Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
File: ewGNKlH-8tdsYmAFVsZtV8t-knA.mft (raw, json)
Hash identifier: QTgP0XTolRPMdkz0ZxjudY3HgfVZoGsYGwgww3CsMCM=
Subject key identifier: C5:B0:14:FF:68:20:68:8F:5F:EA:B2:7B:66:DB:D1:B8:D1:BC:B0:5E
Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
Certificate issuer: /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Certificate serial: 0196CE0633D830026091B34ACE051441A7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
Manifest number: 055D
Signing time: Wed 14 May 2025 09:00:35 +0000
Manifest this update: Wed 14 May 2025 09:00:35 +0000
Manifest next update: Thu 15 May 2025 09:00:35 +0000
Files and hashes: 1: ewGNKlH-8tdsYmAFVsZtV8t-knA.crl (hash: KhXtlKGs0nvCMIclNEmrzv/M3Xeamf/WAHXedRil46s=)
2: rWkvauBEMYRnIGnTGjbge3-FesI.roa (hash: NZqLavHilBq1RJJKbmTkXGJJieLsNjrQomu+4A2D7i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:06:33:d8:30:02:60:91:b3:4a:ce:05:14:41:a7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Validity
Not Before: May 14 09:00:35 2025 GMT
Not After : May 15 09:00:35 2025 GMT
Subject: CN=c5b014ff6820688f5feab27b66dbd1b8d1bcb05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:b1:07:b1:15:f9:dd:9e:51:c2:be:6d:62:
8b:22:86:c5:b6:f1:54:c9:b4:05:cd:8d:a6:9a:6e:
b6:92:59:19:17:cb:53:c8:18:44:c3:e3:ed:70:34:
3a:e8:a8:b1:40:c8:9d:90:51:2a:82:ca:92:e5:a9:
0f:d9:d4:05:ae:21:17:99:e6:73:65:7a:00:42:09:
b3:91:97:d1:05:3e:e8:b3:ec:e7:db:cb:9a:9f:74:
cb:51:56:74:1e:1d:40:34:f0:7c:df:8b:a3:8d:f7:
d7:8c:ae:50:3c:3c:41:38:de:10:e8:ed:3d:b9:89:
eb:d3:49:44:d9:31:1c:7e:94:d3:42:bd:53:b1:e4:
2a:d5:80:52:26:c2:dd:15:e1:be:d9:86:5c:72:69:
6b:ac:9f:96:9d:93:1f:70:c9:c8:12:59:ad:0d:8f:
a4:fc:85:c1:a7:a7:7a:3b:7f:b2:3c:41:68:67:2e:
ae:4c:54:79:af:b5:ea:3a:6e:03:f6:ce:ab:44:35:
16:7a:b5:f3:32:3e:14:c5:38:91:0a:e8:65:1b:9f:
42:db:97:ff:ed:c1:20:cd:5e:56:62:42:ca:8f:3e:
03:b6:ec:63:e9:67:4c:74:24:cc:ba:45:65:a3:49:
64:58:02:77:9f:e8:ed:4b:47:e3:fc:59:56:be:76:
fc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B0:14:FF:68:20:68:8F:5F:EA:B2:7B:66:DB:D1:B8:D1:BC:B0:5E
X509v3 Authority Key Identifier:
keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2a:0e:c0:a4:be:10:c8:3a:b7:3d:37:c3:23:cc:fe:42:9e:
ce:17:56:8d:38:25:d2:2c:8a:20:7f:69:e9:76:1c:9c:f6:88:
12:10:74:62:cf:9d:df:89:be:49:29:c2:55:f5:e9:31:91:b1:
af:5b:03:9c:52:da:15:57:ea:13:3a:c4:b3:dd:7d:70:69:77:
18:27:e6:73:fe:ed:7f:86:5f:31:e2:ee:a1:65:c1:eb:ad:90:
a8:3c:21:51:52:6e:dc:f0:94:9a:ba:ad:72:51:06:f6:07:ad:
50:d9:48:d0:61:6e:6e:f3:c3:b0:84:f5:81:92:ad:5a:0b:ec:
8d:a0:8b:58:ed:e7:0b:16:03:99:3d:85:b4:4a:27:f3:46:f8:
7e:81:41:d1:0c:5a:80:a1:2b:7c:9b:4d:01:d8:85:bb:49:49:
03:65:2b:48:3c:45:67:52:d8:c1:92:04:65:67:be:66:d0:a1:
3e:04:7e:ae:e3:31:e0:3d:17:59:eb:a5:c2:4d:50:0b:50:5f:
aa:41:52:87:e9:57:1f:33:5e:62:4a:ef:79:ea:cc:3e:a2:56:
0e:a4:98:53:d5:46:33:c7:29:01:4f:ae:53:74:a3:59:c6:7d:
ce:f7:e7:70:11:c4:44:91:cc:e4:ec:2f:d5:6d:ac:22:94:ec:
f0:df:6a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:44:28 2025 by rpki-client