Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
File: ejiftI-wXUgfHyORlMU30Vs1cAk.mft (raw, json)
Hash identifier: zhxoG+Wo1MJalXXWLqwMbbw/KJM2XBShUNoy7jsTMJY=
Subject key identifier: B1:A0:3A:09:D1:49:E8:79:F6:18:20:F2:BE:FC:01:E0:24:7E:E6:91
Authority key identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
Certificate issuer: /CN=7a389fb48fb05d481f1f239194c537d15b357009
Certificate serial: 01967A8DC9FB0091F57700BC53367CA6CDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
Manifest number: 0BB4
Signing time: Mon 28 Apr 2025 04:00:34 +0000
Manifest this update: Mon 28 Apr 2025 04:00:34 +0000
Manifest next update: Tue 29 Apr 2025 04:00:34 +0000
Files and hashes: 1: ejiftI-wXUgfHyORlMU30Vs1cAk.crl (hash: ZDTwHALTT2585pWiAAfvjT+SiyLZhboFDuUjPUva/58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:c9:fb:00:91:f5:77:00:bc:53:36:7c:a6:cd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a389fb48fb05d481f1f239194c537d15b357009
Validity
Not Before: Apr 28 04:00:34 2025 GMT
Not After : Apr 29 04:00:34 2025 GMT
Subject: CN=b1a03a09d149e879f61820f2befc01e0247ee691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:99:ee:bd:23:fc:4f:0e:81:5b:ca:d4:ab:31:
79:c5:c0:31:12:c1:7d:04:5f:d1:62:5b:28:51:3c:
62:50:33:91:b7:00:fb:ed:28:9e:cd:1e:6b:4c:de:
98:8c:6d:2c:1b:7e:07:31:6f:42:7c:f8:39:f8:32:
8b:91:b5:77:a0:0c:2e:7d:cc:17:64:be:09:12:2d:
af:73:12:1c:b0:e8:8f:24:a7:ee:53:f2:fa:64:d6:
a0:51:78:fc:30:03:4b:96:9e:9a:34:ec:e1:31:59:
30:43:9f:12:a9:31:1b:f6:11:60:38:70:a0:70:2b:
61:11:94:c5:5a:c6:ec:fd:40:00:bc:85:86:91:c3:
a4:28:bc:a9:11:b9:c5:05:4e:82:47:a2:d6:40:fb:
b4:89:ff:fe:af:d6:33:4e:88:f2:a5:de:b0:7b:99:
91:f7:9e:4d:8b:89:72:69:59:13:b7:95:59:77:18:
40:9b:65:c6:58:e9:3f:1f:19:61:ad:b6:4a:bc:3b:
19:88:f6:de:cd:04:ab:46:25:9a:c0:cf:5e:af:22:
22:2a:56:12:7f:ed:be:81:da:3f:e1:33:e3:8d:ab:
36:06:0e:dc:48:68:44:7c:8c:cb:93:58:f3:62:6e:
04:b7:2e:95:5b:9a:cd:0e:2e:c1:0c:2b:fa:8b:27:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A0:3A:09:D1:49:E8:79:F6:18:20:F2:BE:FC:01:E0:24:7E:E6:91
X509v3 Authority Key Identifier:
keyid:7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0f:f1:63:cd:0e:de:71:ce:65:de:e5:8a:c2:89:42:aa:9c:
18:f8:2b:c5:4c:18:f2:52:e9:3a:fb:a7:d1:be:a1:60:c0:84:
1a:95:da:61:cd:dd:21:e3:67:56:65:ea:c9:9f:41:3b:75:c7:
f5:88:f7:ce:33:e9:d2:0d:e2:9d:5f:3a:63:f5:41:6e:bf:a8:
5b:f1:f4:29:1b:5c:5b:32:96:16:45:30:8b:3b:8c:95:c3:9a:
1b:30:e3:c5:19:77:4b:78:b1:07:31:70:b9:6e:ba:03:c2:96:
e0:00:b5:49:19:3c:f5:ac:b3:e4:94:d5:ca:61:f2:1a:fc:3a:
d7:80:ad:ec:0e:96:49:92:5b:ed:12:a2:9d:37:8d:fd:6f:bc:
d8:f2:83:88:0e:51:21:17:b5:24:a5:88:3a:2f:a2:ad:60:9d:
29:27:c2:f5:d7:ef:bc:37:ce:52:e4:80:27:09:37:a8:08:c4:
dd:af:d0:ba:3a:c1:a7:1f:4e:9b:21:df:76:7d:c9:96:a5:75:
c4:c5:77:02:b6:51:23:19:93:aa:aa:02:71:63:3f:dd:fb:a1:
92:55:71:96:7c:ab:5a:07:d8:b7:9c:9b:e7:0d:ae:cd:0b:48:
2a:02:80:a9:64:dd:f5:67:d8:8c:c1:36:72:cb:fb:df:7b:8c:
b2:5e:db:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:45:52 2025 by rpki-client