Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File: Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier: WS7htcbAIWkK390gDC5HZNaUBHXQ5YitRw21UTPChVc=
Subject key identifier: E4:40:63:E3:75:E8:0C:15:77:C2:1D:84:91:FD:E3:13:75:76:08:94
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer: /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial: 01964D473FCB728FACA807BB980682A1429A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number: 124A
Signing time: Sat 19 Apr 2025 09:00:37 +0000
Manifest this update: Sat 19 Apr 2025 09:00:37 +0000
Manifest next update: Sun 20 Apr 2025 09:00:37 +0000
Files and hashes: 1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: NJ+Kfr1qus2UYPPOo1isI+mQH8vuuErSFKifQ2Dp6MQ=)
2: T2nJ8YsYUulSZb9GUXFmz8VHViw.roa (hash: 5XjZ7sWfLWF9S9IVh/StOJhbx3B86TdyvGGrjN3b+RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:3f:cb:72:8f:ac:a8:07:bb:98:06:82:a1:42:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Validity
Not Before: Apr 19 09:00:37 2025 GMT
Not After : Apr 20 09:00:37 2025 GMT
Subject: CN=e44063e375e80c1577c21d8491fde31375760894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:8a:c8:73:ae:46:e8:c1:26:da:0b:f5:39:
3c:71:12:07:05:5c:52:d9:5d:b7:33:4d:19:b3:4d:
9e:f3:e4:0f:df:51:02:82:4b:1b:46:69:41:7a:13:
60:a7:d3:7f:ae:17:ee:95:11:06:8b:f8:38:f8:ff:
c3:41:bb:f8:22:5f:7d:6f:86:a2:a2:92:b7:4a:00:
60:2f:96:71:09:2e:4b:ea:a9:87:63:8e:03:17:31:
ee:8e:60:3c:9c:18:85:dd:85:eb:a5:0c:f2:32:ec:
6f:30:d7:47:22:2d:ad:a4:3a:b8:0c:ee:76:43:fa:
1b:8c:37:83:8c:05:57:8f:4b:02:20:d8:af:c2:aa:
bf:d4:e9:46:54:a8:0e:0b:ee:16:b3:c9:eb:6f:a0:
fe:5c:3d:ef:68:ca:d1:dc:73:19:c0:a6:e1:83:ed:
9a:d0:6d:10:0a:c4:18:87:7f:96:02:15:d3:e0:c0:
d9:8f:11:49:31:03:fd:ac:ed:7e:19:5e:1c:f5:3f:
62:97:25:b9:25:a4:be:ce:49:1a:18:00:51:cd:31:
56:0c:ab:95:23:ae:8e:24:10:d3:2b:60:ac:48:84:
7b:85:d8:b4:43:c6:38:52:c1:06:79:8e:ae:15:c0:
10:88:f2:25:19:0a:4f:40:05:44:8d:ce:35:75:49:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:40:63:E3:75:E8:0C:15:77:C2:1D:84:91:FD:E3:13:75:76:08:94
X509v3 Authority Key Identifier:
keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:02:3c:31:80:da:ca:9c:20:d2:83:1d:fc:8b:cd:18:a8:a4:
32:16:40:d2:ad:49:eb:89:26:7c:73:24:49:02:47:43:0e:97:
51:63:0f:9e:d1:97:c7:8e:17:27:c7:7c:53:42:d6:fc:54:af:
d7:3b:f7:5f:e0:80:1d:95:c9:eb:a1:0b:b4:82:c2:b8:7d:83:
ad:61:17:3d:b6:5e:fc:51:da:4b:a1:03:77:de:b3:4d:c8:c5:
38:a3:71:3b:63:14:0d:b7:6c:40:3a:74:62:73:b7:1c:cc:84:
9e:27:2f:60:99:0f:32:50:07:25:d5:f2:bd:4e:8a:93:21:0e:
19:2b:97:c9:b0:7d:57:4d:a3:c9:01:ea:ae:2c:6c:fd:87:70:
dc:37:14:d9:08:ab:8b:34:d3:e5:90:2a:70:eb:43:97:87:bd:
a5:ef:67:29:ee:5a:21:b9:4d:95:24:db:7f:db:d7:1f:06:56:
1d:20:d3:53:6e:07:eb:c5:51:c8:cc:7f:60:3a:c9:80:f7:c3:
90:42:fe:9f:c0:4f:3d:4b:32:fd:e9:08:e7:66:e4:2e:bb:81:
10:0f:63:d8:71:a9:4c:21:0e:8c:a4:c8:aa:e6:3e:7c:94:df:
67:55:6e:f6:cd:83:4e:17:74:43:aa:da:39:d5:a2:aa:e6:04:
41:4b:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:58 2025 by rpki-client