Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File: EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier: hFQhinlnZdxw/zZpQXirfwa+9c6c3QHHfV5CgjYWlsg=
Subject key identifier: 17:3E:57:AD:6C:B7:2B:06:61:71:D3:8F:4B:10:77:7C:42:22:08:35
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer: /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial: 01967679C575E811FF676828D6E61E007BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 09:00:13 +0000
Manifest this update: Sun 27 Apr 2025 09:00:13 +0000
Manifest next update: Mon 28 Apr 2025 09:00:13 +0000
Files and hashes: 1: 2RYqLOOOCbthDUAcjKq8EsDLRUQ.roa (hash: Q1LOM4u7XAO8escJ6IGTLdV2wb9RNCfCJR9rh+j96Ys=)
2: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: qabkZk1nAYLgmEJGV4z8acPke1SrEsRWrUfQJdfR584=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:c5:75:e8:11:ff:67:68:28:d6:e6:1e:00:7b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Validity
Not Before: Apr 27 09:00:13 2025 GMT
Not After : Apr 28 09:00:13 2025 GMT
Subject: CN=173e57ad6cb72b066171d38f4b10777c42220835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:20:1c:e8:86:58:55:12:cb:60:cb:f6:9c:
f8:58:e1:66:56:3a:a1:7f:8e:dd:43:3d:a3:90:44:
10:13:aa:61:0d:ef:07:cc:5e:17:c4:d2:71:45:f6:
0c:8e:65:11:c8:26:31:41:59:cb:19:5c:cb:a4:01:
57:03:ce:7a:a9:f2:94:29:d8:b4:4d:72:9a:e3:6a:
18:a9:bc:2b:09:36:45:25:50:ad:77:43:e9:42:fb:
06:2a:42:3d:1c:91:05:9f:d7:6b:57:aa:58:2d:81:
70:b5:5c:05:59:07:9d:7c:15:fa:2b:06:8c:26:db:
d1:1d:c2:bd:88:f5:b4:59:07:ee:05:e4:26:c9:dc:
5f:17:e0:11:f9:47:70:9d:3e:29:77:10:27:c5:e6:
b9:1d:55:d0:c9:d4:a6:7f:66:5c:ec:a8:94:84:1f:
47:88:ac:36:3d:fa:35:ba:09:9e:9e:d3:de:e5:ea:
6f:7a:f3:48:c0:79:3e:4f:e6:6e:40:5d:3e:66:34:
88:3b:6a:7e:70:a6:ed:87:f2:b9:46:57:d7:98:ca:
05:ea:f2:64:b4:a5:94:b9:c4:07:81:10:a3:b9:85:
e0:56:a7:ee:b0:31:05:e2:b6:93:f9:04:72:8b:ee:
2a:ac:dc:d3:44:a4:f4:ac:f5:3a:2f:a9:2c:a0:55:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3E:57:AD:6C:B7:2B:06:61:71:D3:8F:4B:10:77:7C:42:22:08:35
X509v3 Authority Key Identifier:
keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c2:1f:34:3e:8a:95:5f:a3:23:9f:5f:c1:d8:8c:ab:36:23:
57:50:e2:d1:c6:0a:4e:6e:4c:26:ec:77:19:99:06:00:02:9d:
78:da:bd:21:48:2b:3d:bd:74:81:43:b3:6c:e8:6f:b5:76:62:
6f:c1:1e:7c:45:54:d9:92:57:fd:a1:6b:3b:b3:b9:44:6f:61:
6f:b7:7e:ef:64:64:df:96:d3:7d:4c:3a:2a:28:db:1a:17:e6:
5f:63:a6:3a:9b:ef:26:ca:95:f0:73:bf:ee:d7:bf:3e:58:5b:
9c:79:b4:15:f7:a6:a2:88:88:3b:c2:fe:78:7c:2d:0c:a9:3e:
c9:7f:3f:3d:74:79:89:c7:2c:65:91:96:46:e5:c6:0c:ee:9a:
1b:aa:70:62:0d:e4:24:88:7a:43:22:33:d6:38:d3:73:2b:83:
6a:38:c3:30:fc:de:b7:b5:e5:bc:76:de:11:22:aa:fb:33:97:
b7:3e:af:c2:33:b5:cc:cc:86:73:9d:3c:38:6c:9c:9d:bb:58:
ea:61:41:e9:3d:8b:a8:c5:3a:a9:30:77:73:e3:93:f1:2a:bc:
8d:eb:47:2e:1f:aa:4c:cc:ba:c6:23:03:e6:6c:45:a7:65:42:
6d:28:4c:2c:2c:de:8a:44:6b:74:74:87:c0:8e:8e:e0:79:af:
45:b7:10:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:49:16 2025 by rpki-client