Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
File: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft (raw, json)
Hash identifier: h9QeVx3PFmi7rvvLzfC9stI9c6fsuQwSFOOtTKhW5IU=
Subject key identifier: 87:76:78:47:9D:69:62:61:1F:34:09:06:C7:A3:2E:B9:10:00:97:5C
Authority key identifier: 11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
Certificate issuer: /CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
Certificate serial: 0196771EEE83E1C02C02BC3A3D4C03B39647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
Manifest number: CE
Signing time: Sun 27 Apr 2025 12:00:37 +0000
Manifest this update: Sun 27 Apr 2025 12:00:37 +0000
Manifest next update: Mon 28 Apr 2025 12:00:37 +0000
Files and hashes: 1: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl (hash: S9UZv5W/eW9WVxN0Pby1se3db5jaB8kdlMWLGP1cEPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:ee:83:e1:c0:2c:02:bc:3a:3d:4c:03:b3:96:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
Validity
Not Before: Apr 27 12:00:37 2025 GMT
Not After : Apr 28 12:00:37 2025 GMT
Subject: CN=877678479d6962611f340906c7a32eb91000975c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:fd:0e:73:3f:e1:68:39:6f:e3:9c:ab:7d:
a2:04:be:20:bc:fc:90:a0:d6:8c:2f:fb:98:3e:c9:
75:87:5c:39:ea:cb:b4:72:5c:6c:71:56:b6:87:87:
ca:7e:d6:04:ec:99:9c:47:41:3d:06:52:54:af:c3:
c2:15:6f:9b:d3:ce:a7:e4:df:8a:e8:f3:ec:ba:26:
e7:3a:83:68:e1:d4:07:56:5a:a4:18:dc:89:c6:5e:
34:30:55:7d:8c:ce:b8:41:78:e6:d3:90:0c:1d:d4:
ff:3f:e3:13:2b:17:1d:ec:c0:94:a2:9d:9d:bc:2d:
f5:4f:a7:a2:36:28:38:4e:34:b9:ba:b0:05:c4:8c:
c5:e0:69:16:50:a4:6c:a3:32:60:d3:ad:37:09:01:
54:1c:28:1b:a9:64:82:d5:81:a5:1c:58:87:ba:87:
b6:06:60:2a:7f:27:14:2a:e0:94:a7:b1:9c:08:f0:
31:b3:b3:d3:5f:2b:c5:88:93:35:4a:34:a9:7d:fe:
dc:fe:df:76:48:fa:87:16:f7:13:6a:53:a3:fd:89:
f2:ec:3e:36:53:eb:b9:ef:62:8d:ef:f4:5d:0e:9c:
8f:fc:63:41:7c:73:11:e4:29:fa:3f:c5:9c:70:c6:
e0:3a:70:e2:37:5d:a9:53:97:d9:ea:45:f3:63:0f:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:76:78:47:9D:69:62:61:1F:34:09:06:C7:A3:2E:B9:10:00:97:5C
X509v3 Authority Key Identifier:
keyid:11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:94:43:d1:a3:7e:73:56:7d:df:47:cb:73:28:f8:0b:57:16:
3e:73:99:1c:16:9b:f6:6a:1f:40:5e:72:bf:9f:7b:8c:f2:e4:
c4:ea:55:15:7e:eb:b1:dd:b9:b4:74:6d:cb:6b:fe:4c:f7:0f:
57:30:60:cd:4c:0f:89:91:e9:2b:9d:2e:1c:db:60:5b:36:a4:
3b:eb:cf:d0:c8:ad:25:95:c2:6b:8a:b1:4d:1e:df:3f:c7:65:
10:57:ad:b8:72:07:0a:c0:7f:46:39:fb:6d:3b:b6:ad:b2:8b:
31:5d:42:87:88:fc:af:f6:5c:04:b7:13:de:b4:a5:b9:82:fa:
e7:e7:50:d7:c6:2e:c9:16:20:fe:9f:78:02:82:13:b5:be:e6:
04:1c:6a:d1:5b:d0:99:17:f4:c5:df:cf:6d:51:56:0a:91:03:
91:74:da:f1:d8:41:34:33:95:94:ea:58:be:dd:08:84:5f:28:
b3:4e:b1:7e:e0:ce:d0:e7:65:a4:bc:63:9d:18:f2:83:13:99:
96:97:3c:a8:b6:b3:3a:b9:81:04:f9:75:21:7b:36:6f:12:0d:
fb:4f:99:64:77:39:e9:3c:c1:63:53:76:ce:d3:cc:07:dd:67:
ec:fb:a4:09:11:07:32:f3:6f:f3:ea:5d:10:31:e1:26:7a:32:
8f:b9:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:45:18 2025 by rpki-client