Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
File: EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json)
Hash identifier: NBwtgoHrUfrPBFKg2sbzq2GnwpOt6ibDPzICtLOKA9M=
Subject key identifier: 3E:60:D5:03:19:A1:98:03:3D:07:8D:E5:D3:66:FE:2E:D6:31:5C:94
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Certificate issuer: /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial: 0196BC6DD97EA0ECE81D1E46D8B9580B1DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 23:00:37 +0000
Manifest this update: Sat 10 May 2025 23:00:37 +0000
Manifest next update: Sun 11 May 2025 23:00:37 +0000
Files and hashes: 1: 1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa (hash: ZowUiRFYv0ZOu5pI167992U5kyXST8eznpl9k++Lgik=)
2: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: Ta8nfsI3LFvVDFiZexHGJg30RY3UaFEdeU13QOwH9mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:d9:7e:a0:ec:e8:1d:1e:46:d8:b9:58:0b:1d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Validity
Not Before: May 10 23:00:37 2025 GMT
Not After : May 11 23:00:37 2025 GMT
Subject: CN=3e60d50319a198033d078de5d366fe2ed6315c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8c:98:89:c9:ec:2d:52:e7:71:42:84:03:12:
69:a0:bd:23:ff:45:5c:21:32:be:40:90:c3:f9:01:
6a:8d:85:3e:86:35:b9:3b:71:18:e6:22:d5:7f:29:
45:2d:4c:a2:47:56:b1:70:f5:bb:df:2e:cf:d1:e1:
9c:46:60:f4:ee:53:9e:a7:f7:ec:6a:34:49:5e:de:
ce:77:9e:a6:15:dc:88:da:38:bb:de:e7:9b:d4:6d:
12:fd:81:6c:5b:1f:97:bb:89:92:d0:d5:0a:41:78:
f6:73:b1:fe:a7:33:7e:a5:5f:a6:ff:11:22:27:2b:
63:0c:d6:c2:81:77:40:9f:5c:1d:bc:2a:df:92:d9:
66:07:3f:d1:4c:8d:48:08:d4:c0:e6:23:a7:eb:77:
8f:5f:d9:77:19:e5:06:24:e2:e6:9c:63:91:98:8c:
06:32:49:6c:ec:eb:77:cc:2f:70:3a:a5:a8:1f:38:
22:8a:5a:72:e1:91:51:a1:f2:c6:25:11:15:32:69:
00:f0:62:fb:73:d7:c1:39:ac:90:d1:40:78:f0:57:
34:d4:9a:6e:f7:52:1a:7a:1a:4f:66:8c:a4:16:4e:
53:23:89:c6:41:52:70:5e:86:02:bc:21:d4:fd:fe:
2d:29:36:fc:4b:80:5d:8c:8e:f7:ff:13:63:3c:d5:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:60:D5:03:19:A1:98:03:3D:07:8D:E5:D3:66:FE:2E:D6:31:5C:94
X509v3 Authority Key Identifier:
keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a4:6c:54:c6:96:5b:ba:c0:7d:e4:77:a5:29:43:2e:ee:fd:
56:d2:b1:a9:2a:98:9c:21:53:77:a0:77:2a:dd:b0:dd:d4:54:
2b:76:f4:d3:fd:63:81:02:2e:30:1b:56:7b:73:c8:ad:46:19:
97:de:2b:80:40:1e:db:4b:69:c9:64:ca:63:1f:d0:57:ba:df:
50:bc:a7:37:e0:15:12:99:93:0f:c4:ec:34:75:63:01:de:db:
a0:3d:f8:0b:d2:4b:2b:83:4d:cd:5c:d9:35:75:14:d2:f4:32:
d2:a7:e6:20:85:0a:14:8e:5d:50:3b:b0:52:b4:80:ac:4f:27:
7d:6b:ec:52:4c:99:cc:3f:c7:0b:5c:9c:62:71:cb:27:c4:b5:
d7:62:2c:12:ff:a1:84:09:e5:e0:04:0d:f0:c3:af:57:75:94:
c1:91:8f:fe:a6:11:a9:ca:d9:ff:34:a9:bd:f2:42:13:54:96:
e7:d3:53:1d:fa:82:05:4d:8c:79:ea:6c:63:cb:59:bd:72:2d:
86:20:61:de:0f:7b:6d:53:ba:aa:56:a4:0b:92:92:d0:a7:6f:
5b:25:2e:3d:0f:7e:fd:72:7b:b5:1d:f3:6d:b1:27:82:e6:48:
fe:a9:a8:66:11:cc:f8:b5:8e:34:34:86:49:11:94:44:05:98:
ca:2d:78:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:32:52 2025 by rpki-client