Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier: Adgmv02tHNF2Nmg7BM0xhdqkhkB6qw5H8zJ3bGGKGTM=
Subject key identifier: 36:E1:14:20:7D:66:EE:8C:D4:EB:B6:EC:A6:0C:6C:3C:FC:54:5D:14
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 01965537828FA9D2750519E46530822DA177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number: 1209
Signing time: Sun 20 Apr 2025 22:00:23 +0000
Manifest this update: Sun 20 Apr 2025 22:00:23 +0000
Manifest next update: Mon 21 Apr 2025 22:00:23 +0000
Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: dQXtFw95OtS+rPVq8GTN49lAmFHAMVrTpgntilFAYfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:82:8f:a9:d2:75:05:19:e4:65:30:82:2d:a1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Apr 20 22:00:23 2025 GMT
Not After : Apr 21 22:00:23 2025 GMT
Subject: CN=36e114207d66ee8cd4ebb6eca60c6c3cfc545d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:5c:86:0d:a3:ac:d9:56:3b:97:4a:d8:ef:
b0:d8:b4:6d:30:c7:10:24:3d:2c:ab:b4:1a:2e:7f:
ae:63:fb:3f:a3:9f:d5:83:2f:20:48:1b:92:41:c2:
ef:5b:e4:9e:99:09:68:f8:08:bf:ad:96:e5:ec:59:
e4:d4:b7:24:bb:da:b8:c5:f4:23:fe:d9:4b:16:40:
df:e3:d0:e6:b0:31:4e:f0:b1:37:d7:bc:3f:50:de:
34:df:6b:d4:57:03:ee:1b:a4:0b:2d:f9:dd:0a:4e:
65:d3:38:4f:2a:db:bf:55:24:1e:1c:e4:e4:fb:84:
07:a7:85:d7:64:32:4f:1c:34:22:28:c5:59:3f:70:
41:05:5e:5a:34:17:e6:5d:a9:fc:63:06:8d:dd:a4:
b8:de:d7:e9:b7:34:de:d2:12:3c:96:d9:e0:4d:4c:
45:a5:c9:b2:2c:4e:66:44:6b:e4:18:c5:bf:34:98:
5f:ff:45:09:d1:e2:b3:59:13:a4:00:0b:bb:85:c4:
f0:1f:28:0f:61:c3:14:93:84:5e:6e:e2:6e:d3:14:
ee:09:16:98:9c:a8:80:78:67:a1:f6:8f:3b:f4:ee:
68:5a:30:4f:cd:80:ea:87:91:e5:af:30:79:58:2a:
c6:12:4d:73:7a:aa:de:e1:2c:a8:7d:5f:08:28:ad:
7d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:14:20:7D:66:EE:8C:D4:EB:B6:EC:A6:0C:6C:3C:FC:54:5D:14
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7c:8e:c6:6c:b5:68:a3:be:4e:f7:e2:cd:c3:78:8e:aa:db:
a8:85:25:d7:e9:3a:d4:13:d5:91:73:d2:51:93:05:de:5c:47:
fd:8e:e1:db:89:ae:0f:64:98:28:eb:91:00:9b:55:82:55:1a:
db:7a:5b:17:a7:c0:7e:3b:20:7d:95:3c:6d:23:47:58:06:0c:
72:99:3e:3c:f4:50:f0:6f:cb:c5:c8:11:17:57:c9:16:86:d1:
f5:d2:ce:08:2a:96:6a:13:35:02:51:3f:a9:9c:5b:1a:d7:b4:
18:0d:ad:b3:9d:7e:5c:33:a9:61:5b:5b:ad:7d:8e:55:ed:0d:
ff:ce:b9:99:3c:57:d3:f4:5b:54:fe:46:8b:97:df:0f:5c:28:
e4:f2:ca:bf:ee:65:4c:28:f2:81:97:cd:5c:78:b4:71:24:2c:
74:3c:59:c4:c8:01:81:2d:04:31:c8:fe:01:1f:85:61:d1:7d:
36:29:9f:ab:84:8f:2e:84:c1:d9:0c:d9:be:81:1b:98:a5:18:
c5:27:07:fe:23:12:1b:08:3e:9f:ac:cb:ba:b9:1b:6f:95:f4:
9e:5f:1c:c4:e3:82:5c:10:9e:88:e3:d2:2b:e8:1d:ef:4e:e7:
6c:fe:a6:53:1f:90:ad:e4:5a:b3:21:59:00:aa:3b:23:fd:f2:
23:53:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:54:56 2025 by rpki-client