Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
File: eilzR6QNO99Xh8x1OsJALQgkv8s.mft (raw, json)
Hash identifier: aP8Um4X6l0CJ+YnLPOuiPycRSwIuIQ+tmeYenlj2sRw=
Subject key identifier: AD:9A:E0:33:62:E2:89:25:C9:07:9C:19:BD:98:EE:88:A5:72:09:A1
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Certificate issuer: /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial: 01967BD732324C9D82048C0E1349E816118E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
Manifest number: 0E11
Signing time: Mon 28 Apr 2025 10:00:22 +0000
Manifest this update: Mon 28 Apr 2025 10:00:22 +0000
Manifest next update: Tue 29 Apr 2025 10:00:22 +0000
Files and hashes: 1: N0z9esTkm8sf7IqrP3Uufonx0_k.roa (hash: cRVe0pjyNnhUe4BOiczul9pweEDzxKe03iHv5OQ9WhI=)
2: eilzR6QNO99Xh8x1OsJALQgkv8s.crl (hash: vZVhghT5sKzjxYBWXgOu9/AZqU5qudJAwCF4Zj5wpIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:32:32:4c:9d:82:04:8c:0e:13:49:e8:16:11:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Validity
Not Before: Apr 28 10:00:22 2025 GMT
Not After : Apr 29 10:00:22 2025 GMT
Subject: CN=ad9ae03362e28925c9079c19bd98ee88a57209a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:43:eb:f4:bc:c5:0b:32:81:27:35:2a:35:
aa:c8:d1:5e:eb:e4:74:9b:a1:27:44:75:3e:ce:b2:
40:39:b7:a9:3f:f8:06:8e:00:14:f0:8f:01:6d:82:
59:d1:d6:40:17:f3:ad:a9:50:a5:3d:48:81:0c:4f:
e0:cc:90:d0:d2:d9:4b:16:03:e2:e0:dc:aa:08:fa:
08:33:40:de:4e:0d:47:be:52:38:1c:d5:2b:27:81:
f7:fb:4b:85:ec:1d:09:d1:c5:41:cb:07:ff:99:f7:
c2:42:39:c9:62:98:c0:cf:99:81:3f:d4:28:2f:4b:
a8:a3:f2:f7:6c:41:19:23:a6:4f:36:a4:db:66:b6:
81:f4:d9:2e:64:9c:f7:0d:1a:be:0e:3c:f6:9d:18:
05:9b:6f:ed:98:5f:84:ac:5b:8b:b9:b6:e2:c1:b4:
ac:0c:16:ec:80:db:ee:20:79:41:85:29:54:20:82:
52:82:25:ba:c7:e1:25:a0:22:5c:4b:f2:a6:70:40:
61:56:23:47:af:4c:9c:b6:e3:da:dd:03:1e:e1:70:
eb:c6:25:74:bf:77:2a:7e:e4:1c:c6:c2:c1:e1:1c:
eb:3b:68:bb:2f:66:e3:9a:82:23:66:be:d9:a0:21:
9e:0f:7d:49:6c:c4:29:a5:b7:9d:97:a3:72:b9:6d:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9A:E0:33:62:E2:89:25:C9:07:9C:19:BD:98:EE:88:A5:72:09:A1
X509v3 Authority Key Identifier:
keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:18:7c:9f:65:90:c9:f9:24:30:75:df:22:76:8a:c2:df:15:
3d:e4:c7:a5:2b:41:72:28:95:5a:4b:39:60:3c:0e:91:1a:f0:
43:a1:6b:d0:d3:28:73:dd:01:94:bd:5e:b7:89:5a:54:73:da:
43:2d:5f:d9:de:ca:95:f4:ed:f3:8a:a4:67:9e:a0:cf:bc:77:
13:6d:f9:6f:5b:14:63:a3:d7:f8:0b:d1:49:42:05:ee:1b:de:
85:c3:91:f9:fb:f9:72:da:0d:d3:47:6e:f0:f3:b9:c1:3c:c1:
ae:40:ff:95:36:9b:a8:c9:3b:2b:3a:65:ae:af:28:ce:2d:b5:
bd:94:21:0e:45:2e:7e:83:d1:48:3d:19:6d:a5:76:b7:0b:19:
7e:0c:31:2e:b2:76:1e:f8:21:14:ac:12:d9:08:1b:40:d5:74:
e0:eb:da:83:07:0a:08:d3:40:5a:ce:5e:73:fa:ff:be:0b:44:
6b:ba:c9:06:65:6a:9d:a4:9f:71:db:65:57:49:6a:c1:e5:06:
e6:a8:c2:4a:49:5f:29:38:82:33:57:fc:6b:30:a0:ae:e1:19:
ca:73:c3:65:c6:51:d4:7e:36:a5:52:a6:f8:03:40:d8:7e:ea:
00:32:39:a0:0b:93:a8:ee:d9:93:18:c0:8e:6d:1d:55:82:ba:
87:55:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:16 2025 by rpki-client