Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
File: egtky28YoRQXQjEFCwF5kxteSG0.mft (raw, json)
Hash identifier: uUiTn8gXmvv6EkCptpRVyCthqAjxz5l6YysUY1ERNFY=
Subject key identifier: 56:73:C1:A0:29:D0:D5:D8:83:8F:DF:59:F9:FD:81:F4:7D:45:BE:F2
Authority key identifier: 7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
Certificate issuer: /CN=7a0b64cb6f18a114174231050b0179931b5e486d
Certificate serial: 0196873674BE70F25B768F9825D68A0B172A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
Manifest number: 0225
Signing time: Wed 30 Apr 2025 15:00:14 +0000
Manifest this update: Wed 30 Apr 2025 15:00:14 +0000
Manifest next update: Thu 01 May 2025 15:00:14 +0000
Files and hashes: 1: cChdW9IKygfKR2rAFYsXhx5RqmU.roa (hash: TyxqseiqVgQ1lk5s+kcYQAHiXGFHWxgFXhhbbIVGfj4=)
2: egtky28YoRQXQjEFCwF5kxteSG0.crl (hash: yipaOy+Wxq5px4Jm5O7hrJl51Mpp41g1/XNoHBHcdlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:74:be:70:f2:5b:76:8f:98:25:d6:8a:0b:17:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0b64cb6f18a114174231050b0179931b5e486d
Validity
Not Before: Apr 30 15:00:14 2025 GMT
Not After : May 1 15:00:14 2025 GMT
Subject: CN=5673c1a029d0d5d8838fdf59f9fd81f47d45bef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:94:59:2b:8f:55:6b:a6:90:3d:5f:a4:66:
41:1e:94:2b:de:33:96:80:56:8a:00:6f:17:48:4a:
f6:a4:aa:91:c8:4d:74:75:f8:d3:01:3e:d9:f8:72:
3f:48:70:67:71:6c:91:89:7a:ee:57:46:b2:2e:39:
59:c0:e8:6f:a4:b2:e9:e9:84:3a:e3:17:e6:12:f0:
b0:cc:c1:55:9e:e4:7c:70:c9:80:e6:00:b5:73:44:
47:57:26:db:26:dd:af:c1:45:56:50:d6:c5:f2:1d:
9d:65:fe:ca:40:b6:c3:43:87:2d:8c:01:77:f8:9e:
d7:51:ac:04:fe:42:b5:49:9e:5f:ee:de:99:c0:d9:
73:bc:a4:36:5b:f1:3e:c8:af:57:af:94:eb:b3:b1:
af:c3:9d:01:93:cb:90:1a:40:e2:37:b5:ea:2c:85:
07:94:19:63:7b:96:78:2c:04:5d:90:d6:5d:30:35:
8b:e8:34:6b:ff:c6:0b:b8:0a:1e:08:da:bd:59:55:
23:0a:79:d6:37:90:c0:40:08:80:3b:5c:a1:a9:d9:
87:ce:e0:e6:06:0b:7d:a4:01:20:72:03:67:2f:0e:
fd:22:0b:5f:e8:a9:d2:1e:22:5b:c5:06:e3:a5:ae:
ad:04:48:2e:25:7c:06:fe:31:97:83:1f:5f:c7:95:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:73:C1:A0:29:D0:D5:D8:83:8F:DF:59:F9:FD:81:F4:7D:45:BE:F2
X509v3 Authority Key Identifier:
keyid:7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6e:3d:f3:39:cd:68:a6:9c:51:43:28:b2:23:4c:ed:d9:71:
3d:19:a5:8e:39:d8:38:70:eb:1e:df:28:10:6e:38:09:3d:62:
c5:ec:a1:f2:28:4c:fc:d0:84:39:53:01:48:7d:51:d0:d4:67:
20:51:00:02:2b:dd:eb:39:f6:e9:4b:63:f8:98:3b:89:ac:0a:
d1:18:ed:d3:7f:53:53:e8:77:46:23:f5:28:d4:54:d3:54:63:
e5:92:15:c9:a0:d5:c9:98:1a:4f:bf:fa:f3:b5:b0:5e:8b:79:
79:66:37:36:ea:75:99:91:e8:bb:59:2b:29:a8:88:38:75:e1:
08:ba:d8:7d:d9:7b:e0:33:77:23:2b:c4:9e:f0:d7:41:7f:b2:
53:d8:f9:ba:73:b3:2d:5c:6a:ba:7b:61:b6:dc:64:21:73:49:
7d:44:ab:a6:8a:06:99:9d:e6:f5:04:b3:8f:71:4b:b6:de:36:
d5:cd:2b:e8:ec:03:dd:87:03:3d:93:d9:45:d1:11:c4:64:93:
61:3e:78:e3:3f:9b:52:57:c7:91:6b:7d:75:8d:00:7e:41:f7:
94:d0:ae:01:86:46:74:c1:7a:a3:18:c7:4f:29:3d:e5:6d:df:
cd:b6:07:fa:8f:5d:5f:db:e5:14:50:31:d8:75:a8:bb:3d:a7:
15:6a:e8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:10 2025 by rpki-client