Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: waMAtyc/30RPv+dptPSa/3NiRZBcszRi/wO20+F5XKE=
Subject key identifier: 80:6C:10:37:27:19:C3:2F:68:06:93:B0:D8:2A:76:96:4B:C1:32:7C
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 019677FA92839B7A4438F66D324896AB44BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 16:00:32 +0000
Manifest this update: Sun 27 Apr 2025 16:00:32 +0000
Manifest next update: Mon 28 Apr 2025 16:00:32 +0000
Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: MkFjuK7RuT7ZwX1jkK9Gy3lleuzEnJChKzlp/bUqxmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:92:83:9b:7a:44:38:f6:6d:32:48:96:ab:44:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Apr 27 16:00:32 2025 GMT
Not After : Apr 28 16:00:32 2025 GMT
Subject: CN=806c10372719c32f680693b0d82a76964bc1327c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:8f:b3:ed:c9:33:1d:61:93:5a:c6:f3:16:
34:9c:3f:2f:8b:a9:b7:37:65:44:9a:c5:0a:7e:54:
90:55:e8:79:b9:8b:99:fb:15:3f:b6:5b:39:bc:58:
82:05:71:88:a2:a5:cd:d0:20:1c:02:df:8f:9a:cc:
60:84:55:0a:ab:5f:e9:bf:de:5b:be:d0:d5:20:ae:
07:69:f0:c6:80:b9:d0:ac:1f:41:40:cd:21:81:17:
87:0c:ea:6e:12:f2:6f:ec:03:a3:b4:32:1d:a7:e3:
9e:c1:66:e6:c7:f0:dd:cc:a0:f2:26:0d:0f:3a:a3:
5c:66:bb:3b:25:db:c1:3d:53:ad:2a:9e:62:a6:16:
5d:40:94:ad:1a:90:fb:cd:4d:09:3f:db:15:e6:f5:
33:06:c6:c7:cc:0b:75:d3:1d:38:86:b6:ee:34:33:
77:b9:81:bb:6a:6f:ba:5f:f7:53:9b:34:6a:f1:c6:
ef:0a:8c:ec:33:62:f4:d3:2e:1b:13:51:7a:91:25:
8e:bd:52:98:88:70:58:73:20:71:3c:56:c7:cd:8d:
a1:f9:de:8a:45:6e:42:e4:eb:13:68:4d:37:2e:ce:
6d:2b:ed:8d:d4:1d:f5:af:f7:f2:19:60:18:7f:3e:
55:c4:03:3a:59:d8:dc:f5:b0:47:9d:0b:d8:8b:a3:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6C:10:37:27:19:C3:2F:68:06:93:B0:D8:2A:76:96:4B:C1:32:7C
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a9:3a:91:57:98:d3:d8:f3:02:ba:81:41:1b:26:b5:d2:fc:
25:2c:65:90:74:13:36:04:2f:77:a9:a3:5b:0f:b0:2c:b5:24:
f0:ed:a8:98:99:f9:70:32:03:e6:63:d8:83:07:12:15:b6:8e:
69:78:f2:e5:e0:53:3e:2e:17:94:02:fa:48:9a:f3:88:ef:6c:
a9:b4:31:f1:90:81:3d:f4:63:d6:e4:07:f8:32:b6:34:64:d9:
d9:36:a3:5c:2a:4a:4b:0c:e2:d1:1e:b7:e4:76:a2:9c:5e:7a:
e1:5e:c4:de:9e:43:ff:e3:66:47:97:3c:26:ee:b0:89:c0:d7:
b0:38:27:db:db:38:a4:3c:57:93:f4:36:94:de:af:27:22:22:
c7:90:9a:e2:83:e9:a1:29:18:1d:f6:9c:33:9e:77:6c:2c:54:
53:1a:f5:45:d5:9b:76:8f:31:66:4c:f4:0a:87:bb:17:79:4a:
71:8a:23:22:0d:fc:e4:c4:89:25:13:2c:be:09:20:6b:c6:f2:
a0:cd:ad:55:fd:21:15:e1:48:11:81:16:c6:85:64:9d:98:2c:
4a:f3:de:ff:99:51:1c:9f:49:a3:6e:ca:01:d9:fd:37:58:dd:
fd:d3:90:5f:53:77:59:f6:df:43:15:12:eb:42:de:d7:ee:ac:
e7:0a:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:59 2025 by rpki-client