Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
File: eYkeljG7xuiuXaSyGb5Nj2H--1o.mft (raw, json)
Hash identifier: YW6M7vVHj0P7F0KxJkAaCFUDcDF3WE5CJzmtHYkhr3A=
Subject key identifier: F8:96:52:1B:0B:55:3D:53:34:7F:89:EC:5F:BC:E9:23:CD:51:86:72
Authority key identifier: 79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
Certificate issuer: /CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Certificate serial: 0196BFA5793BEF6C7443048B7D8616F060BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
Manifest number: 02D5
Signing time: Sun 11 May 2025 14:00:14 +0000
Manifest this update: Sun 11 May 2025 14:00:14 +0000
Manifest next update: Mon 12 May 2025 14:00:14 +0000
Files and hashes: 1: 14Kld9FlTNpIEyy4ZZSIDPLCHyk.roa (hash: 34XSzdoN0Twcs64CD2UYU1J4NUP6HurtAkddMACEjC4=)
2: eYkeljG7xuiuXaSyGb5Nj2H--1o.crl (hash: Fc2UvqaCUhnpqlsXdtdbC2zzE6aGNPWAH/1yO+9qDo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:79:3b:ef:6c:74:43:04:8b:7d:86:16:f0:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Validity
Not Before: May 11 14:00:14 2025 GMT
Not After : May 12 14:00:14 2025 GMT
Subject: CN=f896521b0b553d53347f89ec5fbce923cd518672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:38:96:b5:ea:2b:11:e6:2a:d5:26:34:4d:
0c:ea:06:54:96:32:18:cf:f3:58:77:a4:b2:74:a3:
ec:4f:c9:99:9f:71:42:55:5d:bc:7f:05:c4:81:01:
08:00:1d:15:f6:63:ec:48:f5:28:ac:82:15:9d:0d:
5e:af:b0:8a:fc:7e:e6:42:22:62:d5:30:c8:0a:7a:
14:ba:fc:89:fb:71:57:2d:33:d1:ce:3e:6a:ec:f6:
bd:89:e0:ae:2d:2f:d8:d3:5c:9c:bd:d8:e2:6c:79:
91:06:6e:8a:76:a8:aa:a4:df:d0:2e:2d:c9:ef:db:
61:ef:38:52:df:83:a5:f4:46:c0:34:c0:7f:c8:91:
a6:67:1a:96:4a:c4:40:71:93:bf:dc:35:d8:bb:00:
7c:bc:07:28:f1:bc:86:a9:95:b4:06:a4:34:8c:c5:
0d:6e:68:01:94:06:e1:6c:b0:30:74:21:07:a8:28:
94:14:04:01:53:a3:6c:24:af:d5:64:42:ac:70:08:
50:ba:d4:a1:b9:9d:8c:2c:f3:71:35:43:bf:8c:68:
3c:9c:7a:f8:9f:b3:be:42:93:45:3e:dd:38:a1:66:
c7:c0:65:64:25:cb:76:72:fa:d0:2b:13:c4:a3:de:
6e:53:2f:f0:a8:dc:f7:b9:bf:f8:1d:53:4f:d0:ab:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:96:52:1B:0B:55:3D:53:34:7F:89:EC:5F:BC:E9:23:CD:51:86:72
X509v3 Authority Key Identifier:
keyid:79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:95:fa:1f:56:e8:61:7c:55:d5:da:62:44:a5:41:9d:ae:30:
ee:80:4e:23:48:c0:4c:cb:a2:64:fa:14:63:1e:4f:cb:60:ce:
22:73:65:c5:64:c0:87:50:cd:55:5d:b4:db:65:2d:14:10:2d:
78:f5:91:64:9d:82:cb:2f:14:2b:af:3d:62:68:17:87:19:d9:
c3:a1:f3:28:5a:11:4a:2a:5b:7d:5e:a6:58:a4:45:0d:6e:fd:
33:c8:52:64:19:10:78:34:3a:e5:9c:6a:09:4d:3d:a7:63:12:
3a:89:47:0a:a7:70:be:71:39:97:85:15:45:ab:3c:24:81:5b:
5a:82:f4:18:6c:e2:5c:d1:d4:a0:75:0b:22:82:0a:50:e4:37:
01:8c:b5:09:c8:20:1b:e1:9e:e3:53:33:25:88:d8:23:7f:f4:
1e:42:06:92:f8:aa:4c:30:ed:59:2d:6b:cb:54:cf:94:88:e9:
d1:2f:cf:43:ab:c6:8f:5c:01:29:02:03:5d:30:4b:c0:ba:68:
ef:bc:2e:a0:7f:59:0d:ab:2b:e2:7b:78:c7:26:71:e5:2f:7b:
c1:fb:fa:91:f7:c2:d0:9f:f9:3d:e8:37:74:b8:fb:74:84:59:
9e:1a:c5:00:98:4a:d0:60:b7:a5:db:81:ca:68:ee:fe:56:d7:
32:08:97:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:49:10 2025 by rpki-client