Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier: 4im5EpLJpnttRbiHhLCR8cbbDfNawrEkNoKiI9B1Syw=
Subject key identifier: DB:FA:00:58:34:DD:31:86:3F:D1:58:5C:C9:F2:74:3D:10:E6:61:C6
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 0196A089618D88897884313B14206F2B3CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number: 0C3E
Signing time: Mon 05 May 2025 13:01:19 +0000
Manifest this update: Mon 05 May 2025 13:01:19 +0000
Manifest next update: Tue 06 May 2025 13:01:19 +0000
Files and hashes: 1: 1FgrVACY6GX6cCkfjVp_PNMUkZ8.roa (hash: d2I0wmnqM3spvipArjFjFYyaGXGv03P9b0jZc/8LN6Y=)
2: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: UcScvyJLiBWYjaPMgnoz2Ec1nZFOnTxRkp+A7xJq/rc=)
3: o3E4tuCzrJrGsji5NuASGDB-HXs.roa (hash: bSAUmFEcCz0OQZhQLj9JhVCVTIH61k4i+3xl0JyI4Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:61:8d:88:89:78:84:31:3b:14:20:6f:2b:3c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: May 5 13:01:19 2025 GMT
Not After : May 6 13:01:19 2025 GMT
Subject: CN=dbfa005834dd31863fd1585cc9f2743d10e661c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:24:7d:9d:fe:a6:19:f1:78:25:f3:3a:e6:
a9:82:fe:fb:9c:c1:66:15:eb:46:bb:14:72:d0:16:
7d:e1:85:aa:a2:62:e4:1d:6e:85:bc:00:f3:83:96:
04:73:7c:59:8d:2d:e9:7a:47:6d:aa:64:2d:23:01:
8e:f7:43:0a:ba:a9:fd:39:b7:26:cc:d3:76:ae:3e:
10:dd:9c:e8:e6:9f:71:40:a4:74:24:4e:a8:69:ad:
56:e8:80:59:34:5a:34:58:4a:cb:1a:09:70:19:40:
b0:21:bd:74:7b:00:ae:82:17:0f:eb:2b:15:06:17:
3e:a7:a2:95:23:dc:3e:d6:fc:c4:0f:ad:0d:af:16:
43:26:8e:68:2c:ea:9b:38:5f:33:a0:0d:ac:1e:39:
82:af:a3:3b:ac:ff:ee:50:d1:50:51:46:14:a0:c3:
34:4e:fc:87:b5:65:07:ca:79:3e:95:78:4d:ac:29:
c4:9c:3c:a7:62:17:6b:a9:f8:c2:0d:eb:84:80:c2:
b7:ce:72:4f:53:2c:8c:72:93:fc:6f:f4:43:58:0e:
04:67:9d:35:b5:8f:b7:7a:53:73:44:d3:89:dd:95:
9b:68:b7:17:9d:22:3d:d6:8c:6d:17:83:b5:81:ab:
b9:5a:cf:89:a7:12:df:f2:7d:b2:58:3f:04:8c:ec:
10:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FA:00:58:34:DD:31:86:3F:D1:58:5C:C9:F2:74:3D:10:E6:61:C6
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:15:b3:52:2c:3d:ea:c5:a4:c5:97:58:47:5c:4a:1b:76:47:
39:dd:f0:9c:54:56:79:99:15:4f:13:28:70:90:e6:d3:f6:04:
de:65:14:9d:a1:b8:e1:37:b5:4e:32:2d:02:10:0b:e0:1b:5f:
f8:ef:0d:5e:60:e8:a8:ff:46:e8:e4:d8:85:50:cb:0c:00:81:
1f:b7:8f:92:c5:82:2f:a6:5d:a2:79:cd:0c:f7:18:0f:22:a3:
8c:20:8d:53:f6:5f:42:3b:28:47:61:6b:de:20:bb:42:ab:9f:
75:c0:28:da:34:f9:69:bb:0e:65:94:0b:15:fc:7f:02:66:e1:
68:da:f9:8f:5d:d9:40:25:c7:71:9a:69:b1:1a:33:26:7a:4e:
d1:d9:12:19:43:f4:3b:5d:b9:1b:71:42:9a:25:50:b1:f3:17:
4d:6a:5c:ec:77:5e:47:eb:cb:61:f6:62:7f:91:ff:65:c1:9a:
80:a9:99:7e:51:33:8a:38:df:29:ba:36:1f:29:18:26:7b:1b:
43:d7:62:d1:d0:50:67:4c:aa:d3:89:cf:27:d6:c8:5f:55:ca:
11:30:35:82:b1:8b:11:18:65:b4:78:ba:83:d9:55:27:2f:76:
58:25:03:02:28:b4:41:8b:a1:92:ea:ab:f0:59:e1:88:94:e8:
f4:1b:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:45:13 2025 by rpki-client