Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: YBKmsKQWoOWt4KOVeaccJN2q5zdEDLJX+gwoEFggtiI=
Subject key identifier: 60:E7:D0:A8:EF:70:EE:A9:2D:EF:9B:06:7A:2E:8A:FD:28:79:43:54
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 0196A72F95E15F58963BE61C8915E827EA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 20:00:35 +0000
Manifest this update: Tue 06 May 2025 20:00:35 +0000
Manifest next update: Wed 07 May 2025 20:00:35 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: OzV1DaTfbcap3pNmvwk8mkI5lMmeEddmaKyOFdNhhVM=)
2: XOs9GWbQQcB_n_z1bgeOfcG86tI.roa (hash: +cMtfCuRrVq0izGBXZFPK0kvh5ocAHr52g05OcQaim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:95:e1:5f:58:96:3b:e6:1c:89:15:e8:27:ea:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: May 6 20:00:35 2025 GMT
Not After : May 7 20:00:35 2025 GMT
Subject: CN=60e7d0a8ef70eea92def9b067a2e8afd28794354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:f6:f1:c6:12:a8:31:a6:22:d3:79:60:6f:
22:9c:26:95:81:62:88:b6:62:6a:46:29:06:40:e0:
99:d0:47:83:37:81:5b:55:60:b0:7a:f1:1f:19:d0:
7b:59:5a:dd:00:ef:a3:53:be:87:24:8d:b7:10:68:
d8:e6:62:e2:74:6d:6a:6b:da:d7:f0:66:f0:17:d3:
2b:22:81:32:9c:8e:08:e7:e2:14:6f:93:35:7f:77:
39:e6:50:f8:c1:70:78:d6:a5:2e:b5:6f:f2:3c:b9:
5d:ec:55:b7:88:3c:ec:a2:b8:23:99:bb:d7:3b:be:
7e:43:fc:3a:26:a8:a0:af:5f:e5:eb:85:01:eb:dd:
ba:2d:0a:45:92:17:7a:6a:e4:51:6a:26:e4:a6:79:
1b:97:20:67:9f:86:3d:86:39:05:25:41:9b:0a:9e:
57:28:7e:b2:c7:b4:ed:48:4a:78:28:44:be:ee:30:
69:a8:5c:e4:a9:7f:93:4b:ac:6d:9d:f4:a0:b5:3e:
6d:8b:fd:d4:b9:59:db:18:1a:02:b6:43:78:6e:19:
f4:4b:1b:c0:0c:3b:48:66:4b:fd:65:7b:d4:df:c5:
b6:1e:c7:72:e9:65:13:b2:8f:91:60:10:08:bd:8c:
d7:52:ad:4f:7e:f2:8d:01:b4:18:bd:55:05:83:80:
48:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:D0:A8:EF:70:EE:A9:2D:EF:9B:06:7A:2E:8A:FD:28:79:43:54
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:12:7e:d7:fa:1f:50:13:da:b4:d4:6c:65:0b:d2:8a:ad:c1:
98:00:ad:14:9f:92:f5:68:22:60:06:c2:d3:3a:fe:74:2b:85:
93:3d:c3:95:25:b1:b9:cb:06:42:74:0f:44:c2:18:66:13:4d:
02:99:0e:68:7f:44:c9:b6:28:62:09:6b:ee:60:a4:07:37:0d:
f8:8d:60:88:d2:45:70:f2:19:2c:b7:3a:48:dd:66:48:9c:26:
9e:a0:b9:82:05:5f:12:b3:3e:bc:0c:c0:e5:ab:15:56:9a:22:
f4:be:7d:67:b3:fd:75:a0:33:a9:0b:65:98:63:f6:94:28:c9:
d9:c5:54:e0:4e:5e:2b:19:7e:ae:64:4e:b9:3e:e7:4c:da:f2:
36:e8:47:28:86:1d:57:29:71:e7:7b:e1:a0:41:bc:f9:3a:6a:
a0:9e:7e:dc:63:cb:1a:0b:13:a8:95:48:2e:6d:a5:97:e0:87:
f7:87:e3:00:3f:c9:48:75:a6:fb:42:a3:ef:84:b7:cb:67:d0:
d9:54:1b:af:10:74:94:39:93:4a:da:a5:5b:3d:74:58:56:d3:
48:2c:85:26:fc:75:6c:c0:eb:b4:04:07:68:15:69:43:1f:da:
ae:d4:1e:02:7a:cb:2c:f3:5b:21:e3:49:6a:5d:5d:43:84:df:
08:a5:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:02:46 2025 by rpki-client