
Signing time: Mon 09 Jun 2025 10:01:19 +0000
Manifest this update: Mon 09 Jun 2025 10:01:19 +0000
Manifest next update: Tue 10 Jun 2025 10:01:19 +0000
Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: rPinpgrfqxayLuP8qBTxGpZtid9x8rSGqQqYrC/EQQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:2a:11:2d:f2:13:6a:d6:3b:f4:8e:02:82:77:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Jun 9 10:01:19 2025 GMT
Not After : Jun 10 10:01:19 2025 GMT
Subject: CN=50f18d875c1d1d2e4fde2d8cc0dc0541b4bec845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:f8:61:df:a8:b4:60:0f:ab:fa:46:e8:e9:
4f:7a:5c:6d:bf:86:ce:d5:15:24:9e:b5:5c:c7:5c:
d5:7b:54:90:21:5a:95:fd:29:76:fd:a8:de:7c:2a:
b1:05:26:39:ec:43:ad:64:df:eb:6b:c6:4e:50:da:
59:f7:68:8e:d5:ed:27:0c:52:31:4f:26:8a:0e:5b:
9e:43:78:95:86:99:9b:68:f5:ee:b9:c7:7e:26:4c:
f2:ab:38:5f:5e:f6:6b:e7:9f:26:5e:8a:9a:e4:5c:
a1:6b:f8:f5:27:bb:cf:10:55:4c:f0:8e:b8:f3:ec:
d2:d9:33:a5:72:31:f4:da:ac:f2:b2:48:27:3f:15:
69:da:bd:bb:a9:c7:07:e8:81:26:82:f7:6b:a8:d2:
9e:7e:b6:41:95:6f:6c:53:5e:52:0f:09:f5:e0:52:
ec:43:97:27:53:34:2f:7c:74:f7:66:e6:e8:c4:a8:
1c:a1:01:94:a5:c0:26:19:7e:83:23:7f:b8:c2:2f:
e9:93:7d:8d:da:d1:7e:e6:4f:ac:64:95:6f:75:67:
09:49:01:0e:c2:98:f6:f3:dd:f1:29:f6:00:5f:d6:
50:1f:af:60:ea:ef:af:3d:9a:48:4c:e0:b9:67:81:
91:f6:5b:e1:7f:ff:08:a0:ce:3f:bb:ae:83:5e:51:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:8D:87:5C:1D:1D:2E:4F:DE:2D:8C:C0:DC:05:41:B4:BE:C8:45
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f1:e4:04:2f:96:e1:7b:45:0a:44:f7:4a:cc:ed:b9:dd:e8:
83:86:9d:d5:ea:fe:7b:16:49:6c:a7:98:d1:b7:38:eb:30:52:
00:80:39:ed:c3:e8:b1:78:f2:25:4f:be:58:23:77:ed:b5:99:
e3:c2:09:3e:1b:88:f8:7f:9b:3a:a6:5f:08:e5:3b:23:1c:6c:
d2:53:dd:4c:45:67:42:8f:9e:3a:ac:80:df:6d:b1:05:11:57:
b3:19:9f:19:7d:f9:7b:31:26:17:ca:89:cb:9d:bd:65:82:61:
a9:cc:21:00:fe:20:49:f6:fa:71:e9:99:95:dc:72:4f:ed:76:
7b:2d:8f:83:24:22:93:b4:87:c8:19:8c:19:8d:ce:2c:9f:e8:
c5:d9:66:8d:bf:43:fa:1b:97:42:8d:88:56:b6:a9:8c:73:f6:
74:5f:16:15:e0:89:f9:6c:b1:17:88:59:52:9f:09:d7:d1:bf:
4a:5b:00:58:2f:56:ea:35:c8:53:72:a2:8a:48:09:25:8b:46:
a4:df:18:70:63:c4:7f:3d:46:28:07:79:a7:a3:16:24:3d:e7:
ae:9a:24:00:f2:20:57:27:03:e7:4f:da:4f:8f:21:87:94:6c:
e7:35:7d:7f:fe:88:c9:cf:ad:a9:2f:72:0b:1c:93:7d:d9:51:
27:b8:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:37:59 2025 by rpki-client