Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
File: ejiftI-wXUgfHyORlMU30Vs1cAk.mft (raw, json)
Hash identifier: IHSkWX7leLJJLGn4v1uuYSBlqBO33XrkgW8GfUWV+jo=
Subject key identifier: A9:EB:C6:3B:35:56:C9:C7:75:64:C0:C7:C2:9A:68:66:3E:4F:15:E6
Authority key identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
Certificate issuer: /CN=7a389fb48fb05d481f1f239194c537d15b357009
Certificate serial: 01969D50FF8F37B39CE86BB2B6C33025238A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
Manifest number: 0BC6
Signing time: Sun 04 May 2025 22:00:53 +0000
Manifest this update: Sun 04 May 2025 22:00:53 +0000
Manifest next update: Mon 05 May 2025 22:00:53 +0000
Files and hashes: 1: ejiftI-wXUgfHyORlMU30Vs1cAk.crl (hash: upHTFte256zq+OW4mDNFyDTwX43mPL96w8ROBE3db8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:50:ff:8f:37:b3:9c:e8:6b:b2:b6:c3:30:25:23:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a389fb48fb05d481f1f239194c537d15b357009
Validity
Not Before: May 4 22:00:53 2025 GMT
Not After : May 5 22:00:53 2025 GMT
Subject: CN=a9ebc63b3556c9c77564c0c7c29a68663e4f15e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:9e:fb:95:56:87:41:9a:df:c6:da:dd:40:
e6:d1:31:60:b1:cf:1e:e3:92:78:e9:93:f4:16:7e:
7a:46:7f:1f:82:ab:7e:b0:1e:1d:0d:7f:da:75:c3:
51:8b:5d:5f:fe:5a:94:b6:f8:9d:43:0c:a7:2d:02:
a2:2a:06:0c:25:a8:2c:21:a2:ab:d8:58:de:97:07:
f6:0d:73:52:e1:b3:53:88:f3:69:90:f0:b0:b9:b0:
7c:23:35:81:61:8e:c6:86:5f:bd:a1:cb:6a:c5:54:
ff:0d:96:82:8a:98:ea:bf:0b:1a:67:2b:65:33:dc:
fa:b8:df:e2:f9:a8:f6:7e:2d:61:7c:67:20:d7:ec:
c0:dc:f3:74:9a:cb:9b:70:f7:a9:18:cb:6c:33:af:
70:b6:53:33:9d:dc:e1:64:1f:ae:b3:ad:26:b1:b2:
43:f8:ca:47:36:9b:39:27:dc:2a:fc:db:16:ea:dd:
ff:bd:d4:4b:24:59:39:fd:85:fa:3d:7a:f1:37:81:
ec:a1:be:52:c5:59:8e:f5:9c:ee:a6:08:e7:0f:bb:
67:84:3d:6b:3c:16:d8:32:c5:24:88:bc:1e:82:79:
fe:31:35:c2:ff:61:78:df:60:22:78:9b:25:be:d8:
93:37:1f:12:06:cf:12:d6:6d:0e:e6:3a:85:b8:03:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EB:C6:3B:35:56:C9:C7:75:64:C0:C7:C2:9A:68:66:3E:4F:15:E6
X509v3 Authority Key Identifier:
keyid:7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bb:b9:47:8d:c5:cd:ef:30:78:de:15:b2:1b:32:5d:b5:65:
65:2e:b7:37:a5:ae:e6:21:5b:6d:b1:1e:85:f2:86:ed:d3:ad:
9f:96:0b:65:79:2e:06:0a:d4:1a:a3:2d:ee:23:ba:c2:56:04:
44:8e:7a:b8:1d:cb:5c:00:d7:29:51:86:8e:11:3a:74:ba:03:
ea:ee:a7:99:ca:ea:ee:69:b6:4e:dc:a0:49:b1:99:a0:76:2f:
7f:9e:59:64:0e:7e:6f:cd:fb:48:55:cf:d0:68:ae:c2:55:b4:
ad:7f:55:ae:34:71:bf:55:04:c2:71:a4:0a:ef:e9:e6:76:06:
f5:09:44:56:8e:22:bb:71:d0:e7:07:a3:d7:e9:7c:41:2b:da:
96:1b:70:b4:d8:89:ba:dc:17:d6:b9:2c:64:27:27:3a:23:d4:
a9:ee:18:f8:cf:59:b8:b2:49:55:98:0d:6f:e2:e7:20:b8:13:
bf:4f:4a:de:94:da:c5:8d:94:22:51:93:76:3c:67:b4:cc:36:
ee:58:43:75:a1:49:af:6b:8f:d8:94:00:61:da:62:a1:fd:41:
ae:2e:30:83:1e:37:c0:82:4b:6b:73:82:67:06:d8:02:58:35:
9a:dc:8e:1c:9e:42:34:9d:7a:75:1d:83:a8:34:d9:fb:23:b3:
4c:c3:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:30:46 2025 by rpki-client