Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
File: ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json)
Hash identifier: Gsbrt6UJZF+hq7HxnGEFGXBFvG0IGFyBVoys0un3YSk=
Subject key identifier: 26:94:32:36:85:85:E0:E6:D6:03:C7:5D:B1:EE:C4:A4:8C:66:83:9F
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Certificate issuer: /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial: 0196AD31838020CD1BD83275658A94B395E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
Manifest number: 05BF
Signing time: Thu 08 May 2025 00:00:25 +0000
Manifest this update: Thu 08 May 2025 00:00:25 +0000
Manifest next update: Fri 09 May 2025 00:00:25 +0000
Files and hashes: 1: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: dEEGbKjf+OVaJBhQd20NzI0WUZsagR4WFxtC2HINpMc=)
2: rrzmdyWA4bgkSbtkgxt2VTc7jQc.roa (hash: 3HCjVA9zph5GDxZYybmBotr1OhtKY80nics7udLMWag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:31:83:80:20:cd:1b:d8:32:75:65:8a:94:b3:95:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Validity
Not Before: May 8 00:00:25 2025 GMT
Not After : May 9 00:00:25 2025 GMT
Subject: CN=269432368585e0e6d603c75db1eec4a48c66839f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:7e:11:cb:bc:2f:03:b6:d8:fc:49:e1:c3:
a6:95:ca:12:76:2a:3c:2e:a7:1f:53:2c:a6:33:80:
e1:22:11:23:3f:d6:40:df:15:4a:ed:8d:21:48:91:
3e:9c:e2:43:e8:28:c1:75:a9:70:5b:e0:37:02:38:
9a:6b:9b:f4:90:78:ff:ed:d0:2c:be:3d:95:12:eb:
19:ee:2f:8b:a0:18:76:82:90:27:ff:1f:4f:81:2e:
a7:d4:bc:1b:31:68:d3:62:04:3c:f5:3d:1a:e6:ed:
c7:69:25:a6:fe:48:0d:8f:19:b9:6e:06:1d:cb:b8:
39:14:ed:55:f5:fd:c1:a8:31:81:2a:c1:c2:26:b8:
f8:09:a9:37:ce:f2:1f:4c:f2:32:aa:0e:d2:19:8e:
51:6b:ad:54:61:ba:18:fa:69:5d:a2:f9:0e:1c:e9:
ca:cd:bb:8a:bb:9c:8a:9e:ea:ea:eb:fa:96:c5:05:
96:ea:e5:c7:6e:86:bc:98:93:40:61:80:83:27:80:
75:d4:58:76:eb:81:d5:49:ea:c8:de:ee:68:2f:a7:
52:16:6b:00:14:38:4a:66:37:80:9e:77:ad:e8:1e:
e5:6f:da:bc:17:fb:7c:5b:43:7b:73:dc:03:a7:3e:
35:3c:1b:ed:58:d0:e7:03:0a:aa:9e:49:a2:cf:46:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:94:32:36:85:85:E0:E6:D6:03:C7:5D:B1:EE:C4:A4:8C:66:83:9F
X509v3 Authority Key Identifier:
keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c9:b7:5e:0f:5d:91:09:0e:dd:04:7e:42:d7:55:35:25:1d:
f1:a1:cc:3a:bb:23:db:1e:12:bb:41:20:cd:2f:8c:67:32:d3:
c6:10:b7:33:ed:02:88:86:14:3f:0e:09:cc:10:45:23:1c:d7:
1d:e3:a5:9b:c4:54:e7:05:4d:14:24:47:f3:c0:a1:8e:2d:ee:
c7:d9:ca:da:bd:71:bb:ed:58:05:b0:5b:70:db:a5:0e:71:67:
f3:46:63:6f:26:d0:bf:08:21:44:c1:b7:05:08:c4:38:a3:01:
16:c3:ec:52:bc:1d:60:e8:e5:75:b1:6d:47:5e:f0:97:b6:7c:
97:6c:be:03:1f:91:8a:4f:01:f0:5d:0a:f9:76:7e:05:27:19:
8b:0e:cb:6f:77:74:5d:ff:0e:ab:b8:cb:4d:e2:49:c0:b8:b6:
47:6d:c9:6c:32:25:2c:89:bc:c3:69:bd:5c:8c:94:80:11:40:
5e:da:9d:cb:78:b6:b1:5e:ce:10:fb:31:12:97:59:da:09:26:
8f:d4:92:d1:01:aa:60:10:6a:47:54:8b:fe:c1:bd:16:52:a5:
46:f4:6b:9f:66:28:1c:6e:b6:a3:cc:e3:95:03:6b:0f:2d:c2:
dc:a8:16:c2:c7:68:02:76:70:bc:96:e9:46:80:43:36:b5:78:
3b:a0:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:38:05 2025 by rpki-client