Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
File: EdnXl1uM2pIypCR8yd6abf28YGk.mft (raw, json)
Hash identifier: /Yn3ERJOy0WcA3qlytx8uItLjBcTXKDSF1eFfjJ5jNY=
Subject key identifier: 65:07:D9:00:2B:FD:17:50:BA:E1:67:1E:93:EF:9C:FB:75:79:55:06
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial: 01964C6B5CFE1B321DE4721BACE6C26FA30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 05:00:26 +0000
Manifest this update: Sat 19 Apr 2025 05:00:26 +0000
Manifest next update: Sun 20 Apr 2025 05:00:26 +0000
Files and hashes: 1: DsnYhz3l-UjW4BEfkskBQyPqFHg.roa (hash: Ca24yg0KQW8MlNf8yUGGudiupYhIqA/czyOnT3n44ic=)
2: EdnXl1uM2pIypCR8yd6abf28YGk.crl (hash: HgPX1f8GN1inc+rVijuRN6bnM2EBvTJsyN/SkD+CF/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:5c:fe:1b:32:1d:e4:72:1b:ac:e6:c2:6f:a3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Validity
Not Before: Apr 19 05:00:26 2025 GMT
Not After : Apr 20 05:00:26 2025 GMT
Subject: CN=6507d9002bfd1750bae1671e93ef9cfb75795506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:a3:10:dc:db:e5:63:a8:bf:55:5b:0b:97:
67:de:f9:6d:6c:15:2c:bc:35:96:d6:80:52:29:86:
16:92:34:d5:60:36:fc:16:36:f8:c1:46:24:45:38:
52:93:8a:06:3c:8a:9b:fb:dc:89:a8:62:ca:30:3a:
cc:82:1c:2d:33:3b:fa:ec:d9:f2:97:09:7c:4f:43:
e3:6d:a0:08:bf:23:cf:58:01:6a:53:3b:5c:cf:5b:
d0:26:23:92:cf:ec:fb:cb:88:af:17:a4:f2:5d:30:
08:81:90:61:05:04:c8:c8:af:36:31:14:ac:20:c1:
3f:63:22:00:4d:3c:ce:2a:d3:6b:ad:5e:b1:93:18:
f6:38:da:04:66:8f:4f:96:c9:cb:da:a5:ba:1b:92:
90:ce:78:f9:32:c8:7c:f0:8d:41:c7:47:80:9c:38:
db:21:73:ed:62:7d:f8:6a:80:3d:eb:8b:9a:40:34:
c0:ae:82:55:22:3f:8b:95:74:a0:7d:25:2f:2a:0a:
85:1c:cd:ee:f9:96:44:6e:bb:1a:e0:5c:40:06:6a:
a4:b8:1f:ab:36:8c:ad:64:e7:fb:71:c3:43:a6:a6:
ae:70:b4:02:42:0d:ea:2c:eb:08:e9:80:fb:cf:5e:
92:74:b5:e9:73:a6:40:90:9d:64:a4:39:58:93:e4:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:07:D9:00:2B:FD:17:50:BA:E1:67:1E:93:EF:9C:FB:75:79:55:06
X509v3 Authority Key Identifier:
keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:90:9e:0a:ac:a1:f9:9d:9d:59:70:ca:c0:4a:f8:43:18:bf:
51:4d:3d:56:2e:ca:82:dc:3e:34:79:e4:84:69:ef:be:e6:92:
9a:f2:1d:2b:78:5d:d5:85:6b:ee:1c:58:2a:3f:7e:d7:f0:f0:
1f:2d:f5:1e:8c:0d:d9:fb:c7:32:41:d3:01:5f:a1:fc:c2:eb:
c6:32:b5:9e:52:d3:17:ae:f4:4c:29:fb:2b:9f:98:7d:36:55:
55:f0:ac:8c:d3:51:ac:db:07:5c:9d:aa:a1:02:f3:e0:39:70:
1a:ba:8d:af:49:9d:16:2c:b8:0a:c1:14:a6:b0:a1:0e:d8:71:
25:51:ea:52:68:4d:52:f0:95:03:b1:2d:89:4d:15:19:fe:67:
46:d7:8e:b5:c2:ff:af:8b:79:4b:2f:e4:19:a8:7e:44:74:34:
55:7a:72:43:04:f0:1b:50:a0:22:df:fe:17:75:8b:c9:c6:f6:
48:ff:93:50:60:2c:77:19:6b:f7:73:4b:72:b2:c7:85:ed:4c:
79:e8:e2:15:97:1f:94:c1:53:c9:95:4d:f7:2c:a4:1b:90:e7:
2e:45:a9:a6:eb:e1:68:fb:62:ba:d9:cc:b6:6e:2f:f9:9d:ba:
1d:15:ad:b8:7a:1f:32:96:d8:19:02:a4:eb:61:7a:b5:f1:de:
d1:97:04:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:02:48 2025 by rpki-client