Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File: EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier: kiznI+fETwHT0n6GQm9iUu/UanyVOZtg+5ijiE9Og6o=
Subject key identifier: BD:30:43:A7:03:87:BB:10:67:B7:6C:4E:32:98:A2:97:72:81:A9:00
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer: /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial: 0196A8B035A0C00853567A01EFEF88477970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 03:00:42 +0000
Manifest this update: Wed 07 May 2025 03:00:42 +0000
Manifest next update: Thu 08 May 2025 03:00:42 +0000
Files and hashes: 1: 2RYqLOOOCbthDUAcjKq8EsDLRUQ.roa (hash: Q1LOM4u7XAO8escJ6IGTLdV2wb9RNCfCJR9rh+j96Ys=)
2: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: 3pe7iZpS1pohNjViu2huOJWx/LFsOZf4kR1Vo+K7084=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:35:a0:c0:08:53:56:7a:01:ef:ef:88:47:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Validity
Not Before: May 7 03:00:42 2025 GMT
Not After : May 8 03:00:42 2025 GMT
Subject: CN=bd3043a70387bb1067b76c4e3298a2977281a900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:d4:51:b8:6c:69:d7:8c:8c:2a:4c:d8:a2:
e5:f4:a7:52:ba:25:ca:4a:5c:02:9b:58:e7:29:c6:
ae:96:0c:a9:61:e1:79:be:c2:4a:5a:6b:73:41:92:
0a:e3:a6:9d:9c:e8:20:47:13:e7:a3:51:37:25:10:
19:27:54:e2:9b:46:84:61:e5:83:17:b7:cd:f0:3d:
49:20:25:fc:5f:93:f2:a2:e1:c9:ee:01:c2:d1:04:
b0:89:95:ba:7c:c5:7e:19:ff:7f:21:f5:86:43:4f:
13:13:92:ee:9b:34:28:a5:d6:f2:d6:b1:f6:b0:ed:
03:90:54:e9:5e:4a:5a:7a:43:1e:3c:9e:16:1a:ab:
2c:f4:77:58:8f:de:fe:ff:05:34:50:62:62:38:be:
2a:7c:2f:ab:25:36:b5:5a:ec:c9:0b:cb:a4:4f:d6:
21:3c:6a:4e:10:71:e0:a5:22:fb:db:05:95:de:37:
a1:06:cb:c4:d1:68:6f:df:91:97:c0:72:f2:0e:78:
cb:fc:b7:c7:f6:87:0c:29:e2:f3:03:64:58:0a:9d:
d9:be:05:7a:59:35:66:17:fa:11:70:94:c6:bf:cc:
a4:4b:5c:79:84:d0:e6:a8:b4:c2:40:3e:94:4b:11:
f3:dc:94:5c:0c:2c:a7:e2:f9:c9:7f:02:4e:01:ca:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:30:43:A7:03:87:BB:10:67:B7:6C:4E:32:98:A2:97:72:81:A9:00
X509v3 Authority Key Identifier:
keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:30:85:88:9c:54:f2:33:0d:0f:f7:13:cd:7e:28:68:50:19:
26:68:88:06:0d:bd:5a:66:06:cf:3c:6f:c5:65:79:ba:cf:a2:
3a:b6:c4:ca:e8:62:0e:3d:3a:cd:2f:02:b5:da:11:fa:26:31:
0b:5d:c0:3a:0a:7c:d0:da:33:66:5b:f3:53:cc:27:4e:11:36:
12:51:5e:b7:c4:e8:10:70:bc:eb:2e:79:2f:52:df:88:2c:bf:
4b:70:67:f9:1c:7f:3c:65:4a:5e:de:87:80:48:80:81:e0:e0:
99:37:e9:db:af:4b:98:19:e1:5b:50:6d:e0:c5:22:98:13:eb:
98:0a:4e:d4:64:5c:44:ba:ae:f2:ba:06:3e:2a:69:34:18:c8:
3d:67:a3:61:af:14:c6:35:d4:f4:69:c9:ec:6b:3f:bf:b9:ea:
01:f7:47:e1:9e:14:dc:71:92:0d:9a:69:d3:82:ee:e8:7b:ed:
74:1d:85:ae:0f:af:03:96:fc:62:4b:d6:58:15:49:d9:f2:a6:
fe:17:5b:9f:e2:3d:54:3d:50:0f:b4:d6:ab:0b:cb:a4:12:27:
89:0e:1f:72:e5:4f:21:93:3c:46:53:a9:d2:1f:e9:f8:dc:2e:
a4:c7:1f:d5:e7:5f:fb:c2:ac:91:e1:a1:d2:47:79:fb:85:28:
81:41:5d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:39:30 2025 by rpki-client