Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
File: EXoEqScBnDzi0MnbOjFJd6Cns1w.mft (raw, json)
Hash identifier: puEND7bKjZFJnsDeSRnFgcCQINhZHb90ZXg7txDRjWw=
Subject key identifier: 5C:9D:86:EC:97:89:CC:E2:1E:E0:EA:D5:A3:62:3F:AF:F1:2C:F9:0A
Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Certificate serial: 019681A2EB2495CDCA25C604EFC5B9BFC45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
Manifest number: 01E4
Signing time: Tue 29 Apr 2025 13:00:59 +0000
Manifest this update: Tue 29 Apr 2025 13:00:59 +0000
Manifest next update: Wed 30 Apr 2025 13:00:59 +0000
Files and hashes: 1: 2BzyKfn5TceQ5f_OzQ0CHZnS4gI.roa (hash: QgfXzSLSDf5EWcjraHDYOpI/UP8b9CbWgxlTSxy1O3c=)
2: EXoEqScBnDzi0MnbOjFJd6Cns1w.crl (hash: y1tqrDYAW6U9ST8UV+p0N74niGrlUhjhlc4EZKGP3PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:eb:24:95:cd:ca:25:c6:04:ef:c5:b9:bf:c4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Validity
Not Before: Apr 29 13:00:59 2025 GMT
Not After : Apr 30 13:00:59 2025 GMT
Subject: CN=5c9d86ec9789cce21ee0ead5a3623faff12cf90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:be:56:51:e3:65:20:8f:6d:6a:33:4e:57:
f5:c4:cd:3a:8e:49:bd:df:c8:10:47:25:a2:46:86:
70:11:db:9d:3e:dc:61:b4:40:99:5e:dc:a1:77:af:
b4:11:99:d2:00:8d:61:4e:7c:b9:de:6e:79:4b:c7:
81:43:44:00:0d:7a:0e:b0:82:df:01:d1:26:8c:6b:
9b:fd:3f:71:ad:c8:ed:02:b2:5f:f4:50:e0:89:f1:
5e:e4:db:00:c2:48:04:1e:4b:a8:c1:5e:aa:e6:52:
6f:e3:b5:e0:3c:f3:a0:ea:09:2b:0c:b1:50:23:91:
1e:6d:3f:10:aa:32:6c:0b:93:da:13:d8:64:9f:19:
92:97:f1:60:19:75:dd:9f:e3:bd:d5:22:e1:98:c7:
0c:c5:a1:ae:f3:db:d3:27:8d:83:89:5a:a6:5b:a8:
81:d9:ee:0f:cc:13:8c:b7:2c:12:7a:80:b0:89:25:
6b:9d:94:64:4f:ff:40:63:e8:64:e4:3f:d5:9b:2d:
95:a2:90:eb:c3:cc:86:8a:19:7f:df:9d:37:7a:c0:
0b:88:ad:50:f6:13:69:e5:ba:d5:f3:42:6c:d2:be:
b7:77:dd:5e:80:c0:74:58:d6:34:ac:31:e7:1f:65:
02:b8:b8:bc:8c:5c:18:1a:30:f6:ad:b3:01:aa:d4:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9D:86:EC:97:89:CC:E2:1E:E0:EA:D5:A3:62:3F:AF:F1:2C:F9:0A
X509v3 Authority Key Identifier:
keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fa:f8:0d:55:0e:a0:ed:d5:31:97:50:35:2f:62:ea:bf:af:
86:ae:c1:42:cb:96:04:8c:98:f8:47:28:9c:71:47:aa:7a:a2:
b8:aa:0d:7e:2d:07:db:af:6a:e6:df:40:4d:8d:ee:f0:3b:04:
95:d2:a3:94:55:04:d8:60:e9:6a:c3:0f:e1:0f:79:f0:5d:0d:
2e:7e:ec:5a:b0:8c:ed:ce:45:75:68:8e:74:7c:c1:bc:c4:42:
de:80:28:f7:98:1e:5d:8b:c3:ad:97:9a:e5:17:7c:49:86:ca:
7f:14:8d:08:a2:cc:8b:87:d4:66:30:bb:67:d0:2e:20:99:56:
3d:5b:94:84:37:58:29:8c:17:f8:e1:43:6a:fc:47:79:04:4f:
02:c4:2d:45:87:bb:93:2c:1e:18:6d:3b:db:92:af:49:43:32:
30:ac:6e:b0:7c:84:e7:4c:36:0e:99:78:22:7a:17:bd:ac:bc:
ae:a6:67:5d:17:64:97:86:e2:ff:2b:f8:83:3a:07:13:63:2e:
dd:0a:a8:18:99:52:2a:44:6e:85:d4:7b:f4:51:fb:1b:be:e9:
4c:9d:e7:77:4b:2c:3f:33:f8:84:a5:13:56:ef:01:24:fb:b1:
75:90:18:e6:e5:ae:3b:7c:01:2b:ca:98:2e:86:3d:d4:a0:0c:
73:bb:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:08:13 2025 by rpki-client