Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
File: eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json)
Hash identifier: iAokhe9EVWNsgTZw7oipmyH4EhZAhxDQY/Cx599Smoo=
Subject key identifier: 69:EC:0D:70:C9:16:45:F1:DD:89:2C:5D:19:2C:7A:B9:27:71:22:2D
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial: 01967AC4B76D5BEAAF7F23D5A9E325D28B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
Manifest number: 015D
Signing time: Mon 28 Apr 2025 05:00:34 +0000
Manifest this update: Mon 28 Apr 2025 05:00:34 +0000
Manifest next update: Tue 29 Apr 2025 05:00:34 +0000
Files and hashes: 1: VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa (hash: gWEnNe9T8U6TtdthLKRFfDmS/LnKXxsDWRpdZGNSQs4=)
2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: LmjaqTzlZsmZDhBwl4Ka9KOcBFpyxSzIbDqZVh8XPbw=)
3: pCSKhYNkTR7SxUskaAwpFx35Lys.roa (hash: XnHKJyo6BAhxQvWoTo8yVgwue3aegX0njca6tfTmGRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:b7:6d:5b:ea:af:7f:23:d5:a9:e3:25:d2:8b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Validity
Not Before: Apr 28 05:00:34 2025 GMT
Not After : Apr 29 05:00:34 2025 GMT
Subject: CN=69ec0d70c91645f1dd892c5d192c7ab92771222d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:31:f7:e0:cf:b3:45:bd:f7:1a:d1:13:5a:
70:ff:15:59:8a:a8:a4:62:4d:c9:4e:ac:e8:62:5c:
b9:ef:ee:4c:cb:08:35:68:b7:32:ba:f7:a6:14:9f:
30:29:01:9e:f0:d3:02:f8:b2:44:b3:e2:e7:a2:ef:
bb:c8:2e:f5:b3:e7:b8:5e:10:87:7c:aa:e8:16:1f:
5a:ee:04:44:1c:b1:d0:38:23:42:b6:96:a1:10:d7:
18:6a:4d:6a:a0:74:71:d7:d9:ba:48:bc:ec:1f:46:
92:96:2a:78:84:8a:86:b3:71:6c:6c:48:ac:48:d8:
57:34:e1:b5:9d:3f:cd:02:18:20:e3:80:36:b0:b6:
09:f1:4c:9c:90:20:9c:ec:80:9f:b6:5a:8b:79:69:
f7:fd:4e:f9:6b:e3:fc:6a:0e:df:31:37:0d:28:cb:
53:07:8f:cf:33:16:9f:b7:54:98:a3:86:01:1a:eb:
e0:3d:f8:3f:85:0b:34:58:56:47:b9:a0:6b:fe:c4:
e7:42:c2:b9:ad:71:59:94:dd:d5:b6:82:d8:d4:b3:
88:31:c7:6c:1b:e5:6d:72:1f:9f:9d:4e:56:5f:da:
00:ef:9f:cc:e5:05:cd:91:99:f0:92:bb:41:19:07:
19:c6:7f:43:de:bb:ef:39:4e:95:57:24:5d:11:06:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:0D:70:C9:16:45:F1:DD:89:2C:5D:19:2C:7A:B9:27:71:22:2D
X509v3 Authority Key Identifier:
keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:99:23:d9:69:31:32:06:9d:4c:8d:2c:6a:eb:64:ff:99:7c:
15:67:f0:d5:e8:c4:37:85:7c:1f:5b:d7:9d:a0:cf:03:3f:be:
76:17:e0:f6:44:e3:34:41:1b:89:2b:4b:a9:81:e0:9b:84:ce:
16:9d:bb:55:46:d0:4a:d4:f2:fd:3b:f9:1c:79:02:6c:87:d8:
7c:c4:6a:32:05:56:f7:ec:7d:7d:c5:8b:6a:c0:18:a4:b3:42:
7b:c9:b3:de:15:4d:29:49:93:f0:7a:2f:09:ab:b2:8e:33:e6:
9c:e8:bd:83:bd:c4:11:d1:dd:81:27:c3:8b:16:d9:a5:6f:a9:
d0:47:67:87:66:d1:e6:19:8b:ec:e9:44:5d:a8:99:e3:83:4b:
72:99:68:fc:d0:87:0b:b5:6c:bd:a2:37:5b:f9:4e:28:a1:27:
e9:4f:c9:e6:a1:1a:a2:1c:b7:10:ad:d7:3a:95:5a:0b:56:f0:
b2:64:39:d7:57:5a:50:79:24:48:a2:eb:4b:36:e0:c3:fc:92:
cd:c7:d8:eb:66:34:15:73:38:e7:80:aa:98:30:71:3e:01:c9:
c6:73:f2:ab:6a:6a:c6:45:47:61:ac:52:d0:98:34:02:6e:e2:
87:3f:e2:24:6e:e1:18:f0:e7:91:0c:0d:29:21:c0:3f:e2:4d:
cd:10:47:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:00 2025 by rpki-client