Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: GtRx+L4G6C2OvCKRH4xJb47CgGVa0Wi7EYrstLSb0Ko=
Subject key identifier: AC:44:2E:4F:9A:36:A3:9A:27:08:F1:C0:59:DA:48:C1:56:0A:ED:FD
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 0196A46596614CD84CD3F0565EF0F5E6A37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0C05
Signing time: Tue 06 May 2025 07:00:43 +0000
Manifest this update: Tue 06 May 2025 07:00:43 +0000
Manifest next update: Wed 07 May 2025 07:00:43 +0000
Files and hashes: 1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: ru5F451PN6/p2G7aSK8ZZCBYi1NvZBdPMZB6hwdzao0=)
2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:96:61:4c:d8:4c:d3:f0:56:5e:f0:f5:e6:a3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: May 6 07:00:43 2025 GMT
Not After : May 7 07:00:43 2025 GMT
Subject: CN=ac442e4f9a36a39a2708f1c059da48c1560aedfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:de:df:94:fe:ac:c0:44:7f:6e:b9:d9:2c:
fb:cc:f0:ac:45:ef:9e:09:ab:6d:87:2f:34:c7:04:
f5:2f:25:6a:8b:3b:8d:1e:65:d5:66:94:00:29:1e:
f4:38:5e:b2:cb:23:fa:7f:4b:4a:f4:e1:69:ed:7f:
19:97:d3:21:39:48:7b:9b:45:6e:d3:ad:91:9e:78:
d4:cc:d8:9e:21:39:86:df:c0:e8:85:58:38:5f:38:
2e:a0:18:7c:7b:f8:20:a9:a3:7e:a3:3e:cc:37:da:
07:7d:38:56:53:e7:77:de:b8:5b:11:48:99:36:2c:
06:17:9f:70:2f:c4:75:4e:f8:83:70:2c:16:85:6a:
c2:48:88:56:6a:8f:90:a0:f7:6a:79:8c:4d:58:df:
de:9e:6f:38:48:46:bf:e2:36:54:90:a8:ac:f5:26:
e8:18:0d:d1:93:6f:bb:58:a8:84:45:93:b1:1d:36:
fd:7a:bc:6e:91:d3:c4:df:77:0c:38:51:a3:75:95:
80:a4:3f:b6:4f:48:b8:b8:b1:e1:a3:b6:64:37:c0:
2a:15:da:35:6b:b8:a0:f5:c0:24:a9:09:a7:bc:10:
4c:3d:05:ae:e5:1f:52:35:03:b6:67:ff:75:7c:06:
ee:61:9e:4b:1c:6c:f2:bb:8f:42:71:11:d3:95:12:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:44:2E:4F:9A:36:A3:9A:27:08:F1:C0:59:DA:48:C1:56:0A:ED:FD
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:29:6d:b1:8b:1d:8b:df:34:f1:78:f6:9b:6b:af:2a:3e:7b:
db:bf:53:2e:af:b8:b8:6f:b5:28:d4:c2:1a:fc:53:99:a3:c0:
37:df:17:d6:68:fb:16:0f:d8:9b:19:e5:cf:40:df:60:cf:47:
32:7d:b6:58:70:00:bd:3f:ec:3e:58:8e:02:00:c3:4e:8d:46:
ff:fd:14:18:1d:b4:e9:6e:01:0e:11:9b:bb:cd:d0:7a:e1:c5:
d2:ef:56:d7:0f:63:32:4c:f6:9e:83:ea:0a:18:04:1a:c5:d0:
43:fd:c0:b4:50:f3:e3:76:f5:b9:ae:69:7c:4a:e1:58:28:a0:
8f:20:5a:3a:62:31:39:1b:92:7a:2a:30:de:e7:68:c5:f5:81:
d6:14:ac:d6:1b:51:ec:20:fe:6d:b3:9a:59:c9:ac:76:d7:5b:
fc:c6:7d:25:78:4b:5a:35:12:4c:b1:75:6b:f8:bf:fa:a7:83:
4f:0b:6d:34:82:7e:35:88:1a:fa:07:80:2f:c3:9d:8e:84:42:
a7:01:d3:0a:d9:29:0f:58:5b:44:2b:50:a2:08:92:9b:2c:1a:
5a:5d:93:35:ac:2e:e7:48:a3:31:69:87:11:9a:19:2f:a5:36:
da:30:15:c3:e4:da:b0:ac:e9:2e:52:6c:60:5e:30:35:ae:88:
da:96:c6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:03:24 2025 by rpki-client