Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
File: ewGNKlH-8tdsYmAFVsZtV8t-knA.mft (raw, json)
Hash identifier: hFWn7pTetEEOe75qUJ/RM4obXjQqlzGhSvsVoCm/h4o=
Subject key identifier: CD:C9:81:56:3F:DB:4D:CA:A5:CA:8F:72:03:C4:6C:0B:48:D9:96:24
Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Certificate serial: 0196790D394BCEA869357BFD1004957B9798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
Manifest number: 0531
Signing time: Sun 27 Apr 2025 21:00:31 +0000
Manifest this update: Sun 27 Apr 2025 21:00:31 +0000
Manifest next update: Mon 28 Apr 2025 21:00:31 +0000
Files and hashes: 1: ewGNKlH-8tdsYmAFVsZtV8t-knA.crl (hash: FMlN6PDdvwYg/iy3tjynIsnvhKi65HDflUzbwBAb0ks=)
2: rWkvauBEMYRnIGnTGjbge3-FesI.roa (hash: NZqLavHilBq1RJJKbmTkXGJJieLsNjrQomu+4A2D7i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:39:4b:ce:a8:69:35:7b:fd:10:04:95:7b:97:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Validity
Not Before: Apr 27 21:00:31 2025 GMT
Not After : Apr 28 21:00:31 2025 GMT
Subject: CN=cdc981563fdb4dcaa5ca8f7203c46c0b48d99624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:7e:bb:95:23:64:a5:32:c1:af:19:1c:b9:
c2:44:b4:6b:23:51:b8:76:a6:4a:20:3f:d8:6e:4e:
17:eb:d7:9d:86:68:0f:d0:d5:37:f9:a7:93:e9:c5:
9b:1e:91:f7:41:2b:ab:be:8d:30:ed:ac:d3:b4:1e:
90:43:05:bc:69:9c:33:c7:8c:ed:c2:2d:cc:37:9f:
aa:75:14:6d:73:75:3c:f1:6d:4b:e8:9c:c0:7a:42:
59:39:c5:32:80:3c:93:ec:df:51:a5:56:bf:9f:f0:
f3:08:75:4b:0b:83:94:b3:d3:cd:f7:d8:b5:68:b0:
83:41:9e:21:59:6a:ad:9a:24:f9:d4:a9:81:2b:ca:
a7:ad:d8:d2:9c:ec:84:5f:85:c5:73:43:38:c8:8e:
0a:b2:ac:47:71:a2:54:c9:ff:63:ac:cd:91:75:c1:
73:46:3b:1e:b2:7d:b4:c0:9c:09:73:2e:7b:88:dc:
c4:87:cd:29:dd:11:c5:bb:59:3b:20:cf:d6:8c:ed:
5c:36:f2:32:f5:05:1d:b6:27:03:ff:78:50:88:45:
47:c7:8d:2c:6c:07:1f:0e:f1:4a:dd:7c:52:d3:36:
da:e3:a5:ea:64:68:51:c4:f9:af:6f:e9:cc:44:8a:
c8:d7:2a:a3:78:10:b8:8b:98:c2:11:c1:c3:83:d2:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C9:81:56:3F:DB:4D:CA:A5:CA:8F:72:03:C4:6C:0B:48:D9:96:24
X509v3 Authority Key Identifier:
keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:26:d8:05:a2:05:42:2c:e0:42:6b:86:35:ec:7e:8c:3d:17:
4a:2e:ac:3e:32:f3:1d:4b:55:51:c9:48:4d:08:55:7e:c0:9c:
e7:70:6f:6d:63:28:42:97:0d:9a:92:f8:b4:ea:f6:2b:55:fa:
ce:66:0f:c1:78:b3:ac:25:2c:81:cc:96:6c:12:a4:87:92:1a:
27:cd:a5:e9:24:37:f5:ac:cd:09:14:80:94:70:ef:22:59:de:
41:99:35:88:c0:0e:34:22:8e:84:c6:01:40:80:dd:68:8d:c5:
dd:7e:80:bf:e9:b4:ef:f2:d0:f1:63:27:f6:c2:45:33:7d:8f:
19:54:a1:fc:77:3d:bf:ba:45:a7:a9:8a:ef:92:e3:49:e1:37:
91:fe:47:e7:0d:bf:0b:73:93:18:0e:a8:75:57:7e:2d:d2:36:
27:6e:dc:e2:99:fb:dd:e8:dd:60:2d:03:ef:da:8f:6f:ab:db:
4f:92:d9:15:7e:f2:44:2d:59:31:5e:62:c0:58:7d:01:05:d3:
8f:ee:c7:a6:49:13:23:e2:22:78:df:5e:76:b9:6f:04:6e:02:
72:f7:ae:ee:c1:6d:02:e3:b1:55:ea:49:2a:55:fd:22:ba:73:
5c:f2:50:b7:b0:bb:45:e5:0e:16:03:e3:a3:cd:80:6b:96:99:
36:45:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:09:07 2025 by rpki-client