Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: YX/WRZjXnwfBWfAGd10OQXqcfB4xYB8gZ8q0M04YCW4=
Subject key identifier: AC:AD:7F:BC:28:0A:46:47:3D:43:86:06:78:AF:C3:85:34:2D:3C:A1
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 01968359F3006593650735CA0C30CA1254B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 0FF1
Signing time: Tue 29 Apr 2025 21:00:32 +0000
Manifest this update: Tue 29 Apr 2025 21:00:32 +0000
Manifest next update: Wed 30 Apr 2025 21:00:32 +0000
Files and hashes: 1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: Wc3yfqkCZ5EQ6qOJucpBLbly3DLmS1ZO7fbLxfi103A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:f3:00:65:93:65:07:35:ca:0c:30:ca:12:54:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Apr 29 21:00:32 2025 GMT
Not After : Apr 30 21:00:32 2025 GMT
Subject: CN=acad7fbc280a46473d43860678afc385342d3ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:12:f4:3c:ef:51:e4:97:3e:23:84:1c:1d:
1e:8d:42:d4:2d:0b:91:8c:d5:c4:8d:8c:70:d8:49:
20:68:89:11:cf:cd:e0:6a:87:47:32:42:7b:0f:ca:
c8:97:95:90:dd:b9:1f:45:50:09:5b:37:63:f9:e0:
34:4c:c3:2d:15:c2:93:97:3e:75:85:46:33:3b:9e:
f3:33:fd:18:55:1d:8a:26:b2:4c:41:74:2c:6c:7d:
d3:30:c5:8b:3c:68:50:d5:19:ae:9b:9f:1e:04:d9:
2c:a6:c2:b0:f0:24:16:99:8a:cb:c0:c5:5f:f7:a4:
a7:c7:6b:a1:95:e7:b4:f4:36:d3:1a:de:54:f9:80:
0e:41:7f:41:86:6d:d3:43:3d:66:bf:69:d3:c5:b4:
05:4e:c7:d0:d6:5e:a3:de:f3:9e:e1:2d:73:a9:fe:
37:d0:4c:a3:48:7d:28:b2:66:dd:61:f6:29:c9:35:
4b:c1:8e:a3:f4:b5:2c:d9:ee:76:0e:81:9d:b0:43:
c4:f2:3b:ef:9b:ae:3b:42:e4:5a:7a:52:ed:c2:2e:
f9:15:73:dc:ac:50:82:5e:6a:1b:cb:43:dc:4a:cb:
c4:08:64:76:1b:a1:2e:73:1e:55:92:9d:d1:03:a0:
81:11:3a:5e:0f:a7:4e:f5:73:ca:a4:e2:05:0f:0c:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:7F:BC:28:0A:46:47:3D:43:86:06:78:AF:C3:85:34:2D:3C:A1
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:92:7c:43:ba:fd:23:d8:10:97:ba:35:d9:40:50:43:5e:d0:
0c:7a:22:a9:89:ec:16:6d:aa:57:44:b9:65:ec:54:84:cf:c1:
b0:38:ec:1c:b1:93:b8:cc:e3:e8:34:23:9e:8c:cb:d7:a9:b2:
a2:e8:55:4c:78:c8:78:90:22:8c:25:86:13:43:76:3a:b1:e1:
d8:7c:ab:b3:05:40:20:7f:5e:d1:58:6b:bf:7c:4a:6f:12:43:
bb:c0:a7:52:f4:c5:47:84:24:eb:91:11:0a:14:0b:56:a7:f1:
82:6c:e0:f3:3e:b1:07:3a:d3:7e:27:f7:2d:88:31:45:b2:b2:
18:7c:48:d0:85:fd:03:cc:d5:ab:64:7c:c3:1f:49:4b:84:ae:
d1:79:d0:27:5e:78:e9:58:ec:26:c8:f8:a9:c2:7f:7e:8b:b1:
ad:90:55:5a:a9:e4:96:0d:c2:dc:46:5a:4f:88:4f:b2:2e:c0:
74:44:72:cd:0b:45:b5:2e:da:ec:50:7b:cc:b6:43:74:69:80:
9f:96:e5:87:e8:df:54:35:34:22:1d:08:82:75:f8:25:72:d8:
5b:de:ec:2f:10:13:8f:85:c9:7e:6b:66:2c:50:64:71:ab:03:
85:23:06:35:57:40:19:9c:da:cf:bf:cc:80:95:63:64:d5:cb:
31:bf:58:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:21:16 2025 by rpki-client