Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
File: EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json)
Hash identifier: Y1yDNnZLi1rQAJzCnjP0rEq0js409vh+nmfJ6CojiBY=
Subject key identifier: 3F:7C:9D:C5:35:8B:E1:CB:93:AF:F3:D3:A2:31:F7:26:0A:85:29:7F
Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
Certificate issuer: /CN=11a823c64271f796946a4682596e732835cc4ec8
Certificate serial: 019681A346F8F8BE59AB0178744DB274C0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
Manifest number: 0BBC
Signing time: Tue 29 Apr 2025 13:01:23 +0000
Manifest this update: Tue 29 Apr 2025 13:01:23 +0000
Manifest next update: Wed 30 Apr 2025 13:01:23 +0000
Files and hashes: 1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: 2VEO6uGy67wZ74iYs46Ivf9RJwCvURcj9I8x73HoHbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:46:f8:f8:be:59:ab:01:78:74:4d:b2:74:c0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8
Validity
Not Before: Apr 29 13:01:23 2025 GMT
Not After : Apr 30 13:01:23 2025 GMT
Subject: CN=3f7c9dc5358be1cb93aff3d3a231f7260a85297f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:04:3c:9b:76:bf:d0:72:8d:d1:e5:45:3a:
fe:3b:39:c2:77:1f:93:55:0c:47:a8:b4:31:ef:9e:
6a:40:08:2c:b4:3e:52:0e:21:a2:3d:83:0c:a8:12:
eb:a3:5c:f3:24:a4:22:52:2d:f1:2a:73:30:1e:c8:
a5:1e:fe:d5:35:f0:88:80:63:dd:00:5d:75:05:ee:
31:44:58:f2:f9:41:ca:ff:50:b2:84:97:09:67:79:
de:f0:9c:68:ee:c8:5b:c2:39:1a:bb:38:32:e9:d3:
91:7e:7c:ed:83:db:8a:2c:a4:51:f7:05:5e:e9:11:
c5:5c:3a:ee:28:b3:39:b7:da:d6:4e:ce:9d:96:b3:
fe:90:0e:96:2a:f9:07:d5:25:ca:66:a8:f9:b4:bf:
a7:79:49:0c:ba:43:05:64:bd:21:fd:ac:c1:1c:4b:
96:a4:dd:96:fa:00:fc:ec:49:3f:49:ad:91:60:55:
de:63:b5:03:8e:41:df:71:7d:fe:0d:4a:80:4f:44:
80:e8:c5:9c:ff:db:32:f7:08:2d:d2:e1:e1:25:f4:
2d:8f:d1:2f:42:06:f1:05:7e:db:bf:7c:d6:8d:b3:
76:45:a3:d9:24:b8:4e:04:62:d3:b3:8f:d4:74:fe:
4b:0d:ab:5f:de:48:f4:76:50:97:7d:78:79:d0:2a:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7C:9D:C5:35:8B:E1:CB:93:AF:F3:D3:A2:31:F7:26:0A:85:29:7F
X509v3 Authority Key Identifier:
keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e8:af:7a:b2:27:e5:53:3d:79:2d:33:e1:a0:1b:42:50:82:
62:ff:d7:f1:07:1c:5d:01:73:a1:95:6e:b8:c7:7c:8f:b4:da:
c0:cd:75:0a:a6:98:97:a5:b6:d5:45:50:4b:3a:4c:d9:2e:67:
7f:81:35:e1:82:9f:db:0c:df:30:41:b7:a4:34:12:f4:69:ea:
24:2f:0e:67:ab:5e:a1:45:8a:76:a2:76:d2:9d:a2:ac:f2:48:
d4:47:a2:74:4e:fb:f5:df:b4:bb:5d:1e:eb:d2:74:e3:91:f5:
ea:19:56:62:9b:56:8d:12:24:25:33:15:36:0d:f6:ad:6b:a3:
21:e9:b4:7f:2b:02:df:40:bf:0f:80:ce:22:6b:09:6c:eb:0e:
9a:4e:18:c2:fe:a5:a2:c3:92:30:35:42:aa:42:45:48:8b:5f:
f9:13:95:c9:7f:ea:be:c5:7d:0f:7b:da:da:cd:a0:d6:0b:aa:
e7:96:57:49:39:56:45:33:5d:03:f9:c2:2a:9c:bf:dc:46:ee:
1c:4b:41:45:df:a5:f2:f7:b8:37:76:6e:79:01:01:af:b3:4d:
11:0f:11:e0:87:f2:a3:a2:e3:fb:be:c2:88:08:a3:87:aa:b0:
f3:3b:88:28:7b:46:27:c5:19:f9:30:95:38:82:75:b4:d7:40:
50:9e:fd:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBo0b4+L5ZqwF4dE2ydMCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTgyM2M2NDI3MWY3OTY5NDZhNDY4MjU5NmU3MzI4MzVj
YzRlYzgwHhcNMjUwNDI5MTMwMTIzWhcNMjUwNDMwMTMwMTIzWjAzMTEwLwYDVQQD
EygzZjdjOWRjNTM1OGJlMWNiOTNhZmYzZDNhMjMxZjcyNjBhODUyOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAIEPJt2v9ByjdHlRTr+OznCdx+T
VQxHqLQx755qQAgstD5SDiGiPYMMqBLro1zzJKQiUi3xKnMwHsilHv7VNfCIgGPd
AF11Be4xRFjy+UHK/1CyhJcJZ3ne8Jxo7shbwjkauzgy6dORfnztg9uKLKRR9wVe
6RHFXDruKLM5t9rWTs6dlrP+kA6WKvkH1SXKZqj5tL+neUkMukMFZL0h/azBHEuW
pN2W+gD87Ek/Sa2RYFXeY7UDjkHfcX3+DUqAT0SA6MWc/9sy9wgt0uHhJfQtj9Ev
QgbxBX7bv3zWjbN2RaPZJLhOBGLTs4/UdP5LDatf3kj0dlCXfXh50CpwFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD98ncU1i+HLk6/z06Ix9yYKhSl/MB8GA1UdIwQY
MBaAFBGoI8ZCcfeWlGpGgllucyg1zE7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yM2RkZGMtYWQ0YS00ZTMyLTk5YzAt
MjRmYjI0YjVhZTViLzEvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yM2RkZGMtYWQ0YS00ZTMyLTk5YzAtMjRmYjI0YjVhZTVi
LzEvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeiverIn
5VM9eS0z4aAbQlCCYv/X8QccXQFzoZVuuMd8j7TawM11CqaYl6W21UVQSzpM2S5n
f4E14YKf2wzfMEG3pDQS9GnqJC8OZ6teoUWKdqJ20p2irPJI1EeidE779d+0u10e
69J045H16hlWYptWjRIkJTMVNg32rWujIem0fysC30C/D4DOImsJbOsOmk4Ywv6l
osOSMDVCqkJFSItf+ROVyX/qvsV9D3va2s2g1guq55ZXSTlWRTNdA/nCKpy/3Ebu
HEtBRd+l8ve4N3ZueQEBr7NNEQ8R4Ifyo6Lj+77CiAijh6qw8zuIKHtGJ8UZ+TCV
OIJ1tNdAUJ79kA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:49:54 2025 by rpki-client