Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File: eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier: XlgdLFjr7BmKMjTRUMQE8n1T/MOsFnLpy+TU1+AyqEs=
Subject key identifier: 7F:88:2B:3B:DD:61:97:14:41:A3:3E:AD:18:A6:B5:45:03:DA:7D:36
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer: /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial: 0196BCA4BDEA4AA003725205DDA988783529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number: 041A
Signing time: Sun 11 May 2025 00:00:35 +0000
Manifest this update: Sun 11 May 2025 00:00:35 +0000
Manifest next update: Mon 12 May 2025 00:00:35 +0000
Files and hashes: 1: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: U17wYpsmTf08lg1MKwRXTEi00Yzmy62pc5Vs8LVmqUI=)
2: gP8qEhtADxz-fNyyU3vcu8NYBMU.roa (hash: UQJK4mMNNX6B898sPio2JOjeNiXhgW4l71UxZw7LEXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:bd:ea:4a:a0:03:72:52:05:dd:a9:88:78:35:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Validity
Not Before: May 11 00:00:35 2025 GMT
Not After : May 12 00:00:35 2025 GMT
Subject: CN=7f882b3bdd61971441a33ead18a6b54503da7d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:1c:c9:2e:37:e8:f3:f8:49:ab:ae:de:79:
67:12:b0:a5:22:fc:67:97:2f:e0:6d:3e:cd:43:83:
0b:fc:9a:bd:cc:f3:10:38:fb:bf:38:ac:07:9d:7e:
5e:a3:5f:9c:79:78:ce:f6:8b:f1:aa:c3:c3:44:a8:
f7:f4:48:8e:f5:74:b4:5e:d2:3c:09:02:61:40:ad:
ee:f4:f4:06:2f:06:06:8d:77:48:31:21:87:95:2e:
a0:1f:5d:ae:8e:00:89:33:c0:fb:6a:0c:ca:f7:39:
8e:36:6e:51:19:c8:28:13:bb:79:85:b5:85:d0:63:
9d:a5:56:f0:33:0d:36:33:f5:13:1a:53:d5:67:55:
48:0e:59:1f:33:50:7e:09:fc:20:cd:a5:d3:96:a1:
3c:db:10:9b:9a:e1:14:e0:e2:43:ed:f6:63:a6:8f:
c0:e5:02:f8:71:6e:28:13:7c:d1:01:8a:b2:c2:fd:
df:21:03:fb:11:d1:f2:f6:b1:a2:43:86:6e:b2:d9:
d7:b2:20:0a:3c:d7:31:96:ce:ee:28:0e:a5:9e:05:
9a:f4:00:27:9f:a3:3b:6d:a4:1a:6c:3f:91:83:65:
86:5e:eb:aa:76:43:8f:64:42:7f:df:23:0c:85:b3:
6b:62:19:78:37:ad:02:e6:00:61:15:73:13:35:96:
27:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:88:2B:3B:DD:61:97:14:41:A3:3E:AD:18:A6:B5:45:03:DA:7D:36
X509v3 Authority Key Identifier:
keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:82:8a:04:8a:ee:db:ae:b2:92:04:ff:ef:d4:63:b3:f4:a5:
b3:d3:8a:f5:ca:00:c6:e8:23:bd:33:19:bb:94:12:b3:0f:21:
d1:36:1b:58:50:68:bf:e6:56:35:d0:0b:98:18:fc:93:18:8b:
ca:a3:75:5c:d6:dc:21:c3:da:3d:87:7b:67:4d:cb:18:16:7b:
79:85:c5:fd:65:1f:f3:b1:b4:86:a7:0e:e2:07:49:69:2c:e6:
45:ad:c3:10:f6:24:c3:5a:f7:3b:a3:f8:17:76:9d:0b:7d:a4:
6e:49:e8:9e:57:0b:e6:ca:af:39:05:7e:ca:73:84:0a:57:96:
d2:ed:0f:f8:3a:5d:46:f4:5a:6d:e6:98:ea:03:1c:f4:e3:80:
cf:1b:43:f1:ba:c3:4a:51:e6:8f:1a:9f:a1:f7:ae:e4:fe:02:
70:fa:ea:a4:63:b5:d0:4e:ef:d2:79:c4:d8:4e:1a:8a:5f:32:
20:0a:1a:ac:ba:b4:ce:9b:50:1e:d7:55:91:51:0a:87:c6:52:
25:b0:e1:13:d7:e2:76:c0:54:4a:f1:bd:bb:95:fd:2b:f3:91:
d2:c3:0e:b8:35:e9:6f:b4:bc:2c:62:1d:46:49:6b:3e:8f:23:
48:ff:16:85:2d:bf:71:ee:95:83:8c:ba:86:e5:42:eb:7f:fc:
ec:e0:78:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:07:33 2025 by rpki-client