Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
File: ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft (raw, json)
Hash identifier: fYjtJcCgZjCauglp/BFai9BVKnwZSBkqy0UpiwlJCHU=
Subject key identifier: 88:D6:41:F2:DF:81:1B:A3:F2:E9:09:83:33:3C:D4:80:9D:07:4B:3F
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial: 01967BA09C315EDA9B604FF07714BFDD243B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
Manifest number: 0AB5
Signing time: Mon 28 Apr 2025 09:00:45 +0000
Manifest this update: Mon 28 Apr 2025 09:00:45 +0000
Manifest next update: Tue 29 Apr 2025 09:00:45 +0000
Files and hashes: 1: ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl (hash: 6nLcOZSX0rataeDKTA/atRYoJZMFVgcgUObwGqbyQF0=)
2: qVppuHbTn9DMOoC7WIpn_md_R6o.roa (hash: gTYaxERGDbyCNzsbpsusObI12oPDpaR995HLMG2pUvc=)
3: zPHnCBVUs92hfFEc7nhs1RWC7pA.roa (hash: DNCZUIotstuuxpKQuNHdweWIP6EDyIOTVHCxU5Ttn/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:9c:31:5e:da:9b:60:4f:f0:77:14:bf:dd:24:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Validity
Not Before: Apr 28 09:00:45 2025 GMT
Not After : Apr 29 09:00:45 2025 GMT
Subject: CN=88d641f2df811ba3f2e90983333cd4809d074b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:6b:76:f2:89:ea:c9:6e:53:b7:d0:61:d8:
fd:9a:f8:f1:63:c9:66:e7:21:49:71:6c:c6:10:ec:
56:70:70:f6:86:34:19:29:9b:ae:78:e6:6a:f2:26:
6a:97:de:3a:f9:f5:63:c1:0f:2b:fd:61:41:42:f2:
0b:36:12:07:e9:66:4c:41:35:9f:21:85:79:2b:cb:
79:d7:75:de:89:ec:4a:51:28:dc:8b:21:f2:8f:f7:
0b:eb:cb:05:c1:5a:28:93:f8:b7:2b:b7:eb:c5:a6:
70:50:a8:dd:6c:74:c1:75:13:98:54:45:59:04:42:
fe:f6:e8:26:ea:21:01:50:1e:26:61:cf:91:36:e8:
3b:3b:33:22:aa:4c:12:94:7d:29:0a:bb:74:55:6f:
74:da:cc:7d:72:d0:57:4e:17:4b:fa:47:14:46:72:
6e:e0:5f:44:73:2a:fc:d3:80:6d:93:94:43:7c:aa:
21:d0:4c:3a:13:06:18:8c:10:8e:57:2a:4f:a5:15:
61:16:47:70:69:8f:34:6a:c0:5b:11:9f:62:07:1e:
ce:f8:97:6d:c1:84:23:d6:86:39:c0:fd:61:19:8d:
8c:6b:05:80:27:ab:a2:40:29:73:c2:44:d9:b7:12:
cf:e6:ec:5e:c5:6d:bb:67:0d:ae:2f:ee:6b:9c:61:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D6:41:F2:DF:81:1B:A3:F2:E9:09:83:33:3C:D4:80:9D:07:4B:3F
X509v3 Authority Key Identifier:
keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fb:96:cf:7e:75:4b:92:85:fa:eb:0e:de:30:b0:7c:8b:99:
bf:8b:da:9d:33:c0:7c:b4:c2:1b:ea:de:f5:eb:c2:d3:54:35:
b9:0f:07:af:30:b0:b3:19:a6:05:62:47:19:46:b2:e3:81:80:
85:75:4d:5f:ae:75:50:3d:fd:93:1e:43:54:f8:10:53:fe:7a:
8c:e3:fb:04:e5:a3:57:57:50:e6:f5:69:3a:94:9c:ed:f5:d4:
1f:1d:76:1f:e1:7f:bc:98:c5:f4:f2:f1:17:cd:a6:1c:8b:91:
c8:c4:3c:1b:f1:53:5e:55:86:17:91:9a:0c:4a:ef:01:9b:cb:
fe:07:78:14:31:21:84:71:35:c9:b6:f4:58:d5:6b:81:15:a1:
df:aa:ef:72:33:3f:46:ee:6e:7b:06:53:37:1d:24:2f:2c:e4:
cc:f0:65:c4:b6:52:de:0e:6b:63:45:cc:6d:4a:5c:9f:6f:cb:
7b:89:e5:0f:fd:64:dc:96:99:57:92:e1:15:c5:b3:e2:fd:22:
46:90:9a:7f:82:7b:80:94:07:68:2b:b6:a4:9a:ae:0d:93:4d:
53:f8:8e:b8:3b:7f:20:68:e2:fa:2d:ef:3d:e5:6c:46:2c:ac:
65:bf:2b:10:4d:5c:eb:f5:f0:61:f2:68:d7:94:3e:17:16:ed:
98:c7:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:29:47 2025 by rpki-client