Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File: eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier: 9Y1/MQg/LlDCxiXipH9j1W260XBF03CGRiN4tz3crRU=
Subject key identifier: 96:2C:2C:4C:08:0C:59:2C:55:05:3E:53:8A:63:DD:BA:BB:7B:BE:34
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer: /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial: 01958B84B11E833D207CE49676FFD79DA69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number: 037C
Signing time: Wed 12 Mar 2025 18:01:23 +0000
Manifest this update: Wed 12 Mar 2025 18:01:23 +0000
Manifest next update: Thu 13 Mar 2025 18:01:23 +0000
Files and hashes: 1: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: 0wqvqc/BJDKSY/zfoA4cGZpi4ZofxLK5L2t5m8lMEJ0=)
2: gP8qEhtADxz-fNyyU3vcu8NYBMU.roa (hash: UQJK4mMNNX6B898sPio2JOjeNiXhgW4l71UxZw7LEXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:b1:1e:83:3d:20:7c:e4:96:76:ff:d7:9d:a6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Validity
Not Before: Mar 12 18:01:23 2025 GMT
Not After : Mar 13 18:01:23 2025 GMT
Subject: CN=962c2c4c080c592c55053e538a63ddbabb7bbe34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:ff:05:4b:c8:d2:0d:c1:73:22:bf:02:f6:
15:b9:49:02:21:df:a0:16:a7:d6:9d:6d:f4:02:2e:
6e:f0:b4:f1:4f:df:40:9b:d2:76:d5:5c:4d:f5:c4:
6d:e4:d3:df:eb:66:be:af:89:df:d6:b2:56:fa:57:
96:60:97:42:da:22:54:01:f2:c3:df:1e:c8:7a:f9:
61:23:7e:e7:25:a3:fd:85:d5:a4:60:f0:bf:8e:5c:
79:b1:d5:90:4c:17:6c:cb:94:f2:2a:ae:f3:10:c0:
48:a4:07:d0:8d:09:c7:47:08:da:d6:4e:25:43:1c:
9e:54:b2:db:6d:03:14:79:a6:4d:20:b0:dd:b0:b2:
64:50:83:da:e1:f9:c2:84:54:3d:9a:74:4c:02:86:
54:fc:fd:1f:e5:45:13:b2:7d:d9:ac:da:2b:3d:8f:
a0:ba:d5:45:fd:a6:4b:68:d1:f1:2e:e9:18:82:d2:
c3:98:61:02:03:ab:8e:f7:1f:fb:77:26:3e:e6:18:
50:d9:38:d6:33:f0:e1:f5:22:28:36:f2:67:e2:8d:
6d:d3:7b:91:cd:ec:a7:46:13:74:67:b0:ab:62:cd:
2d:c9:37:9a:fe:cd:13:dc:c8:0c:4b:d5:60:80:48:
c5:1f:67:b0:6d:f9:d3:1f:a3:89:df:7c:3e:a5:2f:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:2C:4C:08:0C:59:2C:55:05:3E:53:8A:63:DD:BA:BB:7B:BE:34
X509v3 Authority Key Identifier:
keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:93:f8:45:4d:ca:41:ae:36:44:6f:bf:c1:ac:77:c9:0e:0f:
a2:c6:50:da:ce:00:95:31:4a:1f:26:5f:9f:09:36:79:52:e8:
87:a0:ef:5e:1b:0c:e3:6a:67:98:22:16:79:6c:fd:b2:19:bf:
d6:02:0c:59:98:fe:8c:6f:e5:03:05:a8:87:a8:59:53:2b:e4:
e8:f7:5b:17:d1:20:fc:88:77:79:29:e6:bc:b3:5b:76:d5:82:
cf:fc:a4:5a:26:9d:1f:4c:58:92:a3:21:56:1a:7d:8d:64:16:
73:e2:f3:e4:da:b1:e6:35:d7:e6:31:44:71:92:13:d5:6f:91:
cb:f3:7c:72:83:4b:58:1f:20:c9:e4:66:a5:5f:22:80:99:0a:
18:44:78:d6:09:30:bf:d6:e3:e2:88:c1:d1:dc:77:b6:e1:ec:
ac:ab:be:10:ae:3d:f2:7d:e5:5d:a9:a0:d3:19:64:f5:f5:5f:
93:f2:20:f6:bc:a2:d8:f7:20:d8:52:88:b0:bb:91:7d:a9:3c:
ae:73:e1:67:5a:cf:3c:dd:22:88:4b:7d:e4:35:f8:fa:92:83:
62:c0:32:8b:43:d3:42:1e:8c:7e:91:99:01:3c:41:c1:a3:32:
44:42:4c:34:b9:06:35:86:92:f9:18:61:aa:d0:98:05:ff:58:
ec:a8:18:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:31 2025 by rpki-client