Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: +LNYtWklnnIuwEulLRtFlsjVXc7NlxsDqA5HvshkS24=
Subject key identifier: 38:A4:B6:53:06:3F:34:FC:53:39:DB:D0:F7:EB:1C:9A:14:41:28:D7
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 0196B1EA39C71F4574E34D4E5C2459FA129A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 22:00:39 +0000
Manifest this update: Thu 08 May 2025 22:00:39 +0000
Manifest next update: Fri 09 May 2025 22:00:39 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: p5Nd9rRiZSO2ybQwOMf6YV90Xrl2zvblCvLCwl2y+kk=)
2: qKzJgLnJqbeDXyV-ycImwsgvDDg.roa (hash: aG2do145Ob8Jlod59pCz1QJaZfsQ+AVFS5an66p82B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:39:c7:1f:45:74:e3:4d:4e:5c:24:59:fa:12:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: May 8 22:00:39 2025 GMT
Not After : May 9 22:00:39 2025 GMT
Subject: CN=38a4b653063f34fc5339dbd0f7eb1c9a144128d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:3a:a5:47:03:a2:ac:8c:d3:aa:dc:ac:9b:
cb:2b:f3:ef:60:e3:60:18:0d:59:44:de:25:8c:9c:
93:59:9b:84:39:97:a1:33:52:d0:a8:3d:67:81:ed:
ee:90:64:16:9e:f9:e9:39:65:96:fc:28:90:c8:98:
a5:4d:c0:57:71:57:97:a8:f6:81:f0:3c:d3:39:32:
93:fe:89:39:2d:96:8e:9c:9c:02:bf:9c:48:a7:8b:
51:20:e6:81:f3:35:b2:25:96:e9:33:30:9b:bd:7e:
58:43:48:ff:36:f5:75:e0:38:9b:fa:c7:13:82:89:
7c:4f:7f:7e:bb:85:97:48:77:c6:14:6f:cb:52:37:
fb:b3:30:55:21:21:97:9d:fb:80:4b:0a:9e:7c:90:
7f:10:d5:ef:b0:ad:cc:82:68:d7:d8:92:8c:09:36:
d9:9c:55:44:ab:24:6c:b8:b3:25:2f:74:f7:c6:a1:
c8:69:3b:a6:3a:ef:20:ce:01:c4:cd:1f:b7:44:a3:
33:d7:d1:5f:d4:fa:18:14:67:1d:5e:53:1c:58:82:
de:41:37:1c:d7:f4:b2:2d:33:70:8d:b1:49:8f:97:
06:fb:51:bc:ac:ee:c8:96:dd:e1:c0:18:23:eb:5d:
89:88:e3:44:f1:53:8e:dd:7f:29:8a:42:86:b1:dc:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A4:B6:53:06:3F:34:FC:53:39:DB:D0:F7:EB:1C:9A:14:41:28:D7
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:23:1e:6b:c7:01:36:d3:e7:80:85:a6:e3:6d:ec:75:86:
b6:d7:23:b2:90:ca:41:00:4e:1f:78:46:9b:ce:45:69:09:14:
ba:50:cd:90:68:43:18:6e:7d:09:1f:3f:e7:b9:18:f7:7d:79:
f7:05:e0:04:a8:d7:e3:c8:2a:6c:26:3c:0d:1b:73:75:a8:1f:
b8:f0:59:3a:c7:89:65:5e:78:98:7c:d3:3f:e7:a6:47:53:12:
8a:b0:cd:65:bf:e7:9e:3c:bf:a3:aa:99:a0:0f:30:2d:c4:2c:
46:a8:44:47:73:2e:4b:82:7d:b6:a3:dd:ce:33:40:a2:ca:a2:
ef:ff:5d:56:a2:06:f5:db:42:4c:53:30:66:ec:fa:e9:25:db:
6c:2c:1e:cd:12:c7:bc:2c:7b:f6:ae:94:e8:9e:97:e4:8c:39:
28:f7:c9:a3:4f:e1:7d:fd:9d:3f:7a:3d:ad:d8:16:a1:48:80:
df:68:07:c6:c6:47:95:0c:44:9a:55:bf:4d:90:c4:19:38:a5:
3b:f1:0a:fa:c7:57:63:ab:e3:30:1c:a7:38:3c:54:13:a7:58:
f7:f8:e9:d1:20:ae:a9:2e:67:53:77:50:0e:46:0d:54:e1:fc:
3c:81:c5:27:21:ad:3a:8a:fb:1a:47:4e:a7:d2:6e:8a:6c:a3:
0a:3e:80:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:50:11 2025 by rpki-client