Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
File: EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json)
Hash identifier: JFwpPnXgHhHf3wAoenUJxtE02D5u8vPLVGK55X38w/g=
Subject key identifier: B3:08:93:41:3F:35:9A:58:B4:C1:C0:86:7B:9A:8E:0F:AF:05:9A:D9
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial: 0196BD124DBCBB5F5099B1F39AED1909A78C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 02:00:15 +0000
Manifest this update: Sun 11 May 2025 02:00:15 +0000
Manifest next update: Mon 12 May 2025 02:00:15 +0000
Files and hashes: 1: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: eLTyeY0Ls31wd06LGgCk2od9qEt+3bLjBXzOmGeLEBY=)
2: LJjxj6e05gMbMPexgYm_2K1KfnQ.roa (hash: kmiUoJw8fQAjfgqPrnvVFc9aSxKxADT5/r3oB44gMLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:4d:bc:bb:5f:50:99:b1:f3:9a:ed:19:09:a7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
Validity
Not Before: May 11 02:00:15 2025 GMT
Not After : May 12 02:00:15 2025 GMT
Subject: CN=b30893413f359a58b4c1c0867b9a8e0faf059ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:61:42:f4:85:35:d3:c7:8d:88:19:52:40:
f2:a9:04:e4:b6:6c:44:49:ae:e5:2a:f7:26:60:ee:
b3:89:47:75:f3:a6:27:88:20:73:c8:14:eb:28:bc:
c0:8b:8a:f1:65:d5:67:d8:1b:5f:96:a5:70:48:4d:
a0:b3:d3:ec:ff:91:a7:f2:60:da:8e:4d:69:2d:4c:
41:d4:da:30:c9:05:e0:10:a6:de:a9:ab:24:1d:ea:
d3:36:a5:23:ed:9c:2c:70:03:99:de:98:60:84:39:
08:ec:ab:2f:85:02:99:1c:b2:e9:e5:d6:83:01:56:
f7:0e:56:b5:01:9b:16:64:b5:bb:61:0e:a9:09:ae:
95:57:17:5d:6f:05:28:c7:9a:c4:50:2c:e5:fd:94:
e7:f4:1a:e3:20:d4:4a:47:55:9a:f2:08:25:66:50:
e0:b7:93:34:47:42:ef:65:2f:b3:f1:47:e0:41:17:
da:97:c1:1c:2d:df:00:20:80:b8:62:a0:2b:6d:a2:
25:0a:d0:4e:50:f0:59:2f:ec:14:68:b7:d1:ae:90:
51:1f:bc:60:55:cc:1e:b5:f7:b8:89:7d:8b:1e:aa:
a6:c5:d4:c5:03:0f:ba:99:fb:b8:89:e4:d0:da:09:
47:6d:65:31:b8:24:f6:a0:0c:35:98:fd:43:18:93:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:08:93:41:3F:35:9A:58:B4:C1:C0:86:7B:9A:8E:0F:AF:05:9A:D9
X509v3 Authority Key Identifier:
keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ee:18:cb:41:e0:0f:95:99:18:fe:eb:7d:ad:8d:74:56:81:
e7:af:a4:d4:97:34:b3:ee:39:a3:db:31:fc:7c:f7:2f:64:8e:
f2:bb:3e:ed:3a:be:60:3b:ca:49:ad:1b:e8:6f:0d:da:63:b8:
8a:1d:df:f5:5e:ae:9a:3d:dc:40:c2:d8:a9:77:54:af:63:00:
bb:98:d1:d8:3f:0a:62:26:68:f4:d0:98:f2:a2:1b:8e:3f:cf:
46:21:5a:80:8d:5e:ba:f6:b1:46:eb:91:84:31:b6:20:e5:f3:
9b:f7:b2:f7:72:95:39:19:d9:3b:81:c6:ee:68:57:de:2b:cc:
8e:61:54:80:79:57:35:a5:54:a1:cc:f8:fb:05:5f:97:e3:41:
0b:b4:e5:a8:97:28:76:ad:30:e8:00:bb:c5:75:8d:20:d4:88:
d3:88:01:ce:b7:c0:ad:09:cc:9c:d5:6d:23:6f:22:d4:4c:2e:
08:d5:33:73:f7:5c:79:7a:ac:e3:39:ea:bd:ff:40:c3:4d:32:
05:5f:d5:8e:4b:8b:9b:05:a0:dd:70:85:ec:d9:4b:90:5d:e4:
57:e4:d1:43:fc:17:e8:6b:2e:af:e4:3e:bf:74:1f:0b:b3:05:
74:85:e8:2c:3e:f7:89:40:f5:fb:a9:a0:6a:0f:17:e2:8e:65:
19:03:62:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:42:16 2025 by rpki-client