Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier: Bxwa4qCDBagZLrJw3UDmspKGEFhPiU/mLZFCpcZoCYE=
Subject key identifier: BF:CD:50:10:AA:97:6B:D4:89:85:BD:12:45:94:4B:33:A4:CD:F0:2B
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial: 0196BF6F3E88E9A9BC577FFF3D947D745CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number: 059B
Signing time: Sun 11 May 2025 13:01:00 +0000
Manifest this update: Sun 11 May 2025 13:01:00 +0000
Manifest next update: Mon 12 May 2025 13:01:00 +0000
Files and hashes: 1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: LpZc34qfQqKZ9Wb3fo3iG3j3HV94f2hTzmv0RhGHF9Q=)
2: qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa (hash: aqycyjtdIZXGI72ztTizlT0ZMLibQUMgGBBwchmGGPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:3e:88:e9:a9:bc:57:7f:ff:3d:94:7d:74:5c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Validity
Not Before: May 11 13:01:00 2025 GMT
Not After : May 12 13:01:00 2025 GMT
Subject: CN=bfcd5010aa976bd48985bd1245944b33a4cdf02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:b9:7d:07:69:7b:d3:b9:d1:b2:30:85:44:
0f:c7:a7:26:36:d0:4f:1f:a9:93:6e:c1:0a:02:2f:
1a:eb:5c:29:74:54:fc:d5:f7:fc:23:9c:62:0c:51:
95:ad:13:ac:b8:97:cb:5d:2e:69:1e:fa:46:cc:94:
2d:b5:12:3c:bb:bd:c1:1b:fb:61:5a:ef:c4:40:a0:
9e:47:dd:42:9f:f9:5c:2c:87:69:f8:11:38:ea:4a:
81:2d:f9:d9:56:64:25:89:3c:95:ed:82:7c:f2:90:
9b:41:7d:07:16:c2:29:ca:bc:cf:9c:bc:d9:29:e6:
b0:6c:3c:cb:de:e7:2b:ea:6d:48:57:e5:29:1b:26:
cb:b6:b9:5a:e7:1e:ff:99:ca:1f:fd:da:34:94:54:
ba:ee:3a:26:6b:70:ba:a2:5d:8f:be:0f:86:2e:ed:
e3:18:ea:c3:15:14:4e:ed:d3:d1:4b:cb:be:c2:91:
92:7e:aa:80:16:1b:55:19:00:33:a2:b3:bc:00:91:
93:26:33:9c:3e:5f:bc:56:15:7c:39:55:bb:e6:c8:
33:43:73:48:b7:52:50:3b:dd:4c:02:fc:72:ae:0e:
56:cb:18:25:b9:c2:8e:df:79:60:37:35:97:b7:b4:
57:31:9f:db:bc:4a:ff:11:89:72:19:7d:6a:ed:c6:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CD:50:10:AA:97:6B:D4:89:85:BD:12:45:94:4B:33:A4:CD:F0:2B
X509v3 Authority Key Identifier:
keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c3:be:a4:03:0d:ee:af:a8:29:9d:18:fe:96:e1:5a:b1:7f:
5a:ea:ae:3b:79:0f:30:58:fd:ba:14:39:e1:4b:2b:3d:48:b5:
fb:dc:8c:b6:e2:33:9d:52:c1:f8:8c:b3:c9:e2:0a:08:af:09:
16:6c:db:58:e4:10:0f:6c:1d:e1:1d:b9:02:21:fa:f4:7f:e8:
50:b2:53:01:05:4b:f5:b4:f9:d7:c4:47:0e:de:51:c3:48:f9:
9e:a7:34:6e:9d:a2:2e:5e:ff:d3:69:8b:59:cf:df:7c:cb:a2:
30:e3:ff:5f:da:9f:51:a3:6e:bf:50:27:f3:88:b1:22:84:33:
8c:47:a4:72:8c:59:5d:d6:b1:5a:eb:7f:2e:c1:40:f1:3b:8b:
d7:1a:d0:de:8e:f1:82:be:11:2e:29:9a:b5:d6:19:af:8c:48:
34:a2:e0:6f:fa:30:f8:d8:29:07:43:7e:c9:32:a2:f5:2a:a8:
cc:2f:f1:4d:67:6c:03:aa:82:2a:5e:05:25:02:38:8c:9b:b7:
d4:31:63:aa:df:89:9c:75:4f:64:35:54:a9:93:fb:5c:5f:99:
db:94:b6:f1:00:e6:6d:1b:57:36:49:bb:63:0e:f0:21:c9:6e:
b6:93:96:4a:7d:ac:92:61:f3:32:cd:c1:5b:98:85:9d:50:03:
fc:8d:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:43:48 2025 by rpki-client