Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier: 3ym2EFND0E7lwVmPmZhS8JvDOvQBemgKz8aejpMmaQs=
Subject key identifier: A7:47:32:B8:78:84:97:F9:73:85:E0:3C:C9:F3:59:6D:E1:B4:56:20
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 0196C8E010316E34D882056F71334C7A2BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number: 11EA
Signing time: Tue 13 May 2025 09:00:49 +0000
Manifest this update: Tue 13 May 2025 09:00:49 +0000
Manifest next update: Wed 14 May 2025 09:00:49 +0000
Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: YlHUJpWb5z7OJSO1id6Hthwebwc2P9UT/9YtuadL4Mk=)
2: f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa (hash: jPD7nunzn9cSBTS41yie793CY1UObq7bXZ4qPAfEbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:e0:10:31:6e:34:d8:82:05:6f:71:33:4c:7a:2b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: May 13 09:00:49 2025 GMT
Not After : May 14 09:00:49 2025 GMT
Subject: CN=a74732b8788497f97385e03cc9f3596de1b45620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:4d:f9:bf:18:43:35:e9:06:fa:9c:e3:d2:
0e:c0:60:f0:33:b6:79:cb:3d:de:5a:99:5e:9e:5a:
3c:6d:ab:dc:ba:b7:ac:82:17:ea:96:53:b5:8c:49:
02:97:76:04:95:6e:fc:a0:55:9e:41:f3:7b:51:2c:
ee:71:39:56:69:70:55:d3:6d:07:ac:26:c1:10:53:
8b:69:6a:e5:7b:a0:b8:ec:1b:b1:c0:ef:51:ff:70:
54:09:a6:48:85:09:4f:7e:7e:27:b2:8e:3a:4a:1c:
2c:67:bb:5e:2e:b9:5d:7c:9e:29:75:59:ef:df:f8:
d8:99:db:35:ad:a6:ee:f4:c6:27:87:64:1d:0e:13:
a5:55:be:e2:69:24:1f:a0:67:6b:a5:a5:a9:1b:fa:
c6:81:fd:ba:85:f5:23:45:76:b2:5d:2a:0f:1d:c0:
96:c8:b7:0d:c4:95:35:e0:84:6f:44:76:60:4f:37:
b2:24:97:aa:d6:76:5a:8e:81:3c:45:03:6d:57:5d:
8a:ff:41:77:04:eb:9c:b9:0f:bd:7e:38:8d:3f:a0:
fc:da:e5:c4:8c:6d:ad:32:91:b4:44:03:79:dc:44:
0b:37:c1:05:28:5a:ec:41:ec:9b:e0:99:d9:73:bf:
1b:ab:dd:97:47:3b:94:b1:17:88:83:9e:8e:0e:73:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:47:32:B8:78:84:97:F9:73:85:E0:3C:C9:F3:59:6D:E1:B4:56:20
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ae:10:16:59:09:73:d4:3c:6c:aa:67:c6:2a:1c:8d:38:b7:
f0:78:d0:22:d3:e3:0e:2f:20:c5:1b:9c:54:40:72:4c:69:79:
68:55:95:cb:07:fc:97:e3:99:58:7a:cb:2e:c8:51:51:ce:3a:
52:80:48:bf:aa:4c:07:66:ab:6a:88:b4:20:b7:59:fa:d4:01:
ad:a0:d6:51:d6:cd:fa:5f:07:36:45:1d:05:50:19:4b:78:cf:
aa:66:c1:a2:db:d3:a4:45:0a:de:e5:22:3d:c4:52:10:a0:0d:
29:38:2b:8c:df:16:7e:f3:fc:05:6f:34:15:dd:d1:a0:b5:72:
55:6a:af:9f:df:21:bf:0d:97:99:84:0c:a0:55:37:89:c8:a1:
59:00:c1:90:cb:d9:1a:55:e9:88:2f:1b:4d:91:7c:fb:93:b4:
96:1b:44:5b:e4:c5:c0:98:b8:fc:2a:a6:a2:63:5a:bc:ca:ca:
2b:68:a0:48:ac:02:23:6a:91:23:87:4c:f7:9d:64:3e:1f:59:
ad:4e:6d:fb:ab:2e:6e:e7:d1:2f:26:d4:dc:c9:24:29:bf:6c:
2e:31:24:43:08:00:56:c8:7a:92:2e:2f:93:77:d6:1d:d4:2f:
fc:fe:f6:cf:35:98:0a:bf:17:f0:4c:a6:82:20:d4:ec:63:a7:
eb:60:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:31:12 2025 by rpki-client