Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
File: EVGkgRFI99BZj1_wIdrdOhDl8pw.mft (raw, json)
Hash identifier: jPzTDvj06khJ2RswjArB92le7vltqgn/R4h/hudk/3o=
Subject key identifier: 3D:C5:E9:83:C2:F6:94:54:7D:77:AA:02:17:66:74:E4:42:25:C1:ED
Authority key identifier: 11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
Certificate issuer: /CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Certificate serial: 0196741DBE58C2656ED423EF2F60F7A76425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 22:00:28 +0000
Manifest this update: Sat 26 Apr 2025 22:00:28 +0000
Manifest next update: Sun 27 Apr 2025 22:00:28 +0000
Files and hashes: 1: 2CUDnPzPHNqbCWKCZFVlFgWU_Ww.roa (hash: bthC2bFYzQs+lVNqZxrhsxyhvDDeUXNWtR+Uh+f7dJw=)
2: EVGkgRFI99BZj1_wIdrdOhDl8pw.crl (hash: S5o9+sBHtCNcPj/tULaa6iYnXHz7GA+wW9hw283P558=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:be:58:c2:65:6e:d4:23:ef:2f:60:f7:a7:64:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Validity
Not Before: Apr 26 22:00:28 2025 GMT
Not After : Apr 27 22:00:28 2025 GMT
Subject: CN=3dc5e983c2f694547d77aa02176674e44225c1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:b1:af:ec:7d:38:c1:0e:d1:0c:ae:40:80:
52:99:3b:a4:ee:6a:e1:5d:96:49:97:0b:aa:be:91:
d1:1d:f7:53:f9:6f:0f:65:5f:57:eb:4c:de:fe:d4:
6d:e9:16:75:eb:e4:05:05:8d:5b:9f:29:0b:59:d4:
c4:62:fc:56:db:49:e0:04:69:a2:2a:1e:55:60:a9:
98:d8:f1:15:ac:f5:01:1e:be:34:cf:42:33:31:bf:
74:76:0f:86:2e:0e:2e:8b:95:67:4a:c6:d7:e7:ca:
db:17:48:c8:9e:c8:7f:91:b2:ed:18:62:25:59:6c:
ea:19:78:ae:a6:5b:35:18:f2:13:60:53:91:28:ba:
30:5a:8d:cb:08:94:3c:d8:c8:57:3f:64:f6:7b:e4:
e7:0e:25:af:7b:e5:e4:ba:11:4f:03:9f:ea:44:ab:
48:80:7f:44:11:cf:1f:3c:3d:b1:71:3e:df:3c:3a:
a2:fa:03:81:3f:50:c2:27:0e:84:9b:05:0b:2c:10:
f9:76:5c:78:4f:07:5c:90:a1:87:28:1e:82:ac:76:
6b:d7:a3:8d:73:39:61:d7:f4:9d:a9:8f:1b:23:d1:
8a:49:f4:15:44:44:c5:34:b5:74:f8:56:9f:a1:92:
16:5b:36:db:7f:54:f4:af:c5:c8:16:07:02:dd:22:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C5:E9:83:C2:F6:94:54:7D:77:AA:02:17:66:74:E4:42:25:C1:ED
X509v3 Authority Key Identifier:
keyid:11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4f:16:67:70:e4:df:e5:a4:05:78:b5:0e:87:69:20:fa:24:
43:27:7b:cc:a6:d3:d6:26:24:bc:52:5f:a5:d7:8b:a1:bb:38:
3f:30:87:8a:10:69:8f:87:44:86:40:9b:60:ad:22:28:3a:bc:
70:f8:cc:bc:f5:18:f9:51:c8:64:f0:98:f2:80:79:d7:fe:2d:
b1:e9:5e:52:30:56:23:66:98:4c:fd:68:30:0e:d6:fc:2a:d9:
e5:76:46:b0:df:53:27:98:ab:26:dc:53:0f:12:53:05:70:b9:
c9:63:cc:79:21:32:15:3f:69:f3:98:e0:e4:33:62:90:e1:f2:
71:fe:a2:f1:2f:39:a9:ca:08:e0:64:76:02:90:cf:a2:48:20:
65:5d:fc:ba:ac:15:5c:01:10:1a:c8:ab:82:1b:60:e1:b6:ff:
19:45:57:97:db:5c:da:4f:9d:b8:4a:a4:49:2b:2d:6e:3f:a4:
64:ad:e1:2c:b8:ba:cc:9e:e3:be:a5:02:81:29:07:19:9b:98:
07:9b:9e:f9:28:88:a3:8c:4d:69:7c:fc:f8:8f:d1:8c:e6:6e:
2b:dd:cd:3a:55:97:3c:07:ee:21:97:43:9b:88:5a:9e:91:cb:
27:fe:37:59:a1:96:09:bd:03:c7:df:05:67:b6:50:36:4d:a1:
8b:b4:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:34 2025 by rpki-client