Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File: EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier: mZeyAda+Ct+rH8zWv1PUhhT5I0NPGLs929sNP5pvaFE=
Subject key identifier: 9A:A9:E3:DF:0A:03:B0:E6:72:5B:97:1B:60:66:9E:77:F3:1B:17:00
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial: 019672D4371B41621A8EF9BCC8D0965E3FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number: 0E0C
Signing time: Sat 26 Apr 2025 16:00:32 +0000
Manifest this update: Sat 26 Apr 2025 16:00:32 +0000
Manifest next update: Sun 27 Apr 2025 16:00:32 +0000
Files and hashes: 1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: eb1riaoP5Wx67U7IZWMpRm1OvTVV7xKdOiLsHo1hEGo=)
2: Jzm46CCydGnaow81u1_xNN5mK1k.roa (hash: 6dqJE3+wgexU/DPorZ1i735/Z7zxtOoeBz+MZoeVtcw=)
3: M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa (hash: ISb1VwFVgG+G0QkVMeOYR3KKNz/PbEusd5lSF/7EVsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:37:1b:41:62:1a:8e:f9:bc:c8:d0:96:5e:3f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
Validity
Not Before: Apr 26 16:00:32 2025 GMT
Not After : Apr 27 16:00:32 2025 GMT
Subject: CN=9aa9e3df0a03b0e6725b971b60669e77f31b1700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:44:e8:41:0b:2e:5b:92:02:66:80:3a:d0:
5a:80:ac:a3:75:9e:5b:fc:9a:8f:f4:74:22:d6:69:
b9:1f:53:11:61:a2:c9:58:1e:92:18:3b:3a:37:eb:
03:26:8c:04:b2:34:73:5f:31:3c:03:b6:e2:28:1d:
37:e5:87:9c:25:3d:bf:19:9b:d7:84:a0:32:6c:9c:
b6:67:66:0b:c8:cd:6b:62:8c:e8:20:ed:ab:d9:fd:
74:6e:8e:05:0c:6f:5d:a1:fc:24:b3:0d:b6:96:51:
1d:66:81:46:c2:c5:51:65:98:de:8e:52:43:5f:9e:
ee:3e:f7:5b:31:79:df:b3:69:e5:99:53:c5:6a:68:
30:17:c4:51:53:36:ff:9a:27:0f:d4:08:c5:4c:91:
1c:74:42:84:ac:65:7a:21:95:49:13:f9:91:e4:39:
d5:e3:eb:3c:4b:cc:35:db:a8:2b:d1:05:52:bb:70:
f0:3a:f4:65:af:6a:72:0b:48:03:3f:60:3f:ff:a8:
a6:55:f9:be:85:64:33:d1:d2:fe:49:25:e4:cd:70:
34:e5:3f:ab:56:7b:d1:e7:d1:93:7a:b0:a5:fb:54:
1c:be:09:42:68:68:f4:d0:9b:b6:e7:98:8a:6c:6d:
da:c7:9a:c0:cb:da:f8:64:be:d8:6f:2b:67:08:9f:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A9:E3:DF:0A:03:B0:E6:72:5B:97:1B:60:66:9E:77:F3:1B:17:00
X509v3 Authority Key Identifier:
keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e3:27:2c:73:98:09:cd:fc:5a:95:d4:c7:ce:e8:ed:fb:44:
21:6a:73:fe:e4:35:65:f8:87:f7:53:1a:ad:a2:e3:13:09:df:
a0:27:ee:ce:e6:6c:56:b2:a0:17:d2:ff:5b:48:d6:e1:c1:63:
8c:84:7c:83:53:3b:e0:d2:e4:56:18:a2:b6:53:da:a0:eb:c8:
87:a3:ed:65:b1:84:f6:85:10:b8:27:28:bd:bf:39:4f:9e:94:
be:36:d4:88:88:b2:bb:e6:75:3b:1f:46:fb:68:9c:23:a9:84:
d8:a5:1b:ea:26:b8:4e:42:90:d3:9f:48:ab:fb:6f:93:62:98:
80:eb:45:5f:a5:9c:fa:2a:5a:1e:ec:bb:a4:5d:7f:88:e4:d0:
ed:8b:e7:9e:3a:9b:d1:54:4f:69:f9:b9:76:e3:f8:e7:81:eb:
c9:f8:ac:99:b4:b7:fd:9e:e7:64:3c:a3:7d:29:ed:0e:50:1b:
31:1f:d9:a3:19:56:67:55:7c:4c:10:f6:59:f2:f0:8c:b8:14:
7a:1c:56:66:09:e0:d2:fb:cd:04:a2:24:58:a0:b0:4f:f4:fb:
15:c3:81:7a:dc:f2:9d:2f:0d:6d:7b:63:a8:08:24:7f:62:5b:
3b:f4:ca:be:58:9d:31:66:de:b6:90:a7:2e:52:e7:c9:79:a9:
ab:c5:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:00:22 2025 by rpki-client