Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json)
Hash identifier: FRf3jRFXCORNXXxJ9shy26aZAiC42aaL1EtgAXIjIhU=
Subject key identifier: 6F:25:7C:10:70:7C:8C:C1:72:94:7B:1C:38:F4:AD:1E:9F:A9:71:F6
Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Certificate serial: 0196BC375941DD778F85FE35D1EA69119307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 22:01:06 +0000
Manifest this update: Sat 10 May 2025 22:01:06 +0000
Manifest next update: Sun 11 May 2025 22:01:06 +0000
Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: slZ6h61ukbWvSTtGBqIWr0foql6dmznZ8g19qDmEiMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:59:41:dd:77:8f:85:fe:35:d1:ea:69:11:93:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d
Validity
Not Before: May 10 22:01:06 2025 GMT
Not After : May 11 22:01:06 2025 GMT
Subject: CN=6f257c10707c8cc172947b1c38f4ad1e9fa971f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:67:b5:a7:76:84:2d:ae:c1:bb:83:46:e5:
80:9c:68:82:b4:dc:05:26:cf:00:7a:d3:e3:1e:68:
a6:cf:58:ef:fe:87:c1:60:73:e1:ec:6c:35:b6:d2:
fd:f5:09:33:13:4f:34:fe:6a:30:95:31:4a:0e:1d:
69:2d:2f:07:20:f9:be:73:50:1a:e5:f0:25:a6:e0:
02:e9:be:69:e2:44:a0:48:41:e3:fa:39:64:eb:8a:
d6:1c:af:c7:79:27:02:70:c7:08:4b:c9:20:e3:f7:
56:7c:12:35:e2:17:b2:27:3e:fd:2c:f3:5c:08:a3:
e3:ab:b1:05:59:44:65:ec:ef:9a:28:64:a0:c9:92:
1f:71:05:2d:c7:95:22:ae:d8:06:bd:d7:5f:e8:dd:
09:53:b1:46:ac:06:6d:08:0a:5c:ef:ea:e7:c8:af:
50:63:16:dd:6c:37:b0:04:cc:70:5e:1a:92:4a:26:
c8:80:22:ee:6f:ab:e3:c1:1d:d2:06:92:a3:04:64:
05:f7:b8:10:85:46:7f:fc:cd:a6:40:40:4b:55:8e:
4b:2b:23:9c:62:35:82:5e:5c:66:1e:72:d6:53:2d:
d3:a2:29:be:9b:29:0c:b4:7b:fd:84:68:9d:20:ab:
e4:df:aa:3c:6b:8b:e8:9b:4b:2b:df:33:e7:2a:12:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:25:7C:10:70:7C:8C:C1:72:94:7B:1C:38:F4:AD:1E:9F:A9:71:F6
X509v3 Authority Key Identifier:
keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:39:37:1c:99:7d:ff:17:c0:d9:1f:d2:46:ea:bb:8b:4f:68:
03:e7:49:18:3e:af:d2:aa:48:28:b5:12:36:a0:c8:c2:aa:d1:
0a:4b:81:cb:89:c8:78:6e:95:f9:29:38:98:4b:29:ef:ad:17:
ac:dc:39:9f:99:9a:19:2c:7d:ff:d2:d9:4e:c4:f7:a6:db:5e:
77:c5:5e:56:f4:a1:43:3f:b2:17:cc:b6:9b:2d:d7:e9:3a:fe:
8a:da:f3:17:2b:7a:46:d0:74:cb:f6:4e:d8:45:9b:78:06:d5:
2d:a7:e2:56:37:4e:60:74:90:b3:e4:5e:31:88:7b:b3:64:ef:
35:56:fe:36:92:8a:b0:c2:ac:1c:93:8a:6f:46:08:70:e7:e6:
91:4b:79:54:f2:d2:72:4b:02:5f:3f:43:8a:97:8c:a4:25:02:
13:d0:fa:a9:69:d7:47:92:7c:85:66:a7:d1:11:b0:c1:f0:bf:
12:82:5b:14:63:8b:b7:bd:d7:b4:f6:8c:e7:c2:06:fd:44:65:
6a:70:d1:8c:26:79:f6:64:eb:e0:07:83:4e:a6:7b:48:b6:10:
e5:94:ec:e2:4f:ef:6f:76:d3:83:a3:a3:94:f9:b6:bb:a0:df:
d8:82:27:9e:26:d1:81:cc:b7:ca:34:ae:75:b2:5e:7a:b7:36:
f1:c8:49:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:09:45 2025 by rpki-client