Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
File: EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft (raw, json)
Hash identifier: JPmPwhrnE3ZYsNEEMJIX0W5hnMl794/eaD97UYiboPk=
Subject key identifier: DF:F7:D2:04:1C:1E:8C:8D:F0:71:93:BE:DF:8D:5E:BA:BC:8E:D8:DE
Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
Certificate issuer: /CN=110aaf9016a68752fc9132149b91e8fab16e24be
Certificate serial: 0196575CEF8F925E5B4BF73CC07DBE625AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 08:00:30 +0000
Manifest this update: Mon 21 Apr 2025 08:00:30 +0000
Manifest next update: Tue 22 Apr 2025 08:00:30 +0000
Files and hashes: 1: 6R7l5Zc0F8S-RPgHqG7ELPTEGWs.roa (hash: qKcKkoUboZrcqtoprL7lO+GfuPllhw7eINNwNRAw7pk=)
2: EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl (hash: pgziSjAHtXikX4sXRaH2boeyN7XEG47Lf/SzAEEwZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:ef:8f:92:5e:5b:4b:f7:3c:c0:7d:be:62:5a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be
Validity
Not Before: Apr 21 08:00:30 2025 GMT
Not After : Apr 22 08:00:30 2025 GMT
Subject: CN=dff7d2041c1e8c8df07193bedf8d5ebabc8ed8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:ca:24:e8:18:39:26:d5:0c:3a:b4:6c:d6:
53:8d:a8:5c:38:d3:73:6e:6e:5d:9b:e6:3c:e9:97:
0a:2b:97:40:81:80:04:0c:a5:4e:81:ed:57:9a:d5:
a1:97:a4:e7:93:c9:6f:0e:cc:16:31:6f:2f:c2:f0:
5d:69:71:7f:54:22:08:3d:2d:ec:a9:8b:5c:84:b5:
62:bc:90:e4:a8:ac:43:46:58:09:33:18:94:74:11:
b2:86:15:4f:c9:9c:5f:cc:e6:e7:d9:81:3c:40:91:
04:94:8e:c3:30:8f:a0:af:63:1b:67:91:94:99:0c:
5a:15:11:ab:56:91:7e:bd:e1:a5:43:bd:63:81:66:
f9:0a:30:94:a6:29:9b:18:ac:ea:0f:64:76:be:a0:
13:36:c3:9d:18:41:c6:ad:ad:a6:16:c0:49:61:df:
af:d3:b2:79:d0:22:5b:2c:3c:fb:00:3b:c9:a7:20:
f4:9c:ac:ab:20:b6:31:d4:0d:c1:9e:f9:97:5b:1c:
11:de:18:3d:dc:66:62:e6:7e:82:30:b1:cc:11:76:
bf:83:b3:99:4b:14:84:de:da:4a:f7:81:61:95:e4:
34:e4:43:30:68:dc:9c:4d:e3:88:26:df:6c:41:02:
8f:96:c1:65:81:29:3b:a5:53:3e:42:52:2c:c6:2c:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F7:D2:04:1C:1E:8C:8D:F0:71:93:BE:DF:8D:5E:BA:BC:8E:D8:DE
X509v3 Authority Key Identifier:
keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fc:cc:02:8d:8b:6b:06:1e:75:14:98:f1:0e:8d:8f:50:57:
66:0d:85:a1:a8:3b:8c:dd:6c:24:32:5a:e7:1d:72:37:80:48:
fd:c3:12:6b:1e:74:cc:86:a1:4a:45:aa:15:d7:b6:ec:31:f9:
30:d4:62:d0:07:b9:2b:ba:d7:40:95:4f:c8:00:42:eb:42:fa:
83:be:33:70:f4:87:81:24:51:07:3b:d5:d7:da:93:18:03:fc:
60:f0:d1:cc:ad:47:f8:5c:ca:38:2d:82:d0:92:b4:cc:49:46:
9a:21:8f:bd:18:a6:89:e7:0d:b4:ae:db:e4:e7:58:86:87:4e:
01:0d:17:94:01:dc:72:1a:42:ba:69:bd:17:5c:0d:40:e5:58:
27:8a:b2:2e:08:f2:c4:b2:38:82:14:0e:b3:ab:a8:b2:e3:2a:
78:f7:dd:73:b6:6a:f1:3f:bb:6b:8b:93:f6:b2:68:ac:d2:24:
25:96:d1:4b:2f:ac:ba:77:9f:8f:7f:44:d8:81:c7:e6:3d:1a:
04:06:77:c1:f1:78:11:17:6e:01:e1:5b:ea:36:51:06:e2:98:
0e:4e:d1:24:91:1c:45:29:af:19:34:92:7d:a7:84:26:b8:c7:
e8:c2:6e:93:0d:5b:45:cc:f2:5f:3c:c9:20:4c:be:3a:73:a1:
76:1f:3e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:52 2025 by rpki-client