Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File: ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier: ZwMKAzLn0opXbymA5JMgSapMaxNyR+Eqr0lVw8DV/C8=
Subject key identifier: 2A:50:32:9D:AB:8B:73:67:F4:6B:A9:27:9C:E4:FA:4A:D9:E9:0A:C6
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial: 0196BEC9C350D6FF05F93AE6579458343E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number: EC
Signing time: Sun 11 May 2025 10:00:15 +0000
Manifest this update: Sun 11 May 2025 10:00:15 +0000
Manifest next update: Mon 12 May 2025 10:00:15 +0000
Files and hashes: 1: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: m9H9fz8WSnzrtvOuuF6GR0MqZkAbafH8SPRQ12sv/JY=)
2: MWfGbekGdiIlL_QnOkQ9r-npSTo.roa (hash: NlhTGNa3FSPX/6OYQDRDJHu85zHjDwDvfSYqtIACw6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:c3:50:d6:ff:05:f9:3a:e6:57:94:58:34:3e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Validity
Not Before: May 11 10:00:15 2025 GMT
Not After : May 12 10:00:15 2025 GMT
Subject: CN=2a50329dab8b7367f46ba9279ce4fa4ad9e90ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:e7:72:d3:2a:81:ba:44:2e:7f:04:f9:46:
17:07:ed:ef:a7:8f:cd:0e:2d:7c:5c:9c:80:47:4a:
20:1c:4f:36:60:1b:42:2b:80:eb:36:f5:d4:60:fb:
7b:21:3b:a0:ac:7e:9f:d7:14:17:5f:67:d2:98:b3:
0c:54:00:d8:8a:77:e1:ab:c7:cc:a7:97:ba:8e:2b:
7d:7d:43:dc:93:4b:c4:54:b7:67:7a:3b:0f:f1:25:
f3:a3:4c:78:b1:2a:12:cd:41:f4:99:20:56:26:c7:
92:c6:fb:a8:b7:8b:e1:96:94:96:87:24:dc:05:ab:
ab:ef:9f:9e:84:3f:12:5c:85:27:19:90:a4:81:5a:
9d:34:53:59:17:85:67:74:b9:23:6b:a7:72:08:2a:
68:ae:f4:a7:30:85:47:b1:f6:9e:2f:29:e6:c0:c4:
46:3d:3f:c2:8e:74:62:42:fb:0d:f5:49:03:a1:ed:
ce:5a:a0:c2:01:39:d2:e5:db:2a:b1:6e:95:52:de:
50:42:e6:9f:84:1a:66:3b:77:d8:d2:25:13:f8:c9:
77:ad:7c:62:63:2b:1d:35:c6:c9:28:77:91:8c:9b:
32:36:65:3b:88:3f:df:51:12:82:f0:a3:dd:54:64:
20:06:af:e5:02:1f:31:4c:d7:56:f2:db:5e:33:7b:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:50:32:9D:AB:8B:73:67:F4:6B:A9:27:9C:E4:FA:4A:D9:E9:0A:C6
X509v3 Authority Key Identifier:
keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:35:28:1c:7f:9f:48:36:8d:a0:e7:81:f3:8b:2f:af:71:60:
03:85:53:85:c9:69:f0:1b:ae:00:e3:2f:45:87:59:04:f3:7a:
0b:d5:a1:1e:5b:70:e2:2c:85:bc:1c:c9:0a:f1:f7:d9:3e:f6:
fe:5a:f8:7f:e6:b0:3a:50:29:e8:a4:fb:4f:7e:a4:65:51:d2:
08:86:f7:03:88:5b:49:c3:e0:4f:ff:b3:e1:37:7f:48:ae:8b:
eb:12:fa:24:de:fa:06:37:c2:e6:cd:45:00:cf:b8:d3:cb:40:
2c:06:20:01:46:9b:34:99:46:66:b4:d9:fb:67:19:23:6e:e1:
ec:5d:5a:e4:ac:34:68:f9:75:c6:4f:b9:8a:d1:77:27:b1:f7:
03:4e:90:23:7c:cd:ba:1d:ec:37:1f:98:6c:43:ab:fd:d8:d3:
38:76:99:da:66:72:f6:03:c3:11:56:c5:70:ed:98:6e:99:10:
a2:78:61:fd:fe:a6:73:5b:02:eb:12:ae:72:74:f5:ef:e3:4e:
6b:5e:44:a4:77:7d:e0:ce:91:8d:e6:f0:33:5d:64:64:ec:92:
1e:c4:fa:aa:b0:a6:bf:88:bf:0f:9b:63:a1:73:96:03:9e:42:
e5:21:4c:c5:ab:50:b2:34:8a:96:c6:de:30:9f:8e:3f:f9:2c:
12:de:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:22:41 2025 by rpki-client