Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier: fZBrui/pSpgytUY1tLI/jE3uVF7yECds/19kGKaOXnk=
Subject key identifier: 57:68:89:35:FC:58:FF:EF:F8:C9:12:CD:79:75:C7:E2:3E:94:0B:79
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 01975FB9A2E2D16A39B4B0F5D225F9556ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number: 1293
Signing time: Wed 11 Jun 2025 16:01:30 +0000
Manifest this update: Wed 11 Jun 2025 16:01:30 +0000
Manifest next update: Thu 12 Jun 2025 16:01:30 +0000
Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: nO+IRi5y8udOThYaxttxqXHUXXQ7EgoRP68h16hMSB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b9:a2:e2:d1:6a:39:b4:b0:f5:d2:25:f9:55:6e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Jun 11 16:01:30 2025 GMT
Not After : Jun 12 16:01:30 2025 GMT
Subject: CN=57688935fc58ffeff8c912cd7975c7e23e940b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:7d:06:cc:93:c3:53:e0:af:5c:bd:d3:a2:
1b:c9:99:1c:07:d9:d6:b5:63:96:a6:2e:c6:2b:dd:
5c:a3:d6:e4:f4:47:89:e3:45:66:c3:28:c6:ba:c9:
53:eb:31:50:b4:14:5d:e6:e3:27:82:28:fd:67:f2:
88:22:b4:68:9a:26:ce:98:1c:d6:e8:d0:1c:e3:af:
cd:a3:44:b8:7f:e4:0c:b2:09:97:48:89:56:da:7d:
26:2c:4e:ae:62:4a:7a:42:0a:0d:9c:22:aa:24:a2:
d9:72:09:5a:9e:1f:85:ad:1d:38:a9:b4:5a:17:f8:
d0:06:83:1c:a3:a7:96:25:fc:0d:e6:ad:e6:28:e1:
e5:e9:57:80:2d:67:f3:5e:04:df:91:f7:65:5f:f0:
8c:21:b5:bd:53:7a:c8:04:f7:ff:4f:1e:ce:ed:80:
5c:96:55:01:5a:c5:7f:a1:51:7a:c1:0d:24:d5:14:
6d:c2:3c:9d:25:e8:85:2f:15:8c:14:be:78:24:14:
24:d4:b9:fc:21:90:02:12:3b:59:88:f5:b1:9e:26:
d9:b4:57:80:7e:b9:48:1b:29:ed:2a:a9:e1:12:ae:
8c:73:90:5d:b5:ac:8a:33:da:63:c7:14:8a:35:c8:
66:d6:66:f7:e3:f4:77:86:23:c8:da:ec:48:b0:c7:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:68:89:35:FC:58:FF:EF:F8:C9:12:CD:79:75:C7:E2:3E:94:0B:79
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fb:b6:57:e0:a1:b9:9d:11:74:98:e1:a0:dc:96:a0:1d:d2:
02:2b:96:0c:a6:1b:60:d8:6a:f0:0c:fd:4b:7d:db:f2:dc:69:
47:89:a9:0e:0b:08:3b:c1:c2:40:2a:32:24:4d:e7:ce:11:ca:
d8:14:78:bb:fe:29:aa:1b:ea:55:b6:8e:fc:b1:4a:04:8d:55:
e1:86:af:36:f1:aa:75:91:99:fe:4b:27:af:1f:82:79:0a:68:
6d:be:5e:05:f1:e6:6f:21:4c:b7:ac:5c:9f:02:1c:ca:0a:96:
86:23:3b:03:9b:c0:81:15:a6:08:e6:6c:29:61:86:bf:c2:1a:
b4:df:96:27:24:90:08:90:0f:d8:93:af:48:21:9c:8e:ba:20:
cc:1b:ab:75:e7:f2:75:93:cf:da:bd:e3:23:e8:f3:2a:5d:71:
40:3a:8d:71:f1:c8:3d:71:24:8b:c6:35:60:61:ca:3b:fa:13:
d2:71:cd:44:b5:b1:4b:63:d5:52:e2:e7:da:af:01:68:cf:00:
6d:15:9f:7f:31:8a:0c:f7:e2:7a:f1:f9:39:d6:f9:1e:f4:1c:
f4:42:c8:c1:aa:c0:b2:a2:13:81:d4:8a:ce:bc:a4:b5:2c:85:
4a:d4:65:e3:d8:08:d0:41:36:11:4d:42:81:cf:e9:f4:6c:b2:
8f:01:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:28:35 2025 by rpki-client