Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
File: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft (raw, json)
Hash identifier: RlNGh6cNIsaNgR8Hac51/YnNBfamFSMcxIHkgzXVl9w=
Subject key identifier: D0:F0:5A:9E:08:9E:8A:CC:02:9C:6A:65:19:57:C0:38:08:67:90:E4
Authority key identifier: 7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
Certificate issuer: /CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Certificate serial: 01968B4AC3B2B04971820907891E781FA2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
Manifest number: 0216
Signing time: Thu 01 May 2025 10:00:54 +0000
Manifest this update: Thu 01 May 2025 10:00:54 +0000
Manifest next update: Fri 02 May 2025 10:00:54 +0000
Files and hashes: 1: ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl (hash: ZaiKiWI0OaSjTn9mmrmVcXkFKxEkq2ImJfL7IVBnJGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:c3:b2:b0:49:71:82:09:07:89:1e:78:1f:a2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a46ca310fce7e3d42c62f3771e2b8660298ef00
Validity
Not Before: May 1 10:00:54 2025 GMT
Not After : May 2 10:00:54 2025 GMT
Subject: CN=d0f05a9e089e8acc029c6a651957c038086790e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:16:af:69:95:d7:47:32:6a:f2:1a:89:10:
8a:68:c4:79:59:37:9e:86:70:68:2c:ce:e2:78:50:
ea:59:90:9a:69:6c:2b:d4:63:1f:fc:90:1f:5e:55:
32:3d:4f:aa:80:a9:88:83:95:97:f2:41:65:e1:58:
21:8f:f7:a4:0e:f1:38:ed:02:22:b4:f9:07:4c:16:
45:29:1f:86:ca:fa:7c:6c:fc:70:be:e1:ba:85:95:
cc:47:70:70:b9:25:4d:07:45:33:49:7a:ed:bc:47:
61:f7:3a:30:78:84:ea:7b:80:db:02:dc:09:ca:52:
7e:85:2e:a8:d1:af:49:aa:d7:49:ec:1b:29:28:62:
79:64:c0:dc:74:3e:28:f4:c5:a2:4d:75:1f:7d:f2:
7d:1f:dd:4b:d9:f0:2e:3c:22:84:f6:ad:eb:dd:a4:
4c:f4:b7:dd:ab:eb:c6:5c:e4:75:70:29:66:b2:34:
94:55:7d:44:19:53:3a:d4:2f:4f:80:91:40:88:e5:
6b:42:5e:b6:26:46:a5:9c:b8:fe:aa:ca:e1:39:5c:
8e:f8:26:62:92:41:5d:ac:65:62:b4:22:7e:a6:09:
f6:c7:b7:6a:fa:a4:f8:a9:23:b8:73:1a:b0:5c:c6:
a9:05:75:15:3d:11:1a:91:6a:78:15:c4:0a:04:43:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:5A:9E:08:9E:8A:CC:02:9C:6A:65:19:57:C0:38:08:67:90:E4
X509v3 Authority Key Identifier:
keyid:7A:46:CA:31:0F:CE:7E:3D:42:C6:2F:37:71:E2:B8:66:02:98:EF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7960d-79bb-4408-a85d-ac47715d15aa/1/ekbKMQ_Ofj1Cxi83ceK4ZgKY7wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ca:15:f1:a4:6c:c2:1d:d9:3c:b6:20:20:27:35:c9:52:64:
a5:af:a1:aa:6e:f8:41:e8:cf:73:80:9d:c6:39:b9:88:a9:65:
38:d2:66:d5:71:13:ce:51:eb:29:3f:4e:72:d7:dc:2d:5f:c4:
16:7e:53:cb:e7:4a:e9:06:e5:ab:26:95:22:9b:6e:7f:eb:24:
29:8a:96:35:07:db:69:f4:d1:2a:b3:ac:ac:62:25:58:37:5f:
70:c6:57:3b:8d:1d:cf:2b:5f:08:87:a3:b5:0f:4c:4d:f1:64:
0e:9d:d9:f4:c6:e9:ba:0a:2e:53:0f:e2:6d:5d:10:67:90:31:
0a:1c:5b:13:9f:73:54:c9:33:34:12:8d:44:5c:68:fa:27:35:
27:cd:20:f7:2f:c9:84:3f:c0:58:01:02:92:a7:44:51:58:c1:
d7:09:3b:71:ef:63:bb:a6:e8:b6:12:99:94:95:8c:1f:90:2b:
6c:d8:0c:3f:fd:51:d3:13:ba:31:1a:ff:8c:9a:f3:32:e4:e1:
26:60:ad:3b:e7:09:09:9b:23:80:d4:12:16:aa:d0:ad:d0:2c:
19:b0:0e:bb:5c:fa:4d:49:cb:be:75:e3:54:54:80:1c:0f:8d:
78:db:68:4e:cd:b9:11:f1:b6:fa:3f:38:8a:f9:bb:d5:76:8a:
1b:ac:33:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:28:00 2025 by rpki-client