Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
File: EXoEqScBnDzi0MnbOjFJd6Cns1w.mft (raw, json)
Hash identifier: HlbkUmhCcTvMN10D0P8/AKcjIgKmCtZW37+U8mpycPQ=
Subject key identifier: 09:32:48:72:33:70:48:98:E2:3E:1C:64:92:A0:F4:80:AE:87:E0:1D
Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Certificate serial: 0196C9175304214F1669A12B5A9FE98CAAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
Manifest number: 0209
Signing time: Tue 13 May 2025 10:01:11 +0000
Manifest this update: Tue 13 May 2025 10:01:11 +0000
Manifest next update: Wed 14 May 2025 10:01:11 +0000
Files and hashes: 1: 2BzyKfn5TceQ5f_OzQ0CHZnS4gI.roa (hash: QgfXzSLSDf5EWcjraHDYOpI/UP8b9CbWgxlTSxy1O3c=)
2: EXoEqScBnDzi0MnbOjFJd6Cns1w.crl (hash: wdg4UPL9f3ddGgz8Ez/MkE3aIjEGCaas12j0Bep1KXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:53:04:21:4f:16:69:a1:2b:5a:9f:e9:8c:aa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Validity
Not Before: May 13 10:01:11 2025 GMT
Not After : May 14 10:01:11 2025 GMT
Subject: CN=0932487233704898e23e1c6492a0f480ae87e01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:69:8f:ee:a4:86:61:73:5d:b7:4e:27:fd:
cb:ad:d7:c4:7b:fe:ed:01:6c:8f:ff:6d:c3:61:c4:
73:6e:3e:e5:cc:9a:c6:ec:68:4c:5b:9e:30:38:3a:
a1:aa:26:cb:83:2f:c8:78:50:33:9c:9f:02:e8:2f:
5f:c9:37:a6:3f:c3:69:45:27:12:48:89:f7:70:13:
50:ff:2b:ff:4e:ce:ae:e0:8d:e9:38:60:97:09:fc:
28:d1:24:ea:7c:5c:ac:e4:c8:d5:23:31:41:09:e6:
eb:68:04:5b:dc:dd:5b:ce:db:ab:ec:09:f8:5d:e7:
ef:fc:93:27:8c:85:f2:68:6b:cc:94:50:62:8e:8e:
6e:34:53:16:33:17:88:65:7e:eb:fc:fe:2c:fc:bc:
5a:50:28:ee:a1:8b:ed:6d:43:a7:1b:97:71:4a:82:
d4:ca:54:2c:b0:22:c9:59:c8:56:96:1c:37:74:d6:
6c:66:af:b6:fb:40:0e:55:82:0e:60:eb:a4:da:f5:
e1:a5:c4:b5:5e:7d:42:8d:22:de:11:48:51:21:89:
9a:88:1e:67:83:a8:65:df:83:6b:07:84:fe:e5:30:
f0:1f:25:03:c6:89:f8:1d:07:78:67:9d:b0:33:80:
b3:fd:d9:0f:0d:85:b2:fb:8f:d2:7d:17:53:04:7e:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:32:48:72:33:70:48:98:E2:3E:1C:64:92:A0:F4:80:AE:87:E0:1D
X509v3 Authority Key Identifier:
keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fc:3f:ce:af:24:3a:9c:74:ec:5f:18:14:d7:c5:7b:9b:d7:
a5:8c:27:70:9e:ea:7d:b7:fc:67:66:a5:6f:70:31:75:dc:01:
19:44:0d:68:35:0b:2d:4c:97:73:5f:fd:66:1f:90:26:65:df:
7a:91:bf:42:09:13:47:b5:a5:fa:e8:4c:d1:55:ea:22:a3:d9:
cb:2c:54:3c:b4:db:f2:cf:fa:a7:72:cf:9f:51:71:b6:66:e2:
e2:63:7d:21:c4:62:6d:42:95:76:06:76:49:64:85:a8:48:6d:
14:3c:c7:36:bd:b2:5a:bb:8e:46:de:30:55:82:0c:24:3d:c1:
ab:ff:03:78:9a:a6:f5:79:5d:75:73:62:c3:f6:3a:31:98:5a:
98:f0:ea:9e:4f:ef:ec:78:8c:b4:3c:1e:5d:d7:bc:3c:54:20:
23:6e:29:a7:0f:73:b6:6c:36:25:54:14:1b:90:11:ba:1e:1b:
59:bf:77:1f:e7:95:45:71:94:96:1f:30:7a:22:da:f3:56:43:
a2:85:3c:a2:7e:5d:71:93:a7:03:54:f1:a2:40:7c:63:52:15:
e5:37:98:1f:f7:67:44:f6:40:40:a4:7e:41:c6:2a:10:78:a8:
5c:df:ba:e8:47:06:c2:dc:47:02:a0:77:b2:27:23:33:ea:a3:
11:b0:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:22:15 2025 by rpki-client