Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier: qp9yFDRhOZ6BDF9MiAfP7AYZgSX9imB/62DfFBX21xw=
Subject key identifier: 3A:76:61:F1:4F:DE:AC:47:0F:0E:98:CA:1D:1A:97:63:4B:38:B7:EF
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 0196CF18FEF8F48ACEA7D4AB9EA00447F724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number: 153A
Signing time: Wed 14 May 2025 14:00:43 +0000
Manifest this update: Wed 14 May 2025 14:00:43 +0000
Manifest next update: Thu 15 May 2025 14:00:43 +0000
Files and hashes: 1: 6FHQUBmvLail0AxeSMM8FFT8dQA.roa (hash: H5uT4+VjIdOpYm4p1Ez2YYLSN2170bhAaYGMnJDWIdk=)
2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: 9wpvwv3jjmhwNiXeoWvrA8i405T9PB4b6qREbzfjV9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:18:fe:f8:f4:8a:ce:a7:d4:ab:9e:a0:04:47:f7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: May 14 14:00:43 2025 GMT
Not After : May 15 14:00:43 2025 GMT
Subject: CN=3a7661f14fdeac470f0e98ca1d1a97634b38b7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:cc:9b:30:7e:97:41:d3:65:97:a9:c6:ff:
36:51:9d:f7:7b:32:1b:91:96:2e:63:fd:45:fd:6a:
b4:07:75:24:26:3e:05:e2:93:9d:d5:63:2c:1c:da:
db:68:bf:d3:3d:db:67:1b:3d:aa:1b:c4:06:1c:27:
6d:24:a0:1b:fb:ad:f6:46:93:c2:f3:7b:9b:79:50:
c5:fb:ed:41:8e:73:15:71:fa:c2:63:63:b3:fd:1a:
a1:cf:b3:4f:31:34:3c:fa:5b:a4:c9:97:30:77:38:
93:24:a8:f8:37:44:bc:12:b3:3c:91:bb:55:1c:bc:
b1:b5:39:dc:4a:ac:7c:10:4b:1c:6b:68:41:38:a1:
84:ad:6e:8d:77:3e:19:e8:3a:a0:90:cb:00:53:e6:
ec:26:82:c2:9e:f6:f5:aa:18:1f:d0:e1:02:26:37:
44:d3:81:ad:c6:85:95:48:7b:9d:eb:06:ad:2b:db:
08:ef:c4:d4:b2:cb:a7:0a:4c:0f:f8:f8:12:f1:23:
5f:f6:f0:06:dd:f1:63:a3:7d:5a:f0:c4:5b:ab:cc:
8a:21:7c:7b:7e:27:88:25:af:c5:bd:1e:7f:55:ce:
82:20:fc:04:ab:6b:71:6e:d9:00:46:83:ce:cd:7d:
18:60:ec:c8:29:db:17:20:6e:cf:4b:0d:b6:58:c6:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:76:61:F1:4F:DE:AC:47:0F:0E:98:CA:1D:1A:97:63:4B:38:B7:EF
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7c:29:3c:6a:df:b1:f3:37:93:7f:10:8c:4d:84:07:82:eb:
c0:1b:43:b6:51:7d:5a:0b:dc:24:03:4a:6e:66:02:ef:76:8c:
0c:05:0a:fa:90:7e:db:e1:84:c6:f5:07:d5:af:a1:07:70:2a:
8c:85:cb:5d:f0:4d:e9:ac:71:33:d1:cd:74:cc:df:78:99:64:
bb:20:83:b6:c1:dc:ac:a8:d1:60:af:e1:6f:8a:43:66:64:2f:
b2:b8:47:86:68:af:e2:53:4e:de:a3:a0:e8:5a:c2:16:64:7d:
60:9e:e1:06:ac:ea:89:57:2f:af:d8:88:f5:ac:95:4b:eb:9e:
42:d1:7b:62:cd:38:3c:2f:de:77:9b:b7:f1:35:42:0f:51:86:
78:ce:df:9f:64:0f:0f:17:5c:35:06:85:ae:17:42:c9:c7:c3:
13:a0:d0:20:a5:7f:cd:33:d4:64:d9:29:0b:dd:06:26:cf:bc:
65:e6:3f:a4:58:79:42:a4:ba:09:1d:57:e8:9b:cb:b6:99:ae:
7c:bb:9a:7d:5f:1f:93:0a:a4:7f:12:5c:95:e8:40:c2:8d:01:
7a:47:a5:33:1c:91:06:14:55:de:2a:a1:39:02:2e:84:b7:c2:
e9:68:5f:85:e3:06:b5:d8:0f:34:a1:bb:ae:d8:09:fd:57:23:
6b:a9:c3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:27:59 2025 by rpki-client