Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
File: ECWK4MJsZaamlm8_fmmGM7kUNCY.mft (raw, json)
Hash identifier: prhz1sZFfpyKR7YTK3R9jBU3u4my8puGFAii3uxBpko=
Subject key identifier: 54:C5:FE:77:47:0A:C9:D6:ED:F5:6A:C1:7F:1D:5C:E1:FD:5A:A0:B8
Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
Certificate issuer: /CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Certificate serial: 0196764306737EE4CFE9CB945987365F12BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
Manifest number: 0192
Signing time: Sun 27 Apr 2025 08:00:26 +0000
Manifest this update: Sun 27 Apr 2025 08:00:26 +0000
Manifest next update: Mon 28 Apr 2025 08:00:26 +0000
Files and hashes: 1: ECWK4MJsZaamlm8_fmmGM7kUNCY.crl (hash: VfdXyZOl0FvAqJGTMD7N/4RQcqG4TwLWA+dK5K1TUrA=)
2: etVX6TJKFEJRufjvzOGQ6JSSL7w.roa (hash: 63VfWS1eguDOAS4kGZod2yjLHalgrK50WGTQVYmqUfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:06:73:7e:e4:cf:e9:cb:94:59:87:36:5f:12:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Validity
Not Before: Apr 27 08:00:26 2025 GMT
Not After : Apr 28 08:00:26 2025 GMT
Subject: CN=54c5fe77470ac9d6edf56ac17f1d5ce1fd5aa0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:ae:a5:42:77:3f:ba:a5:eb:7c:1f:9d:3a:
43:8a:cc:36:60:f2:ca:c0:e1:c4:61:c1:d6:f8:7b:
84:f5:d7:b7:df:8a:15:8a:29:76:42:46:b4:2e:b2:
00:5f:63:98:eb:78:4d:66:6f:94:7e:cd:cb:18:54:
2d:da:f6:f6:dc:e1:6d:c0:a4:0a:3c:83:c9:00:84:
b2:ba:4d:73:2e:a6:8c:ce:de:fb:3e:13:15:f6:32:
28:30:62:35:ab:35:75:f0:cc:f7:1e:b4:ab:f5:3c:
a9:50:54:c2:bc:68:93:00:3c:32:08:08:b2:9e:9f:
c2:d2:2b:6b:e8:6a:c0:3b:50:d8:ac:9b:b2:a1:29:
4c:95:81:4d:18:0c:c6:0d:d6:61:31:a3:b8:78:f3:
0c:16:db:52:13:bc:db:b0:ea:92:00:53:49:69:3c:
6c:b3:28:97:46:66:0d:0c:d9:a6:74:d8:07:eb:c4:
bc:c9:ef:6b:a7:4b:0b:9a:5e:bd:05:be:23:9c:e5:
3e:27:b6:29:99:99:12:31:0d:8b:bd:cf:e5:40:98:
28:69:26:db:95:8d:34:23:30:7c:ef:8f:4e:71:51:
84:72:db:00:35:02:5b:8c:ca:9b:d1:18:c4:77:8f:
26:44:3d:6f:d6:d5:57:e5:fb:cd:b6:24:77:a2:58:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C5:FE:77:47:0A:C9:D6:ED:F5:6A:C1:7F:1D:5C:E1:FD:5A:A0:B8
X509v3 Authority Key Identifier:
keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:05:d8:36:8d:98:b6:4d:ea:05:20:cb:26:20:03:5d:43:32:
e0:75:06:c0:21:de:7d:2c:a7:54:ec:cf:ca:28:9d:f6:74:59:
bf:aa:6b:09:f6:6a:e5:df:a6:bc:3a:f5:80:05:26:32:45:22:
fa:96:44:e4:73:8f:67:9d:ce:07:9b:5a:c8:ea:69:42:b9:91:
38:5f:2f:8c:42:b1:ed:12:eb:e3:28:f8:05:34:8d:0f:ef:c4:
76:e8:77:ff:c6:cd:ca:a7:a1:9a:41:30:35:06:b9:d3:8e:eb:
6d:68:ee:38:45:e3:5b:54:94:c2:f0:d5:86:d2:ea:37:1e:b3:
eb:65:f5:58:34:16:5b:35:dd:48:e2:db:50:5b:21:1e:24:16:
9b:b9:7f:b7:82:cf:f9:28:2f:a8:7c:e4:9c:f7:2b:da:6f:f4:
68:72:52:0d:70:bd:1d:2e:e4:8b:4d:19:f2:13:5a:8d:ee:0f:
59:fb:0e:ac:8f:50:18:36:86:54:cc:01:61:14:46:88:5b:d5:
25:08:64:36:d6:d6:5c:6f:83:1e:db:cb:eb:96:34:1d:82:30:
f4:20:0d:7b:01:ab:53:5c:7f:6b:69:58:01:c4:b8:bd:d7:fc:
da:c2:56:72:da:89:ce:93:82:ab:d8:a0:2d:f6:18:ec:e2:48:
66:bf:d5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:18:32 2025 by rpki-client