Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: FVo9FklCJO3KG3g149D8ctEKcnUGzzHer+gzQndgoxw=
Subject key identifier: 4B:25:05:A4:FB:E3:99:BF:7E:9C:E1:A9:A1:0E:15:F9:3F:FC:02:2F
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 019660CEFE299D26E5343336F0CE8F8A33B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 150D
Signing time: Wed 23 Apr 2025 04:01:40 +0000
Manifest this update: Wed 23 Apr 2025 04:01:40 +0000
Manifest next update: Thu 24 Apr 2025 04:01:40 +0000
Files and hashes: 1: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: /0As7+m4TrYKh5LUYt9U047xxB4L8NVkFayJqGjqcZY=)
2: UxsTUJ3i3bRyx6hBigKTh5V_pzI.roa (hash: hCyMOI3ro18CpyVh9ARwQzWK3Oa2vshWDEi2X+gYh7I=)
3: dzRXBpMe0hzBj6HJBEsWN5FaUlQ.roa (hash: n4IPgvg0KMpR1k4kw/tSH+SDBMVI+LIlZxHtSGDn0vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:ce:fe:29:9d:26:e5:34:33:36:f0:ce:8f:8a:33:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Apr 23 04:01:40 2025 GMT
Not After : Apr 24 04:01:40 2025 GMT
Subject: CN=4b2505a4fbe399bf7e9ce1a9a10e15f93ffc022f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:bc:26:83:f6:59:43:5b:30:2d:f5:b8:69:
f6:65:26:ca:1b:a0:b4:3b:6a:cd:a7:a5:61:04:b3:
8f:f1:c2:58:f9:18:af:97:dd:85:c4:e9:49:bb:19:
c5:b4:85:0a:70:d5:40:f1:ce:cd:05:3e:3d:62:ec:
b0:5d:a8:38:a9:c7:39:7a:33:e4:4b:6b:7e:e0:0f:
15:74:ef:e3:bf:ff:d7:15:b6:29:c3:49:22:f0:87:
93:26:df:79:54:14:17:8d:8c:51:9c:bc:fb:39:51:
c3:75:a6:d4:e7:80:1f:69:66:df:8b:66:f8:15:a4:
a6:9f:22:ad:4e:31:47:59:e6:0b:49:16:7a:7d:66:
84:34:17:d2:26:d6:c0:f1:77:42:0e:d7:2a:1a:fb:
84:33:d0:4f:b4:cc:34:56:25:ed:2b:7d:de:1c:af:
64:7a:e5:93:1a:87:e3:77:45:ae:01:f3:69:a0:ae:
44:d5:38:45:4a:fd:cc:fc:b8:c5:e9:65:d7:1b:d9:
18:57:07:09:9e:69:d3:38:9e:c8:1c:de:4d:c8:fa:
9e:19:3b:3b:1c:6e:76:8c:b0:44:00:44:11:7c:df:
86:30:f2:b5:c6:82:f0:dc:82:0e:b4:df:75:07:21:
57:45:9a:98:07:3a:ef:ae:a6:02:21:c6:80:94:77:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:25:05:A4:FB:E3:99:BF:7E:9C:E1:A9:A1:0E:15:F9:3F:FC:02:2F
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9e:85:23:2b:8e:13:93:33:93:27:a2:ea:b6:ad:37:6b:48:
11:67:c8:1c:81:59:56:18:73:af:63:df:4a:5e:07:80:8b:64:
de:90:92:f2:e9:b9:b0:b0:d6:f9:0e:36:de:5a:8a:b2:14:c1:
b8:8f:c7:b7:0d:c6:64:10:45:ac:51:bf:c7:9f:93:d0:f4:5b:
15:1b:bb:79:fb:51:8e:f5:b9:87:5e:54:82:05:0f:03:14:ec:
74:b0:70:80:92:75:a6:d6:1d:74:df:0a:39:bb:86:c6:ae:25:
fa:95:e6:08:33:68:cd:3c:9a:b5:cc:15:a0:ce:2c:b0:8a:3b:
3b:54:8d:42:a5:60:ac:25:ce:01:5b:89:b5:56:d8:9f:a5:59:
6e:4d:95:2d:19:4c:09:8a:bb:00:25:d2:8a:1f:96:25:f9:9e:
2d:a3:14:25:e6:cd:9e:1e:b6:ce:8d:c4:b7:d1:cc:2d:c8:aa:
7c:18:a0:e6:41:34:f8:aa:9d:e4:91:e7:24:5d:21:23:94:1d:
d1:fd:40:ef:b0:d8:6d:c0:ab:b8:fd:8b:51:23:0c:cc:d1:ca:
11:e1:f5:3e:e3:f7:fa:bc:ef:e1:7e:1e:dc:91:33:8a:8a:15:
3d:c5:b6:d1:78:03:45:ef:35:d7:0d:c3:6b:c6:6e:ad:02:c7:
ea:58:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:04:44 2025 by rpki-client