Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
File: ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json)
Hash identifier: Usk9fm2biy//eicID0XE1EJaSVJTceBC63n75ucHrJ4=
Subject key identifier: B8:6D:94:C2:B4:A8:8D:28:AC:CC:63:00:8A:1E:9F:90:35:2B:57:7A
Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
Certificate issuer: /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Certificate serial: 0196A84345DCA3A76D77B7E7E6B97B8A9A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
Manifest number: 0D1E
Signing time: Wed 07 May 2025 01:01:43 +0000
Manifest this update: Wed 07 May 2025 01:01:43 +0000
Manifest next update: Thu 08 May 2025 01:01:43 +0000
Files and hashes: 1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: 2kKDpZl2u6AAkGYBTpftn35M5iVEIRzJhJuMFTfBU54=)
2: TrL7vyhk-vrmOcVyXUhkgoFF8IM.roa (hash: Hfs6eqQDDmF2iRkKQ4LyqXry5vY1cydb2ruM4NvmGtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:43:45:dc:a3:a7:6d:77:b7:e7:e6:b9:7b:8a:9a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Validity
Not Before: May 7 01:01:43 2025 GMT
Not After : May 8 01:01:43 2025 GMT
Subject: CN=b86d94c2b4a88d28accc63008a1e9f90352b577a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5e:00:60:64:4f:32:d1:f2:8d:d4:c8:78:cf:
68:79:95:d1:99:9a:bb:53:5e:ae:21:f9:cb:6b:93:
fa:fd:c9:7e:92:5f:31:ca:fa:ae:56:e6:6a:1e:3b:
5b:c2:8a:26:b5:cf:a0:55:bd:7b:15:eb:b2:17:47:
15:9a:86:f1:d9:8e:32:34:fa:95:87:8e:58:58:9d:
30:f4:15:f2:5c:92:a4:7e:ad:46:0f:73:7d:77:07:
c7:40:ca:dc:5c:b4:21:b1:50:6f:e6:5a:13:ef:b8:
35:c1:70:c2:5e:ab:41:eb:a6:d1:93:a8:ce:41:4f:
b5:68:85:a7:d0:24:b6:60:69:bb:32:aa:02:c9:ce:
f1:4b:7a:7b:31:a3:ac:f8:e2:92:a5:4e:88:6f:44:
0d:e6:cf:29:c8:37:73:86:40:1a:ca:21:f3:d0:6f:
93:7a:7a:27:bb:3e:e5:7f:97:d1:ee:db:67:21:c1:
71:bb:7c:43:bd:fd:1b:e8:b0:32:72:f4:ec:91:b2:
96:e0:20:c8:40:09:e3:4b:bd:f9:06:25:a2:15:17:
11:b7:57:aa:07:31:90:0d:34:b7:aa:2d:3a:3f:9e:
35:b2:3c:4a:b5:ab:5f:4f:a9:32:4f:3a:84:51:15:
06:92:20:aa:6a:1a:96:e4:30:c2:39:81:e3:3b:12:
63:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6D:94:C2:B4:A8:8D:28:AC:CC:63:00:8A:1E:9F:90:35:2B:57:7A
X509v3 Authority Key Identifier:
keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d8:47:b0:42:54:89:68:13:56:7e:85:9a:5f:f9:c5:c0:fb:
42:43:33:c7:a9:fb:4f:23:19:cd:eb:1c:33:84:e0:b5:44:7f:
c5:13:fd:b7:54:17:5a:fe:98:6b:c4:4d:15:7c:43:ba:00:35:
04:0b:5a:48:f7:ff:8d:43:eb:f0:e3:a9:a6:26:e9:a3:72:a4:
2e:00:11:32:31:94:8c:2f:a9:8c:16:2d:26:ef:83:fa:b5:b0:
e1:05:8d:8e:64:93:21:07:42:45:11:92:51:f3:a5:fc:7f:fe:
f2:80:57:73:a4:bf:c0:9c:53:25:fe:20:4d:48:bb:6b:a9:0d:
35:75:dc:e1:69:dd:e0:cf:f8:24:be:eb:c5:c9:52:71:6b:78:
0c:0e:c0:c5:9b:01:db:00:32:c6:67:83:24:f7:9f:fa:6a:89:
1e:04:e4:32:7d:7b:cb:76:8f:bf:5e:8e:e6:34:ac:bc:04:47:
d0:ee:d9:c6:a0:98:a3:96:67:a2:27:f7:4a:fb:d4:6d:1b:2b:
1a:b7:31:8d:64:f8:e4:3e:d6:e5:ca:90:56:6b:50:cd:23:fc:
1f:8b:2c:6a:e1:40:a9:d8:7f:d1:be:78:c1:86:54:01:f7:71:
ed:41:db:5b:7a:d0:67:b5:02:ca:b3:8e:da:ec:6a:c8:7d:0d:
d2:22:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:15:57 2025 by rpki-client