Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
File: EsqtEcXYmB2YPDAehqGs8tgRqsE.mft (raw, json)
Hash identifier: sbkNiox+Oq3+8aIUzRGhWv/ByBY9k6/leuFuaoXCtYI=
Subject key identifier: 73:4A:98:8F:5C:DC:85:60:B3:3C:EC:1D:76:2B:16:CB:01:5F:61:46
Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
Certificate issuer: /CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Certificate serial: 01968849D583AE0DEE5B03E0F8DE1924552E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
Manifest number: 0F14
Signing time: Wed 30 Apr 2025 20:01:02 +0000
Manifest this update: Wed 30 Apr 2025 20:01:02 +0000
Manifest next update: Thu 01 May 2025 20:01:02 +0000
Files and hashes: 1: EsqtEcXYmB2YPDAehqGs8tgRqsE.crl (hash: QjdGsoB1ciMvMr453l4VxPfOSF5CrhVL9C2uoJbe8/c=)
2: wCYSBxlEFn9C3bKzEBin_RqzoTU.roa (hash: HuM1kg7JZIqnFeWlmolggLVBCkZTp9UadWTeRelOxb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:d5:83:ae:0d:ee:5b:03:e0:f8:de:19:24:55:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Validity
Not Before: Apr 30 20:01:02 2025 GMT
Not After : May 1 20:01:02 2025 GMT
Subject: CN=734a988f5cdc8560b33cec1d762b16cb015f6146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:13:f0:b5:8d:25:29:92:2f:74:01:f3:18:
f0:11:9f:7c:a2:34:05:d2:6b:6d:b6:c5:49:15:0a:
ca:25:11:f2:ed:63:15:f1:ae:3c:ed:79:78:60:29:
0a:7e:0f:3f:05:a0:5b:ba:d5:58:b5:6b:02:c2:e5:
75:c8:2d:d7:10:c6:8e:12:00:73:72:5f:ed:62:5e:
36:98:cf:75:5f:1e:f7:98:be:ad:f1:b9:ba:f7:0f:
0d:b6:26:a9:e3:39:50:0c:6c:3d:99:bb:52:d5:42:
d1:c3:0c:4a:5e:89:d6:43:08:14:c5:3f:c8:cd:cb:
87:dc:f4:dc:a5:49:50:65:2c:91:1c:34:0d:02:27:
4d:d5:da:e0:b3:8b:8f:70:c0:b8:e3:ae:c2:36:f5:
e0:55:5b:2b:d3:a6:85:a7:09:77:c1:4c:55:5a:a4:
ed:60:c2:80:fc:4a:46:b3:1a:cd:47:b1:e4:f4:01:
27:0c:e5:81:18:f7:02:6d:b2:56:cb:68:da:d2:57:
1a:7a:82:1c:41:74:5d:e2:1e:27:a9:38:57:6e:e7:
c8:b3:30:78:a6:0f:3c:1a:e5:f9:3e:a4:5c:9e:46:
a8:d8:04:86:c2:3b:8d:cb:45:3c:95:13:50:0c:16:
2c:5d:fc:81:20:3e:24:32:19:65:f8:d1:6c:ae:f6:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4A:98:8F:5C:DC:85:60:B3:3C:EC:1D:76:2B:16:CB:01:5F:61:46
X509v3 Authority Key Identifier:
keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:70:1a:99:bc:c2:a5:cc:a2:78:83:6d:82:51:58:71:13:0e:
c3:93:c4:64:43:5e:21:77:64:7a:a5:c3:99:f1:e0:70:22:66:
af:52:78:9c:52:30:d8:52:f3:e9:41:bb:12:da:32:16:1f:92:
33:86:a1:4c:b3:87:6f:74:44:70:7c:b2:96:9e:be:15:17:dd:
6f:88:11:3a:71:96:9a:01:25:ff:13:e4:3e:60:d4:98:6f:7c:
9d:a2:6a:dd:8a:9e:20:a7:31:5d:43:74:a6:62:ab:47:10:da:
4c:45:ce:cf:9b:ec:b8:72:73:e9:f3:92:0e:c1:26:d7:4c:ea:
af:fa:c7:d5:4d:7f:12:4d:19:c2:97:f9:e8:76:4e:64:b9:ff:
85:6f:aa:5d:2c:2f:7c:87:78:1c:af:94:f2:61:9a:02:3c:69:
fd:c2:9f:f0:f4:e4:a6:14:05:ed:d4:34:73:36:8a:56:df:9e:
11:11:cc:74:d4:67:17:e3:9f:05:17:34:83:20:75:a8:7b:5c:
20:0f:22:22:4b:ed:83:e6:66:85:ad:4d:64:54:c1:71:c8:fb:
bf:1d:30:6c:66:3e:97:d8:c3:7c:5e:84:7e:c9:57:c1:d8:d9:
7c:37:b1:6e:06:f5:c0:e7:7a:f2:b0:88:29:24:65:f8:01:4c:
91:ab:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:16:00 2025 by rpki-client