Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: wJzORuWqEeTbvjJW66ZPLEcFG1OwpUM3l4F7Me9ZEkA=
Subject key identifier: BA:0F:D3:53:6F:03:39:B8:31:CF:0C:89:32:E4:FE:0D:1C:B0:4C:53
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 019769619623640009DBBEE06385A04FC7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0C6B
Signing time: Fri 13 Jun 2025 13:01:32 +0000
Manifest this update: Fri 13 Jun 2025 13:01:32 +0000
Manifest next update: Sat 14 Jun 2025 13:01:32 +0000
Files and hashes: 1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: BrU9/FIRMOuktS0ypFWPjb+U2+8rTvtuDEMicmc7JJM=)
2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:96:23:64:00:09:db:be:e0:63:85:a0:4f:c7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Jun 13 13:01:32 2025 GMT
Not After : Jun 14 13:01:32 2025 GMT
Subject: CN=ba0fd3536f0339b831cf0c8932e4fe0d1cb04c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:af:8d:6c:0b:37:0c:bd:88:a7:73:94:42:
36:bf:1c:cc:65:ff:1a:59:aa:b4:6d:b0:b4:55:56:
35:5d:0e:eb:83:b9:52:7b:d7:98:b3:8f:14:7d:c0:
1c:5c:ae:4a:1a:27:16:47:71:94:76:ac:7e:19:69:
98:63:92:1e:d6:64:9e:95:48:b3:62:f1:10:91:7a:
a4:33:e0:79:75:39:e4:95:4d:44:16:fd:2f:4a:b4:
36:ee:1b:a3:a6:cd:79:93:84:dc:fa:c9:69:62:37:
47:f6:09:88:04:94:e0:58:55:ad:54:21:96:76:63:
3f:6b:3e:27:c9:a0:b8:53:e6:b1:3f:c1:cf:b6:f9:
53:23:50:48:2b:b6:c5:d9:69:42:49:6c:1b:96:c0:
9c:0d:fa:0a:b9:b7:7b:83:50:ff:1d:d5:1b:30:63:
df:e6:90:ea:8d:1f:6b:03:15:8b:65:7e:d0:90:15:
2e:4e:f2:69:13:35:07:85:f3:11:52:35:b0:71:84:
7e:d9:44:3b:27:ae:d5:00:5b:c8:d0:7b:e7:07:4b:
97:32:10:40:ce:fc:68:e5:48:89:21:68:a4:8e:ea:
49:af:53:55:4b:98:bd:48:ce:0b:d9:a5:ca:63:bb:
49:39:a6:b4:a3:15:08:29:1c:a5:63:6c:54:7c:62:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0F:D3:53:6F:03:39:B8:31:CF:0C:89:32:E4:FE:0D:1C:B0:4C:53
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:85:ba:2a:d0:4e:b3:a4:c8:b6:5e:55:23:59:fc:23:ba:57:
da:a8:1b:13:1f:a4:fa:13:80:4a:6a:68:17:ee:30:5f:af:6f:
a4:ad:6d:1e:1a:c5:13:a6:84:91:3b:12:06:02:2d:6c:97:a6:
53:a9:b5:ff:dc:66:23:c1:bb:e4:bc:d8:a6:1f:9a:4c:52:c6:
2a:8a:83:00:92:8a:68:f0:f5:fe:aa:c4:2e:b3:f3:50:6a:48:
77:0a:0a:29:ef:bb:fe:6c:4a:e6:da:d8:f7:46:83:c9:10:09:
77:a1:5a:47:f4:08:a2:45:c3:ae:4b:5b:91:6f:a5:91:cd:f3:
58:44:3c:72:ee:cf:d0:54:bd:fd:c6:58:72:6e:ef:97:6f:4c:
11:7c:3d:e9:13:bb:95:c0:36:cf:8d:ce:60:fb:a4:a0:43:49:
22:01:cc:72:7f:9d:91:16:48:f2:ed:f8:67:52:83:c9:e5:9e:
fa:0f:c4:92:ac:52:d5:e1:6b:df:07:27:aa:98:84:35:40:69:
1e:ab:b4:5b:81:05:29:3c:52:09:3d:68:49:61:40:97:73:9a:
36:a4:83:8a:de:4d:60:79:9b:02:b2:eb:7f:8d:2f:f0:f5:d0:
33:fb:3c:1a:aa:2a:28:15:87:af:d3:a3:12:ed:95:2c:3d:00:
48:1c:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:41 2025 by rpki-client