Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
File: EVYEuolej7O0mix4CI6f8v-XCgg.mft (raw, json)
Hash identifier: FZEMMJ0XsjwxowyEOlz7W7IauLAF4fcSwq8Ex5b976Q=
Subject key identifier: 38:3B:17:D5:89:61:D7:7C:94:63:1D:61:62:72:5B:54:E2:A7:C9:90
Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
Certificate issuer: /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Certificate serial: 0196A9F9C575486CBF0B20C14D688C7E7ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
Manifest number: 14BC
Signing time: Wed 07 May 2025 09:00:40 +0000
Manifest this update: Wed 07 May 2025 09:00:40 +0000
Manifest next update: Thu 08 May 2025 09:00:40 +0000
Files and hashes: 1: EVYEuolej7O0mix4CI6f8v-XCgg.crl (hash: sUYzJvQfXkaEVOMV2Ti5035HZH+VX4MXGXWTGa23SuU=)
2: Mf8_fr0emM9VzKXxaSCkla0gpe8.roa (hash: M0YySaNEC7qXOCCeVLXEwEcDDAoxkin1ih/jS/04KOM=)
3: _LxyVkgbKLMaCoKf-wa-gjXEY9g.roa (hash: Tt/J7UaLJpGwa3pTn7jEj8mr5nT4j+av9OQ17W7ixzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:c5:75:48:6c:bf:0b:20:c1:4d:68:8c:7e:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Validity
Not Before: May 7 09:00:40 2025 GMT
Not After : May 8 09:00:40 2025 GMT
Subject: CN=383b17d58961d77c94631d6162725b54e2a7c990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:4b:e6:e6:14:e4:48:3e:01:2f:f2:66:fc:
81:42:7a:66:24:28:f0:44:07:80:c6:06:80:ba:0b:
36:b7:92:6b:45:9f:6d:09:89:7f:2f:56:88:97:08:
63:c1:06:f4:92:84:51:c0:0d:aa:c7:9a:06:c1:c9:
5a:d6:e0:08:ef:31:f0:34:86:cd:5d:58:51:2b:01:
e8:0b:89:17:90:b5:52:6d:7c:6c:43:f8:3a:db:ed:
6d:2b:10:b6:5d:38:ee:42:fa:93:f5:3b:17:11:94:
37:1d:f2:01:15:3a:13:3f:87:5d:a5:2a:96:39:d9:
fb:03:42:70:51:60:14:bf:6d:83:f2:a5:27:49:e8:
bd:7d:07:08:0e:18:3d:c4:e9:0b:4b:91:bd:e2:8f:
fa:59:03:a8:9b:60:50:be:ce:bd:86:4a:0d:0f:d3:
f5:bb:f9:ac:7d:3a:f9:2e:5a:b1:85:7b:9f:33:de:
4a:eb:4d:1f:4d:be:84:e2:bf:93:5e:44:27:bc:b6:
f4:ef:7d:c5:e3:01:b8:19:3f:6e:5a:3d:3a:2d:20:
1d:38:96:fa:d4:58:6e:fd:08:bd:8c:36:f3:41:57:
4e:c0:6f:9a:c9:a3:9b:65:81:5c:d8:85:a0:1e:28:
0b:7e:eb:10:b1:84:aa:db:96:e7:95:ec:6c:f3:bd:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3B:17:D5:89:61:D7:7C:94:63:1D:61:62:72:5B:54:E2:A7:C9:90
X509v3 Authority Key Identifier:
keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cf:39:6d:e0:78:13:9c:82:99:97:9a:68:e9:31:ec:b6:ce:
e5:37:9c:e6:f1:4d:5c:67:1c:a3:d0:42:e5:28:0b:ed:ec:9d:
0e:31:2e:3c:20:b2:9a:c9:3d:05:6e:3a:9a:53:36:7c:a9:9f:
f8:67:28:e6:dc:6a:db:58:9f:6e:ef:46:f8:38:83:ce:f3:aa:
77:5d:3f:ac:5f:d5:52:cd:15:0c:23:a1:ab:26:eb:93:2c:02:
0f:63:8e:2b:99:07:47:a4:56:57:12:da:67:ef:1b:ec:ba:96:
17:45:6a:a0:c2:cd:d7:77:f0:f2:16:ac:77:06:5a:a8:68:a4:
e9:07:c8:f1:7a:a6:97:30:6d:53:79:26:d1:d4:df:a5:a6:ea:
ed:2e:c9:ed:2c:14:25:d6:f7:48:9d:35:48:40:88:4c:6b:c7:
ae:a4:3c:66:63:af:f5:10:d1:d4:35:9f:b8:22:22:0d:11:dd:
1a:7b:de:fa:e4:f8:09:d8:b8:32:3c:87:a5:91:f0:c2:86:8a:
76:34:b1:ae:07:95:02:67:f8:d6:31:82:9d:f1:2e:fb:3a:10:
30:44:38:ba:42:6e:ce:5b:e9:11:71:18:62:60:61:e4:6a:ca:
b4:e5:cc:f1:a1:47:66:13:c3:9b:ac:5c:4f:09:98:c2:3e:4b:
c4:9a:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:48:15 2025 by rpki-client