Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.mft
File: EG_IeHSRKxgTrEKSRXq93AGOm0U.mft (raw, json)
Hash identifier: VrDBu5Tfl5F1oHyA17CJT6HtSytlGiZvshQjFeSkgn8=
Subject key identifier: CB:96:5C:75:97:47:B7:DC:D8:AE:76:EB:0B:44:53:7B:B6:3D:EA:51
Authority key identifier: 10:6F:C8:78:74:91:2B:18:13:AC:42:92:45:7A:BD:DC:01:8E:9B:45
Certificate issuer: /CN=106fc87874912b1813ac4292457abddc018e9b45
Certificate serial: 01961922F206ADB2EC0C9097BA3D131C1A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.mft
Manifest number: 14DF
Signing time: Wed 09 Apr 2025 06:00:42 +0000
Manifest this update: Wed 09 Apr 2025 06:00:42 +0000
Manifest next update: Thu 10 Apr 2025 06:00:42 +0000
Files and hashes: 1: EG_IeHSRKxgTrEKSRXq93AGOm0U.crl (hash: xLZOJNDTVpA8oPXaratA9PrK/hXUS45vOLzYiOvmGTE=)
2: nIYQEeYqHsjGk1HnsHfkMxRcQRo.roa (hash: ycX0NPtdV2a4EnLGQ1o3vCMrwecsVp9vTud4zqdQmCQ=)
3: tnPdIYZ_Xg1jlbA7OOLVE5eeCec.roa (hash: Mz8v6+YcC5LwNUyg6BoLOLhL5ks8b6FyVn29SuKol3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:22:f2:06:ad:b2:ec:0c:90:97:ba:3d:13:1c:1a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106fc87874912b1813ac4292457abddc018e9b45
Validity
Not Before: Apr 9 06:00:42 2025 GMT
Not After : Apr 10 06:00:42 2025 GMT
Subject: CN=cb965c759747b7dcd8ae76eb0b44537bb63dea51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:66:a2:a2:9d:7a:50:9f:7f:57:3d:64:c8:
4f:74:95:a2:62:29:cc:43:9b:d5:6e:d7:f0:f2:1a:
f8:70:c8:42:82:2d:29:8e:24:5e:d2:be:2a:0d:ef:
3c:a3:34:30:9e:41:70:3e:3d:ae:6d:22:ef:b2:de:
2d:c9:87:24:b6:cb:d3:35:77:5f:e3:df:ac:95:d0:
d6:57:30:8f:44:2e:1f:54:ba:4d:ed:f8:0c:a1:bd:
ca:81:3a:5d:6e:73:b5:4e:1c:21:3d:57:f4:1a:9b:
72:62:f1:59:27:f6:94:c6:63:2e:f3:34:37:88:07:
46:57:8d:b0:8b:ba:e3:b4:00:3c:79:bc:0a:3c:70:
c5:8f:31:57:41:8b:66:44:3e:0c:d4:91:8f:b4:3a:
9e:00:39:16:f1:b9:35:f1:3c:89:68:ba:06:86:50:
5c:c8:e8:2d:bf:45:e8:41:5c:d1:86:76:3a:46:7b:
46:c1:bb:f4:5a:f3:bb:58:80:cd:d1:08:c0:f1:3f:
ce:0c:27:9e:f3:85:7f:8f:de:41:b8:66:c4:44:f1:
f5:fd:cc:f3:42:a6:87:95:16:20:6e:7c:84:8c:27:
b6:78:b4:f4:23:3c:02:cd:e7:56:61:f6:81:d6:59:
b8:3f:c5:0e:47:0a:a6:60:aa:d5:24:c8:27:0c:66:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:96:5C:75:97:47:B7:DC:D8:AE:76:EB:0B:44:53:7B:B6:3D:EA:51
X509v3 Authority Key Identifier:
keyid:10:6F:C8:78:74:91:2B:18:13:AC:42:92:45:7A:BD:DC:01:8E:9B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:41:f1:21:bc:e0:94:6e:79:18:ba:90:5f:f1:ed:17:a3:84:
fd:18:74:60:26:56:17:75:35:39:6b:c7:06:1a:7f:53:2b:a6:
c7:0a:3d:a8:30:18:0b:3b:5a:a1:94:66:eb:03:ef:4f:e7:ba:
2e:33:2d:2d:58:50:6e:89:52:b9:13:da:48:59:13:d5:77:e1:
12:cf:a3:df:e2:1a:c6:d6:6c:66:67:10:ad:02:1e:4c:5a:26:
ec:78:69:fc:a5:5c:8c:7b:de:fa:66:6a:dd:63:76:2e:00:85:
27:05:0a:96:cd:bb:9d:92:d8:9c:ed:9e:82:c0:d7:fa:0a:02:
be:bf:8d:78:98:fb:b0:93:0b:88:61:bf:a5:f9:39:d3:04:af:
4e:5e:60:d9:23:d2:eb:e4:d3:1f:cf:0e:09:e7:96:12:e0:2c:
03:8c:4d:a5:f0:77:d5:c5:95:06:c9:49:2b:40:22:21:2e:ce:
a2:2c:91:af:d8:02:00:be:84:f7:51:e8:9a:cb:a2:31:6a:bc:
80:83:68:d5:63:90:42:0e:9e:ba:59:02:a9:9b:fa:0f:6e:ec:
92:40:12:7a:80:6d:60:52:ad:d9:4b:ed:9f:9c:91:7e:dc:e9:
f6:60:ec:9f:69:3d:2e:21:be:24:13:e9:66:c4:96:30:0a:7e:
e3:33:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:15 2025 by rpki-client