Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.mft
File: eteMr7NfX5az9s7OlwYVrVz_9xE.mft (raw, json)
Hash identifier: /7fVEElmsg51pJ359exU4+iUPw9lkwqkM43mOY3E8Gw=
Subject key identifier: EB:C5:D1:DF:14:3A:03:11:D7:46:41:46:F1:8D:FE:9B:CD:DC:48:2A
Authority key identifier: 7A:D7:8C:AF:B3:5F:5F:96:B3:F6:CE:CE:97:06:15:AD:5C:FF:F7:11
Certificate issuer: /CN=7ad78cafb35f5f96b3f6cece970615ad5cfff711
Certificate serial: 01968A3777981285E0EB0D6BFC095335CE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eteMr7NfX5az9s7OlwYVrVz_9xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.mft
Manifest number: 2C
Signing time: Thu 01 May 2025 05:00:12 +0000
Manifest this update: Thu 01 May 2025 05:00:12 +0000
Manifest next update: Fri 02 May 2025 05:00:12 +0000
Files and hashes: 1: eteMr7NfX5az9s7OlwYVrVz_9xE.crl (hash: JJZFHTdNOISb/0L7wVQlVtwLK4pmbIPC0mC01oIac1o=)
2: mjCXGX40P2ffcrN44boEpnJTaTc.roa (hash: LgLHJFwEHcRfiWC8m23QPb6Ya1PBtB3V5dXpILctiVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eteMr7NfX5az9s7OlwYVrVz_9xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:77:98:12:85:e0:eb:0d:6b:fc:09:53:35:ce:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad78cafb35f5f96b3f6cece970615ad5cfff711
Validity
Not Before: May 1 05:00:12 2025 GMT
Not After : May 2 05:00:12 2025 GMT
Subject: CN=ebc5d1df143a0311d7464146f18dfe9bcddc482a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6a:c6:37:5c:a0:71:97:1d:8b:7b:da:6a:48:
a8:bb:fc:4f:99:f4:ef:a9:2d:e2:1c:03:33:c6:83:
a7:95:ae:4a:0d:8a:3f:69:88:1c:b8:68:84:38:e3:
23:2b:b6:cb:5f:a5:49:a8:33:06:05:fc:72:49:61:
b1:ab:c6:c0:27:cd:89:dd:59:dd:20:ed:3c:49:9a:
7b:40:4a:98:b8:22:4f:ab:98:4c:da:4d:a8:3b:e5:
42:db:c7:ad:60:bd:81:43:99:52:4a:1b:01:25:41:
ab:6f:26:e1:bf:0f:72:63:4a:bd:6d:0a:ad:be:7c:
8a:32:ec:e0:7f:39:c1:b6:04:b4:14:6f:03:2f:da:
ec:32:5f:70:3c:67:5e:34:b9:f1:2b:fb:f9:f8:e2:
dc:eb:f1:b3:65:45:a7:11:65:39:aa:c5:25:2d:3c:
37:c0:c8:05:1c:80:00:f9:08:7e:97:d9:f5:e5:26:
3a:78:b6:1f:22:13:e9:b0:76:87:84:ba:d7:e9:fe:
ed:78:a3:5c:3b:f4:aa:7c:43:41:27:52:a7:fe:1f:
ff:ca:1d:56:e8:0d:1a:77:d0:b5:56:e0:a0:ef:79:
8d:6e:71:2d:aa:9d:32:3b:6c:c8:35:b5:54:0b:86:
d9:ac:fc:eb:19:86:39:6e:61:60:56:34:07:fa:6f:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:D1:DF:14:3A:03:11:D7:46:41:46:F1:8D:FE:9B:CD:DC:48:2A
X509v3 Authority Key Identifier:
keyid:7A:D7:8C:AF:B3:5F:5F:96:B3:F6:CE:CE:97:06:15:AD:5C:FF:F7:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eteMr7NfX5az9s7OlwYVrVz_9xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:2f:78:b4:1a:18:2c:e0:3b:8e:a2:6b:9d:ad:7f:73:b2:45:
e6:41:31:37:e7:58:12:61:a8:31:0b:96:c3:24:d7:06:9a:b7:
92:96:6d:06:5b:bd:1f:06:0e:a9:19:8c:21:68:4e:f4:d6:a2:
3e:d8:9e:61:7f:22:e9:70:43:ef:fd:74:ca:4a:91:65:84:85:
2a:99:c1:05:bb:8c:e9:a4:5b:1b:43:60:fb:4a:eb:e3:cf:24:
52:38:67:92:ce:64:26:4e:af:40:7e:43:d6:17:07:dd:e5:18:
ed:5c:b6:2d:f8:08:5f:5b:20:e0:97:72:89:3d:fd:2b:2c:5e:
27:72:4e:14:67:90:34:ab:78:bc:8e:40:64:c5:01:ec:39:f5:
bc:59:92:ac:67:23:24:fd:01:3e:24:88:b8:06:d7:ba:86:ba:
e6:67:12:b6:b3:d1:96:b0:e4:64:0f:fa:d5:7a:0a:19:86:8e:
e1:56:0b:ac:a9:27:e2:d3:9a:12:b4:ae:41:dc:32:da:bb:25:
b1:77:ab:96:d5:df:9d:1a:99:e4:9f:cf:fd:29:b5:19:dd:a5:
cf:0f:f0:e2:78:7b:84:36:02:88:8a:67:04:04:20:7e:42:0b:
50:0a:46:d6:6f:13:01:5a:3a:0b:64:5b:49:bc:cb:90:1a:21:
cd:d5:10:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:08:16 2025 by rpki-client