Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
File: Ee_b1yf7W9U87GlXoptHwsNKg0w.mft (raw, json)
Hash identifier: QVRD8INLrA1iEVH+VWWsbsuFpB3/fHaw7hClQ307JSc=
Subject key identifier: BA:D3:86:3E:35:68:8B:AD:B6:21:8A:74:87:1D:B1:28:1F:5F:A1:6D
Authority key identifier: 11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
Certificate issuer: /CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Certificate serial: 0196741ED95926C399264B0B94301233CBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
Manifest number: 1511
Signing time: Sat 26 Apr 2025 22:01:40 +0000
Manifest this update: Sat 26 Apr 2025 22:01:40 +0000
Manifest next update: Sun 27 Apr 2025 22:01:40 +0000
Files and hashes: 1: Ee_b1yf7W9U87GlXoptHwsNKg0w.crl (hash: REjK37K7sNTWufRbb27Y260bOkMacx7sAKlxevqeVSo=)
2: ZYEY5YW1xGXFrB3GzZ6jTrBcf9w.roa (hash: pOwNfstFAL1zr5tNQSEDWIMsfqU4J9T9Io0xMgEThiM=)
3: lmg8TFGUlHLh94h8C2YmH1aKN7I.roa (hash: /G2RJ6kE/znQ/BtVoL2ygrSOBDDhTzMPkkZBmwvtXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:d9:59:26:c3:99:26:4b:0b:94:30:12:33:cb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Validity
Not Before: Apr 26 22:01:40 2025 GMT
Not After : Apr 27 22:01:40 2025 GMT
Subject: CN=bad3863e35688badb6218a74871db1281f5fa16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:98:63:a9:c1:d0:2a:43:44:05:1c:9f:e2:
41:81:f6:3f:77:ee:8d:f4:94:fc:9f:19:b1:cd:14:
88:fa:29:bc:10:4d:33:1c:ca:fc:39:7e:a5:84:09:
37:10:41:58:4d:36:50:57:6a:16:71:0e:b8:60:1e:
30:42:51:b0:28:00:be:be:01:e7:9e:0e:43:02:54:
78:cc:ec:f0:a6:dd:bc:f0:29:7b:06:98:ff:23:39:
79:6e:24:be:d2:a6:29:f3:a6:4a:7c:e1:dd:b0:30:
61:7a:58:35:09:96:c5:3c:fe:fc:d9:d5:b8:77:40:
6a:00:53:41:c4:fd:38:8a:61:e7:96:47:55:93:9b:
a0:5e:d4:48:38:3b:06:9b:c2:33:a0:22:a6:15:e4:
76:24:a1:1c:e9:78:d5:36:a0:24:01:15:db:94:1f:
5e:72:51:9e:32:a5:31:7c:72:99:ed:31:3f:12:21:
62:b3:88:af:61:0f:9b:39:a6:33:10:c0:ba:27:5a:
52:38:0d:2f:ea:8c:63:98:e4:f7:cb:1c:c8:9d:db:
2c:1b:53:57:a4:fd:45:9f:ff:ac:7d:f8:af:34:21:
76:99:6f:9d:d5:57:bb:4f:50:67:ec:97:cb:0e:59:
9a:f7:1c:3a:fc:04:c2:fc:02:94:3d:71:78:f7:da:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D3:86:3E:35:68:8B:AD:B6:21:8A:74:87:1D:B1:28:1F:5F:A1:6D
X509v3 Authority Key Identifier:
keyid:11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b9:6b:ad:ae:87:39:af:61:fc:29:24:a8:ed:f5:94:6c:dc:
4a:5b:f0:d5:b8:0d:25:82:4c:d0:c4:7d:f7:b4:7d:75:6f:a1:
56:25:ea:61:49:13:2c:b1:fa:fa:28:7a:7f:b8:d7:72:a5:8d:
00:86:1e:c4:d8:33:42:78:74:a6:7a:cf:91:69:b0:3a:ee:ed:
b7:e7:54:e0:74:52:38:65:d7:5d:d4:4f:5e:f3:a6:68:7e:1d:
05:3c:62:1a:24:93:ca:41:24:07:95:e3:33:09:86:f9:17:b8:
72:26:d5:34:3d:d3:9c:b1:66:f2:32:b2:98:79:55:4a:c7:78:
ca:bb:c9:ec:a5:8d:f5:26:cb:d1:71:f2:a7:b0:8f:28:3a:5f:
75:15:c4:ea:4d:01:bc:7c:81:54:e4:df:92:48:d4:d3:e1:26:
2c:a1:00:a3:aa:e4:a7:10:53:4f:5e:d1:59:16:ed:28:02:af:
79:85:1a:f5:cb:9e:3d:0a:e2:6d:b8:3d:80:e3:87:8c:44:82:
52:cc:bf:ed:38:e8:7d:eb:54:e3:91:68:c2:a1:7f:00:70:4a:
c4:9e:c5:78:3b:c3:b1:a4:4a:76:51:af:1b:11:48:b3:49:27:
99:0d:74:8e:f6:9a:14:e7:b0:f4:a1:93:75:9a:98:0b:2e:f7:
7b:4f:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:52 2025 by rpki-client