Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File: EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier: d2vha/bRospslx/fhOWCiex/qEiCi+0tRThav8ATCJU=
Subject key identifier: CB:06:F1:6C:70:A8:5A:64:4F:5F:36:9B:71:DE:52:F3:C5:1B:C8:72
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer: /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial: 0196C3F0EF2722AEA58F611B5843D804907A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number: 0FDC
Signing time: Mon 12 May 2025 10:01:08 +0000
Manifest this update: Mon 12 May 2025 10:01:08 +0000
Manifest next update: Tue 13 May 2025 10:01:08 +0000
Files and hashes: 1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: YhYe4C1dQj+mV8UemVmq0JqcNg8lruHnUSscCkY0Ekk=)
2: Qzsv6JoCjjcwb2ZwyNYxWYWt4Xk.roa (hash: ToKPVGU4kUs10EflzvqcGH84k9PN/XYqsUpdwJ4GkyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:ef:27:22:ae:a5:8f:61:1b:58:43:d8:04:90:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Validity
Not Before: May 12 10:01:08 2025 GMT
Not After : May 13 10:01:08 2025 GMT
Subject: CN=cb06f16c70a85a644f5f369b71de52f3c51bc872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:65:c7:fd:d5:ad:93:2f:d0:82:09:b8:e5:
5c:77:89:e4:21:bb:65:42:d0:a7:ed:54:de:2f:5c:
5d:40:78:cf:a1:a5:bf:5c:af:a4:0a:15:7c:89:2c:
1d:83:71:7f:5d:2b:d2:2f:1c:35:c8:cc:68:62:67:
f7:cd:8c:d4:78:be:40:42:e3:6c:c5:9e:43:57:98:
00:3e:44:15:49:30:9b:fe:73:9e:36:e7:83:68:1f:
32:ee:77:18:ca:87:6f:97:66:91:4b:87:26:f3:ab:
a4:a0:7b:fe:3b:a9:3d:6c:cf:b7:25:02:4c:0f:80:
16:d0:fa:88:7f:e5:71:8f:ad:fb:72:f3:88:ed:c0:
35:d6:56:29:83:32:99:56:7c:61:3d:12:59:ee:98:
a9:b3:0c:21:59:c3:ae:be:5c:da:d4:f6:d3:fc:fb:
39:d4:5e:e5:66:52:3d:59:19:00:a5:30:a9:dd:59:
8c:ab:4f:9f:38:66:33:c5:5d:37:2c:de:66:f2:3b:
72:fd:17:1b:6a:db:ce:96:e1:9b:9d:91:c4:d3:e2:
fd:08:b6:47:52:ce:d8:1d:89:93:44:86:79:8f:f0:
9d:34:c8:73:1d:bd:14:30:6b:99:b8:4d:a4:6c:ff:
b1:13:3d:26:ce:e9:60:16:de:4d:68:9c:88:61:c6:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:06:F1:6C:70:A8:5A:64:4F:5F:36:9B:71:DE:52:F3:C5:1B:C8:72
X509v3 Authority Key Identifier:
keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:78:4d:22:04:c5:71:fc:8e:eb:c0:2a:91:b4:5e:d1:28:bb:
af:28:d4:da:3a:31:e0:16:f1:1d:61:a4:af:4c:6a:55:21:a3:
c3:bc:af:81:56:ca:53:d4:8b:71:0d:4d:0b:df:21:f0:3c:61:
25:c5:c4:8c:d3:21:ed:72:a8:94:2a:f9:eb:ac:09:3c:a8:be:
23:ca:fd:34:af:2c:52:54:b9:f4:d1:ba:48:0a:4c:09:8a:5c:
3d:ea:61:3f:26:3a:8c:41:a6:b6:ac:ce:2e:06:6d:f7:8c:19:
6c:f3:b6:75:83:77:a2:0e:bd:71:54:cd:8a:07:3e:99:29:20:
bb:5c:a0:63:0b:44:bc:66:d6:70:36:fd:a5:ee:67:f8:03:a3:
57:36:fb:24:37:36:56:a6:94:a7:77:90:44:e5:16:52:21:fe:
f2:81:3c:21:8c:9a:a7:f1:fb:53:16:27:d8:8d:ae:b7:ef:c1:
59:4b:46:29:7c:69:15:c6:60:42:9a:59:54:40:46:96:ea:20:
5d:d6:2c:7c:e3:f2:53:f8:f5:01:f6:0f:e9:40:36:3e:db:76:
89:13:72:35:10:fd:f7:45:a9:a4:82:2d:c6:10:dd:16:f7:d1:
4a:b2:34:5a:2a:f9:78:c9:cd:45:5f:2e:5e:30:66:e5:6d:83:
e1:98:75:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:30:23 2025 by rpki-client