Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File: eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier: LSWbf1rMPosIEDID52L0OGcXyhKSqMCHYkFiVyNzEqI=
Subject key identifier: 2C:D5:70:89:90:50:6E:C2:68:4B:1B:BB:7D:32:62:95:E9:4D:09:FE
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer: /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial: 0196545B994266CC5FB14280044A4A651A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number: 03E4
Signing time: Sun 20 Apr 2025 18:00:11 +0000
Manifest this update: Sun 20 Apr 2025 18:00:11 +0000
Manifest next update: Mon 21 Apr 2025 18:00:11 +0000
Files and hashes: 1: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: gVgr5tji6GSHiUD9WdQH5KLlydzKglYzp0t9t+loVJo=)
2: gP8qEhtADxz-fNyyU3vcu8NYBMU.roa (hash: UQJK4mMNNX6B898sPio2JOjeNiXhgW4l71UxZw7LEXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:99:42:66:cc:5f:b1:42:80:04:4a:4a:65:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Validity
Not Before: Apr 20 18:00:11 2025 GMT
Not After : Apr 21 18:00:11 2025 GMT
Subject: CN=2cd5708990506ec2684b1bbb7d326295e94d09fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:be:42:54:89:0f:68:ec:c0:c0:12:00:92:
ef:e0:1e:4a:0c:0e:64:9e:4d:2c:e5:90:1e:2e:33:
93:58:18:96:eb:99:07:29:ef:c5:36:5a:70:49:1e:
4b:42:f5:86:fe:6a:a2:b0:2f:8d:b2:7e:ca:2a:83:
2e:f4:78:f0:7a:58:5f:ab:b8:c9:7f:80:25:c3:ea:
6d:af:53:46:45:87:10:fc:a7:cc:dd:31:85:c9:e9:
61:d0:bb:55:61:58:38:f4:ad:4c:14:df:b4:cf:af:
23:ab:fa:91:79:ec:ea:de:d6:d9:3f:19:4b:8d:73:
b3:3a:24:9a:90:c5:d7:0a:c2:57:cb:fb:d4:d2:a7:
68:1e:cb:a5:f4:6d:57:81:66:bb:92:b1:bf:d4:ca:
d6:98:b7:1d:f6:8f:bc:d4:f4:78:3c:bf:1c:e2:3c:
dc:8b:f9:66:ee:ec:bd:ef:bc:b8:23:a6:9c:74:c7:
cb:aa:7d:28:f7:17:70:ac:ba:23:53:c4:e9:c4:4d:
78:ba:d2:31:b9:e5:0a:e5:21:83:af:da:22:18:f7:
a0:99:43:f0:e9:dc:4d:ae:ef:aa:b9:c6:89:a6:71:
06:09:47:6f:74:39:b8:47:75:b2:ef:17:05:db:ad:
b8:66:c4:67:63:87:c6:df:c2:f7:88:06:c7:16:97:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D5:70:89:90:50:6E:C2:68:4B:1B:BB:7D:32:62:95:E9:4D:09:FE
X509v3 Authority Key Identifier:
keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:74:7a:73:0c:0b:a5:cf:c6:9c:d7:91:5e:ce:32:a8:46:bf:
2d:cb:af:df:f6:c5:ec:f9:1a:88:9a:f4:0b:b5:4f:d8:02:25:
96:c1:07:a2:7d:07:92:30:b4:ac:6b:0b:ab:12:b0:97:a4:86:
d4:43:e2:33:5a:7e:c7:b8:79:22:1b:d0:4d:6b:bd:7b:fb:fa:
d0:27:7d:ed:c2:f1:6c:8c:c6:6b:1a:2a:40:3d:f2:a0:e7:b5:
03:fe:5d:c9:32:b7:20:c3:ee:8d:76:a5:cd:ce:34:6f:d9:96:
bd:6d:c8:a5:f8:a4:d8:a5:b8:6d:2a:b7:bf:19:c5:e3:b2:64:
64:fd:b1:37:a6:85:06:ac:21:f1:d5:1f:da:a4:44:90:e6:2f:
65:4e:93:b5:d8:fa:8b:84:c9:bf:f1:fc:d9:d4:06:d7:0b:19:
bd:17:01:65:d3:8d:6c:dd:ca:13:3b:77:e0:e1:1a:e2:20:6d:
09:f7:c3:4a:61:58:79:ab:e8:b6:8b:56:e3:06:f7:4c:4a:9d:
60:a1:e4:f9:13:df:d9:7a:8d:63:ac:1a:9c:51:f9:19:0f:f2:
de:74:0c:78:aa:d6:df:79:5f:ad:e2:3f:c7:64:f8:3d:a4:c4:
4a:82:44:e8:e6:81:6b:ca:89:c3:9f:c1:d5:78:e2:ad:f1:8a:
e2:f2:2e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:15:56 2025 by rpki-client