Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier: wBD/ASKVdIWEw6Em+/GWChinEKxQzqGg2jm9WuFPDDE=
Subject key identifier: E7:F1:A7:AB:3E:63:90:6A:17:08:16:AA:51:FF:05:66:BE:BF:3E:7F
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 0196B8FEFB7887F3E634C4CEA0C5B3F7D468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number: 0E97
Signing time: Sat 10 May 2025 07:00:40 +0000
Manifest this update: Sat 10 May 2025 07:00:40 +0000
Manifest next update: Sun 11 May 2025 07:00:40 +0000
Files and hashes: 1: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: scPQGbsl3Lz0DJVsRaYagbV3nVX7wpyarGVcK21sYRg=)
2: YJThomDkTAxHB3sMffMKNvwlVog.roa (hash: q9KKD46ZbFaN4N+tLyZyztTGn9syCZbmt2p+6xanqyk=)
3: qRonRz0lP6v25g416Nv9KduKRpQ.roa (hash: BblAAkuZ7lKOAoNqkSnh1OQbrzmO29oSPkA4X1nAF2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:fb:78:87:f3:e6:34:c4:ce:a0:c5:b3:f7:d4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: May 10 07:00:40 2025 GMT
Not After : May 11 07:00:40 2025 GMT
Subject: CN=e7f1a7ab3e63906a170816aa51ff0566bebf3e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:ff:75:00:b3:45:65:5d:55:c5:44:57:32:
15:a1:b8:c2:08:e2:85:43:b9:4c:50:13:60:3b:6f:
28:9e:d9:70:5f:da:b0:06:11:b0:d7:b5:3d:f7:f4:
40:47:c4:d4:a2:29:9a:26:a1:b0:23:64:1f:f3:1b:
6c:66:54:a8:75:f1:80:5b:89:df:1c:66:ed:39:f5:
f0:42:b9:b3:3a:13:40:d7:a3:be:3a:da:6f:97:72:
db:e7:ad:84:33:87:4a:49:d6:5d:34:65:e8:0c:91:
cc:37:30:a6:1e:23:92:ba:5d:a9:a7:df:0a:8e:82:
be:9f:7e:e7:4a:42:86:45:42:2f:c7:c0:41:1f:98:
aa:74:37:d6:f5:1b:29:07:65:9f:68:d4:3d:33:46:
62:7f:57:cf:2d:7a:15:53:37:4a:61:3c:e7:7d:39:
93:36:29:0a:49:4a:b4:e1:74:29:f8:1b:6b:3f:c0:
9b:ca:68:37:9c:d2:4c:a7:3d:2f:e3:04:3e:35:85:
69:81:fd:c7:51:74:59:8a:e4:94:06:7d:a6:d8:87:
26:e0:ba:fd:49:8b:ce:65:e3:33:9b:8e:9e:09:bc:
4a:e4:c2:50:f0:d4:29:25:cf:3a:55:db:3e:55:bc:
7b:af:77:5e:b2:0c:10:74:bb:9d:de:5f:d7:55:8e:
dc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F1:A7:AB:3E:63:90:6A:17:08:16:AA:51:FF:05:66:BE:BF:3E:7F
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f9:b3:9d:f3:82:21:89:a2:25:ef:0e:fc:7f:f6:09:5e:07:
58:7e:12:dd:84:85:d8:83:bb:ea:0e:21:b0:b7:cb:3f:4e:27:
09:ce:99:e1:fc:e7:64:ac:ac:76:2e:8d:b7:1f:97:c4:07:b2:
1a:c7:76:40:88:c3:28:52:6c:2c:4e:2e:d6:7c:61:80:1a:5e:
07:79:e6:e0:b7:86:f8:53:d1:5f:ee:55:8c:b1:b9:b2:32:e7:
4e:79:9a:ae:24:ef:16:fb:7b:1f:36:ef:1a:10:14:0c:78:4d:
fa:67:ca:0c:88:71:9b:87:b8:33:78:a8:77:49:be:7d:93:be:
d2:d8:e2:da:39:88:2c:36:90:5b:0a:59:f0:e7:8a:d4:3b:b1:
67:ec:42:56:a8:58:fc:fd:87:03:87:b9:b6:7f:ec:ee:12:67:
68:5e:ac:93:4e:5c:51:5d:3c:9d:05:87:14:e0:6e:2e:52:ce:
44:98:77:fc:92:79:de:d3:f8:44:12:0c:83:18:b3:02:72:23:
32:44:07:d1:82:81:a9:ea:3e:12:4c:55:90:e6:98:36:bb:2c:
63:0c:46:fe:d0:cb:21:43:85:5d:03:de:b9:4b:53:85:89:e3:
14:49:84:ad:f9:8f:b4:1b:18:e6:80:70:13:97:84:8b:ff:07:
26:b3:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:53:43 2025 by rpki-client