Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
File: EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft (raw, json)
Hash identifier: J70tJAU7LU+9eApjLp5zyYjOov60zgAStAYvYJiMhd0=
Subject key identifier: 05:20:2E:F4:F9:43:52:E5:D8:53:13:4D:C2:79:85:41:80:B7:27:19
Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
Certificate issuer: /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Certificate serial: 01964D46E2BD8723394238E0D4D5D1E9A773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
Manifest number: 095D
Signing time: Sat 19 Apr 2025 09:00:13 +0000
Manifest this update: Sat 19 Apr 2025 09:00:13 +0000
Manifest next update: Sun 20 Apr 2025 09:00:13 +0000
Files and hashes: 1: EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl (hash: UlreCZq+oQi6PTuYcJ0rRQH7r7JgaacIorKGowOQbxg=)
2: zKEsruxE4cDY7eG8e5BdPLgZZLk.roa (hash: Nz28QZnXJ3PO2kQqaWAGQuglhdiOX9sRFv6wk4pN+lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:e2:bd:87:23:39:42:38:e0:d4:d5:d1:e9:a7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Validity
Not Before: Apr 19 09:00:13 2025 GMT
Not After : Apr 20 09:00:13 2025 GMT
Subject: CN=05202ef4f94352e5d853134dc279854180b72719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:f7:05:b3:b8:06:6d:36:6b:9c:e2:fa:c6:
3b:e4:f8:b7:59:46:ba:32:14:35:fa:d5:67:b1:fe:
5e:39:73:28:60:54:ec:94:f8:bf:66:13:36:d7:00:
b1:9e:e7:6b:91:6f:12:b7:76:c3:bb:36:0f:f4:f9:
9d:bb:41:2f:87:f4:3e:8d:a9:99:d9:d6:fa:2c:27:
77:9c:45:28:24:18:6a:bf:be:f3:fe:33:d0:38:bf:
13:2f:17:8c:69:2b:97:18:ee:96:ef:74:91:5b:37:
a5:20:a3:f8:81:a4:0c:0a:06:9d:a5:2d:a7:5b:0b:
d0:c0:e4:ff:ed:bc:55:67:e5:2c:cf:7d:c1:78:db:
50:5e:70:4c:17:c4:77:98:86:55:3b:96:c1:8b:75:
f3:f2:02:bc:cd:6c:ef:76:a2:4e:3c:47:ea:4d:d5:
19:e6:ab:f0:f9:8c:8c:30:3c:38:ad:08:5f:1c:c4:
b1:2c:ea:7b:8c:63:2c:94:82:9a:c3:06:04:5d:01:
cc:ef:b2:77:ea:28:69:09:31:d5:3e:51:66:8b:23:
b4:19:40:79:11:81:67:5f:20:84:f3:4d:ee:85:af:
c3:ad:84:a1:df:18:2b:b3:45:fd:aa:8e:65:04:bf:
a1:64:ce:24:3f:a9:80:b8:f4:01:34:9a:76:c8:79:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:20:2E:F4:F9:43:52:E5:D8:53:13:4D:C2:79:85:41:80:B7:27:19
X509v3 Authority Key Identifier:
keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:aa:67:e0:d8:c2:a9:73:6f:cb:bf:14:bc:03:28:29:c8:e2:
33:89:e9:c9:59:24:9d:b1:e6:7b:0a:68:4c:90:4c:fc:16:6c:
c6:ff:9f:c3:02:ec:37:2d:1a:c7:e0:21:ad:0a:17:46:a6:f9:
f2:f1:62:63:27:c8:37:80:cb:51:1c:f9:de:4c:80:1d:6f:60:
e6:09:6f:75:a8:90:27:25:d5:f7:ce:ef:ab:c5:33:f1:d3:aa:
e9:01:d3:3e:ef:e2:aa:22:75:15:d4:24:87:65:c0:ee:24:30:
0c:46:a8:40:88:02:fb:40:e8:76:ad:d0:3d:64:83:72:b1:f4:
f0:77:e5:95:98:25:74:b3:a4:77:a3:50:0f:02:3c:d8:8e:ff:
5c:57:76:f6:6b:01:67:6b:42:e9:c2:c6:ff:42:e6:38:b2:91:
57:ce:7a:4f:f5:a4:b6:57:5e:bd:0b:d5:9c:f4:66:eb:d0:c7:
12:a5:e9:e0:fa:b7:8a:a6:ef:62:30:04:1d:f1:da:32:10:9a:
25:98:31:e2:70:5e:10:b6:aa:cd:02:db:42:f8:4c:d5:68:f5:
3e:07:2f:24:5c:e3:35:59:a7:ee:96:9f:01:4e:0f:14:b2:29:
1d:b2:92:cf:1a:6b:bf:fa:6f:36:aa:9b:78:53:a3:e6:5e:8c:
87:61:a6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:08 2025 by rpki-client