Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
File: eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft (raw, json)
Hash identifier: gc23oLoZdnzTdxTzNsd47uu/StNvSGVGUYtJ818ClgY=
Subject key identifier: 4D:64:FB:E9:D2:72:95:FD:26:AF:AB:84:AC:D7:F8:91:B3:80:21:0C
Authority key identifier: 78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
Certificate issuer: /CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Certificate serial: 0196556EC19C6E40F14BF1BF5F541DF8A826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
Manifest number: 1503
Signing time: Sun 20 Apr 2025 23:00:43 +0000
Manifest this update: Sun 20 Apr 2025 23:00:43 +0000
Manifest next update: Mon 21 Apr 2025 23:00:43 +0000
Files and hashes: 1: eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl (hash: Ck6fYCDWNgXaZ2gir8Bw/BD0LDkOuuq/iK6G5fXe6zk=)
2: hpIZj1aNVGCRsSVDc00BaExDrD4.roa (hash: 8bGQ2/PFRjS1aWZOpnSHBKRNTQbhLOIjn95p+sx+IoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:c1:9c:6e:40:f1:4b:f1:bf:5f:54:1d:f8:a8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Validity
Not Before: Apr 20 23:00:43 2025 GMT
Not After : Apr 21 23:00:43 2025 GMT
Subject: CN=4d64fbe9d27295fd26afab84acd7f891b380210c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:f7:4f:fb:c9:ac:64:07:e2:d0:e6:23:b5:
54:2f:7a:c2:90:a8:6c:04:30:f4:89:de:99:e9:c9:
9f:b3:d3:37:09:46:94:3e:6c:1a:c0:6a:dc:7c:07:
2d:a7:ba:5a:39:16:9b:2f:f3:91:f0:87:d0:03:7b:
5e:d2:21:a9:40:57:82:8f:00:ad:56:79:1e:bb:4d:
c0:0d:5d:d5:df:7d:8e:04:a4:a9:72:f2:94:35:22:
29:bf:5b:b6:ae:94:86:72:30:08:f1:ca:b0:f5:6d:
72:90:ce:68:9e:0d:40:60:d4:f5:98:20:ef:6a:70:
76:07:c1:79:e0:1c:4b:e9:65:0e:92:fb:d1:d7:2a:
97:cb:75:b6:ec:35:d8:7b:95:a2:38:b6:cb:61:7f:
f3:cb:b1:c4:c3:d4:64:8d:1d:3d:9c:e2:ed:26:31:
24:43:0c:b4:bb:41:9a:af:bf:2d:ab:f4:0f:c2:6c:
8c:b2:59:47:a3:d4:2b:70:a1:de:aa:d9:36:69:47:
f8:5d:7e:f0:a7:3f:f9:64:b5:55:1f:a9:08:ea:97:
ff:b3:ca:d1:52:71:78:fb:11:17:a9:41:3b:1c:9d:
b4:f5:3f:09:2e:76:83:45:43:34:2d:ea:c7:28:00:
1c:b3:5c:6f:f7:10:15:a2:9b:2c:fd:5f:5f:6e:16:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:64:FB:E9:D2:72:95:FD:26:AF:AB:84:AC:D7:F8:91:B3:80:21:0C
X509v3 Authority Key Identifier:
keyid:78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1e:60:e5:ff:6d:9d:e5:f9:a9:e4:dc:02:1e:9c:fb:11:df:
28:e0:b4:c6:37:a6:8b:25:e9:b2:51:cc:cb:c3:0e:f1:09:3c:
12:f8:05:f3:79:67:98:00:77:7a:10:8a:96:2b:59:21:04:db:
a7:72:98:3a:bb:2f:8f:74:51:c2:45:46:53:79:55:7d:d5:cc:
ee:37:60:2e:e4:a5:01:4d:d8:5a:24:e1:2d:da:93:1d:72:f0:
2c:ef:91:e7:6a:a7:32:9d:22:bb:cc:98:da:8b:c8:dd:47:55:
e4:b8:46:5a:5b:37:cc:f3:14:6d:2f:88:c9:0c:28:b3:18:02:
51:9c:c8:ae:cb:f9:91:b7:d4:68:ad:98:41:6e:5f:4f:73:cc:
f9:2b:54:db:95:80:ab:cf:f9:6f:78:ab:ae:4e:96:ed:5a:63:
ab:b6:67:2f:c2:1d:3f:e3:7b:4a:d0:65:b8:c9:76:83:f9:19:
0b:a1:bf:cb:35:3a:76:92:2b:46:f4:21:66:a3:69:c2:ff:ac:
b5:08:ec:30:ea:a8:5d:b3:9a:dd:5c:b6:d8:59:f9:6b:78:91:
cc:af:87:76:83:b4:f1:5e:83:8b:cc:5e:8a:a3:6d:70:e2:a8:
4f:92:1b:cc:cb:de:1e:4c:bf:63:83:3e:66:61:79:98:a0:9b:
85:f1:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:15 2025 by rpki-client