Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
File: eYkeljG7xuiuXaSyGb5Nj2H--1o.mft (raw, json)
Hash identifier: iciTlc5a86mPuia2XOf76okl3QfSne7dcOAGwEcN/DM=
Subject key identifier: 8C:DE:35:29:69:BB:47:ED:D1:6D:B5:0B:D6:DC:0C:BC:6D:28:A1:03
Authority key identifier: 79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
Certificate issuer: /CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Certificate serial: 01967DFC7E6080BE350A131EA64FDE87B8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
Manifest number: 02B3
Signing time: Mon 28 Apr 2025 20:00:21 +0000
Manifest this update: Mon 28 Apr 2025 20:00:21 +0000
Manifest next update: Tue 29 Apr 2025 20:00:21 +0000
Files and hashes: 1: 14Kld9FlTNpIEyy4ZZSIDPLCHyk.roa (hash: 34XSzdoN0Twcs64CD2UYU1J4NUP6HurtAkddMACEjC4=)
2: eYkeljG7xuiuXaSyGb5Nj2H--1o.crl (hash: CHtiCrs5qbwdPla8Ywwkm40WN47SlVx9I9TbkuyLMSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:7e:60:80:be:35:0a:13:1e:a6:4f:de:87:b8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Validity
Not Before: Apr 28 20:00:21 2025 GMT
Not After : Apr 29 20:00:21 2025 GMT
Subject: CN=8cde352969bb47edd16db50bd6dc0cbc6d28a103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:aa:60:39:0b:67:18:b8:84:cf:3f:e5:f4:
fa:f0:6f:68:7c:a4:eb:69:d9:30:3f:e9:34:ac:7b:
5c:4c:01:72:aa:03:2b:77:c3:1d:fc:d1:4a:e6:97:
b3:c9:3b:1f:d4:95:32:ec:6c:7a:df:aa:4a:91:75:
31:00:3e:0d:0b:8f:fa:82:df:de:9a:7d:1e:75:ba:
df:ca:3b:0d:d5:e9:6f:44:90:2c:bf:af:71:58:07:
31:c9:43:42:87:84:81:fc:b2:b9:20:8f:4b:9a:45:
52:5a:23:36:5c:f7:13:1f:a3:8a:d9:ae:3e:54:ab:
26:b1:f1:bc:f7:da:24:b3:3d:8e:5d:84:68:0e:7d:
bf:3b:ac:a0:9e:e5:f6:e1:97:55:93:b0:a7:19:ad:
1b:91:23:04:36:ab:9d:69:8e:87:5c:bf:19:0d:9e:
15:d8:10:ef:9c:69:c0:ae:9d:00:fd:08:04:9e:1b:
50:7a:e0:e3:bf:67:5f:7d:67:42:21:61:13:b9:34:
8e:db:60:2c:4c:b7:28:6f:92:99:5f:31:ab:55:72:
b0:38:67:5c:98:48:c3:6b:3e:8c:97:c0:9e:3f:e9:
be:75:43:01:87:cf:88:7d:00:91:a3:f8:9e:00:f5:
0f:ce:ff:83:17:f3:d9:6c:10:0a:d2:8e:50:72:e2:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DE:35:29:69:BB:47:ED:D1:6D:B5:0B:D6:DC:0C:BC:6D:28:A1:03
X509v3 Authority Key Identifier:
keyid:79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a5:f7:e2:d6:fa:9f:4c:74:ee:17:ae:53:09:e3:b1:09:ce:
ff:c1:90:c0:21:da:63:fc:ff:dc:fc:81:27:13:0a:53:f3:ec:
ce:18:3c:e3:ec:d6:63:9a:c1:1f:b8:d0:dc:4b:1c:4f:ac:e3:
5f:77:1f:8c:f5:e2:1a:c2:b6:0a:77:50:43:84:d1:5c:18:d2:
68:c8:39:63:2c:ae:07:05:6b:39:94:5a:65:f3:0e:04:a6:aa:
8b:03:72:f3:24:1d:d4:2d:de:cc:fe:43:2f:96:50:ff:c7:e2:
6a:8a:08:d4:29:99:70:13:8b:7e:8c:74:93:89:35:3d:7a:22:
66:a9:56:54:cc:57:f5:79:b2:8f:6b:51:b0:88:4a:87:3d:1a:
64:7a:74:fd:2e:55:3d:1f:0a:04:3e:92:79:fe:46:5d:fd:19:
ac:0b:e0:a9:f9:d2:15:6a:aa:96:a8:da:e0:a6:c4:55:06:d9:
de:47:23:5c:77:5d:ed:80:7c:df:fe:a0:a5:55:a1:39:fa:a0:
be:75:6e:f2:09:2e:6f:b6:b6:25:7b:5c:8f:01:ac:9f:f7:e1:
92:5e:37:03:cf:14:f2:3d:02:08:09:d6:9e:b9:cc:5f:71:2f:
af:66:03:07:01:f6:39:b7:02:b1:81:30:9c:4b:9a:3b:c1:ab:
7d:60:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:56:46 2025 by rpki-client