Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: BWkwtbD+fLEuos0KElYq8VBVA0Jh56D6wb3hXmHjfRk=
Subject key identifier: C9:F4:0B:2B:AF:B4:43:3E:63:29:BD:20:B1:00:9B:11:B2:C7:F4:4F
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 0196741E188F4E1124F57F1DFF411594880F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 22:00:51 +0000
Manifest this update: Sat 26 Apr 2025 22:00:51 +0000
Manifest next update: Sun 27 Apr 2025 22:00:51 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: E3NnGxxM7zpCEWCHrz6FCGLGV1C6RYESgV30Wuz3UrE=)
2: qKzJgLnJqbeDXyV-ycImwsgvDDg.roa (hash: aG2do145Ob8Jlod59pCz1QJaZfsQ+AVFS5an66p82B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:18:8f:4e:11:24:f5:7f:1d:ff:41:15:94:88:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Apr 26 22:00:51 2025 GMT
Not After : Apr 27 22:00:51 2025 GMT
Subject: CN=c9f40b2bafb4433e6329bd20b1009b11b2c7f44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:53:9a:8b:aa:d0:b4:7b:f2:e5:fc:f2:ad:
8d:1b:50:60:bd:7a:4a:d1:1a:01:15:ba:2a:38:d5:
29:3e:be:86:94:f9:c6:77:d9:83:b9:a4:9f:59:ec:
94:8d:c0:5f:24:fb:1a:b1:2b:19:7e:d5:58:73:77:
59:ce:fd:dc:22:e9:00:dd:f5:30:9e:78:f0:fc:c4:
6a:4c:36:50:51:94:4c:57:0e:9a:36:53:ba:4c:91:
90:94:6a:0e:ae:89:78:04:ec:b5:28:f9:39:4b:98:
5b:97:8d:b2:e3:ac:0e:ba:ad:cb:5d:25:2b:f4:3f:
b0:8a:80:b0:ee:02:cb:af:f1:16:1f:3e:b2:db:f3:
0f:a9:b1:9b:5c:67:ee:b4:41:ad:aa:b2:a9:5c:46:
98:9c:45:d7:6b:7b:83:16:d3:d8:1a:7a:ed:90:c3:
ee:7a:b4:8e:eb:5e:a4:ca:36:93:6b:bd:6b:39:b9:
22:ca:59:bf:69:cd:54:cd:d7:95:53:8c:a1:4e:fb:
10:be:55:4a:2f:b2:2a:96:d1:f1:ca:96:f1:3a:38:
f6:e5:e2:5e:46:44:c4:a6:4b:44:1e:40:39:3a:d0:
3e:35:b9:09:ee:dd:f7:23:e6:20:83:5b:f9:4f:8e:
be:cb:25:a0:8c:74:48:d9:ba:a8:44:39:16:b1:ff:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F4:0B:2B:AF:B4:43:3E:63:29:BD:20:B1:00:9B:11:B2:C7:F4:4F
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d8:f6:c8:3d:be:29:78:77:79:7c:25:c6:a8:f5:45:fa:ad:
ea:9f:09:bf:39:d2:b3:54:9a:03:34:d8:24:49:3e:d8:d9:80:
26:cb:6c:f2:04:34:30:4a:ef:2c:77:08:49:07:79:b2:2f:11:
74:31:aa:5f:e3:98:31:29:a9:01:a2:b7:86:84:ea:01:b9:ca:
2c:df:9e:c1:e7:93:69:aa:47:f4:55:95:5f:bd:66:0f:9a:61:
3f:47:74:38:59:e2:7d:e5:65:02:02:81:b4:21:f0:e3:69:eb:
ad:b9:d8:62:da:07:fe:03:56:ae:3b:97:e8:d9:56:74:48:22:
46:ff:06:32:48:65:49:b9:b7:a1:da:f9:3b:ab:df:24:c5:4f:
28:02:42:52:f0:66:a1:a8:3a:f9:76:fd:ed:62:30:36:a1:56:
b3:1a:3a:5b:01:60:55:95:be:30:a4:d6:68:ec:d7:17:6e:3c:
f7:c2:6f:ee:7b:9c:66:f8:6e:15:4b:01:6f:67:fd:30:7e:f7:
a4:72:99:1f:7e:a4:fe:bd:08:c2:2b:6e:4d:de:94:2e:e6:c2:
ec:8e:4b:cd:2b:49:68:1f:20:dc:06:1b:b7:c0:33:c7:32:2f:
68:95:40:de:db:5f:74:49:5a:e5:1b:da:87:eb:46:6e:e5:9d:
4e:55:a1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:32 2025 by rpki-client