Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
File: eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json)
Hash identifier: I64jPhq2XoXHHSodyvZcUKF5l2OMDZzWxuHkuXH87Kg=
Subject key identifier: 77:30:AB:3D:37:ED:63:AC:2D:90:13:CB:1C:3A:43:BB:E7:8C:17:C3
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Certificate issuer: /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial: 01965380443FF21B012C4608832C9D77726A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
Manifest number: 0FFA
Signing time: Sun 20 Apr 2025 14:00:37 +0000
Manifest this update: Sun 20 Apr 2025 14:00:37 +0000
Manifest next update: Mon 21 Apr 2025 14:00:37 +0000
Files and hashes: 1: 8AKtonzRgJb3Ja4IuBBKa0ECij0.roa (hash: Yd5g5WuhuLbI/QlnW73qApQrtDLQd9VfH73OOEYkPcM=)
2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: KE8Nunsj6gGcbXmGT26AQQm4XxA26afukFbRX2yZBPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:44:3f:f2:1b:01:2c:46:08:83:2c:9d:77:72:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Validity
Not Before: Apr 20 14:00:37 2025 GMT
Not After : Apr 21 14:00:37 2025 GMT
Subject: CN=7730ab3d37ed63ac2d9013cb1c3a43bbe78c17c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:79:f5:d5:bb:5a:35:86:f0:5a:9f:0a:3e:
a4:09:19:4d:f1:e8:b9:4c:84:fc:86:10:b7:55:a0:
aa:b3:15:37:5e:f5:c7:7d:93:b3:5a:f9:b5:fe:19:
21:3e:ab:ed:b6:05:24:11:01:6c:c8:61:e1:be:6c:
f9:a5:30:fc:5f:41:ac:70:1b:b4:0a:fa:ec:7a:ae:
73:58:b3:a4:25:87:a8:54:06:62:be:7e:c1:08:77:
67:b5:89:d9:d1:66:52:02:ed:52:16:45:60:69:cf:
39:bf:dd:b2:5c:12:3b:5d:e7:e7:60:26:0a:d9:48:
48:cd:18:b4:98:51:22:56:1c:b0:50:b2:ac:f5:43:
1a:c0:6c:33:10:81:9b:7a:20:05:33:c2:8b:e1:11:
56:80:08:fb:35:c3:4e:9f:2b:25:4e:51:10:db:a4:
66:ad:32:d9:19:48:88:68:49:3e:f2:36:79:d8:66:
62:e2:bf:ab:90:d5:88:1e:34:2b:25:d7:e9:68:86:
c8:49:95:d9:ea:6d:ce:fb:0e:ed:85:9e:32:74:47:
11:99:d8:89:c5:57:5b:5a:1a:ef:d1:2b:0a:24:8a:
ed:e9:2f:39:2e:8f:48:4c:df:b6:eb:61:bd:2e:a8:
2c:67:48:d3:ae:c0:77:cb:06:77:c9:7a:19:8d:ff:
cd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:AB:3D:37:ED:63:AC:2D:90:13:CB:1C:3A:43:BB:E7:8C:17:C3
X509v3 Authority Key Identifier:
keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f2:19:4e:77:8e:3f:d1:a6:12:47:2c:f6:b0:dc:8d:65:ea:
b0:b6:6b:e3:ab:a7:64:c0:19:ab:a8:59:c3:38:b9:ec:81:d4:
63:43:78:e5:7b:0e:de:17:0c:a9:4a:fe:ec:a9:68:3a:9a:34:
e3:81:9e:53:49:c5:af:c2:ad:d1:4e:e6:39:d6:eb:08:08:78:
08:d7:8f:23:63:b4:c0:95:82:27:ae:7c:32:0c:87:e6:65:37:
7c:51:4a:ac:2a:a4:42:2d:9b:73:d8:a5:af:46:c9:a5:06:39:
af:f1:b9:19:52:96:21:cd:ec:56:10:b7:83:00:a1:1c:7a:0a:
74:ad:80:9b:ce:d0:cb:88:6a:f4:d5:68:07:05:e9:20:4b:e5:
03:b7:da:08:c3:05:4a:49:98:1c:63:75:31:8a:be:b1:f4:4d:
5a:25:b5:f6:aa:1c:f6:17:b1:1d:2c:e1:1e:34:22:92:53:a3:
38:fe:03:94:cb:4c:3f:86:96:75:e6:64:ee:b9:0b:91:d4:d0:
3a:e2:be:4b:fc:34:03:62:e8:fe:88:d5:85:70:f6:ce:fb:92:
34:e3:67:2d:03:c8:16:6d:8c:e9:d1:6e:b1:f0:df:6c:81:c8:
da:fd:dd:19:f0:3e:79:9c:33:65:5a:0c:83:d2:8c:d2:68:1f:
39:76:3d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:15:36 2025 by rpki-client