Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: eWeKCMWczT8KY7buXiDpFJF13kiz0WpI4Vzv9BbOMzM=
Subject key identifier: 54:26:3C:10:B1:53:D0:8D:64:FD:8F:52:DE:4F:62:13:B5:BB:B9:0F
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 0196DC9D3BCF627E1E50CFC76D0EF514D6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 10AA
Signing time: Sat 17 May 2025 05:00:13 +0000
Manifest this update: Sat 17 May 2025 05:00:13 +0000
Manifest next update: Sun 18 May 2025 05:00:13 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: AexVSPFPS2ffXAqOgXsklqlQk310ePhdpE/bAbbpDwE=)
2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:9d:3b:cf:62:7e:1e:50:cf:c7:6d:0e:f5:14:d6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: May 17 05:00:13 2025 GMT
Not After : May 18 05:00:13 2025 GMT
Subject: CN=54263c10b153d08d64fd8f52de4f6213b5bbb90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:8c:0d:95:59:3b:39:06:a9:d9:79:55:cf:
d3:f8:4b:58:87:54:e5:b2:5a:dc:10:ed:37:e6:c2:
54:f5:c7:23:c0:01:2a:68:1d:71:1f:f8:2c:61:e3:
4d:14:62:72:14:b7:59:7a:ab:7f:31:a7:af:7c:e0:
18:4a:4f:c3:a0:e3:d8:d1:49:40:9a:9f:8d:38:69:
0f:39:5c:44:d2:15:ba:db:51:ae:d8:b7:7e:76:bf:
81:60:2c:91:cb:dc:97:0f:96:02:8d:4b:af:f8:3a:
64:44:27:f9:24:0f:b2:f4:c1:7b:79:7a:0d:8f:9e:
d4:2f:d2:8a:6d:cb:8c:1c:17:56:b5:2b:17:1f:1d:
54:82:30:f6:03:0d:be:af:aa:50:29:8a:e6:1c:d6:
f6:e1:c9:c6:08:0d:89:2a:01:5f:35:08:b0:19:ee:
10:4b:52:23:bb:0d:09:3f:89:46:8b:93:ea:1d:38:
79:94:65:20:a9:19:b1:c2:f6:df:f3:53:d3:24:c3:
8c:97:95:7b:0c:f1:41:ca:fc:59:29:17:ac:f4:75:
b0:6b:49:eb:da:f4:fe:45:cc:e7:42:8a:70:33:6a:
b1:bc:27:35:3a:af:2c:ef:d5:61:d0:bd:0b:76:6d:
d2:ad:18:be:b0:22:e2:5b:83:de:88:c9:23:7e:8f:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:26:3C:10:B1:53:D0:8D:64:FD:8F:52:DE:4F:62:13:B5:BB:B9:0F
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:36:39:98:82:e0:f0:cd:83:47:d1:35:d9:80:e5:37:e0:5b:
90:5a:95:27:7b:50:76:fd:0f:1b:3d:99:ac:2a:06:d7:1f:6b:
b9:81:79:43:e9:3c:37:75:4a:7a:83:c8:c1:8c:f8:9b:00:63:
84:13:33:8f:60:5e:59:83:08:13:59:f9:08:fa:c4:ed:e7:0d:
41:c1:6e:f6:bd:b7:54:46:d8:f9:1c:b9:26:5a:3b:f3:72:54:
87:00:d9:ce:a2:a4:f1:f3:db:eb:db:a2:2b:90:e7:f2:b9:36:
f2:41:c7:9f:cd:4f:36:23:34:97:04:98:5e:ee:24:1a:eb:ee:
cf:74:c2:c4:3c:95:52:1c:93:76:6e:90:84:07:88:78:70:95:
8b:06:f5:99:a9:31:b0:c6:61:14:f7:88:9a:47:c9:90:ac:c1:
f2:96:03:97:73:2e:b5:1c:67:d1:2b:9f:8d:33:9f:e6:7a:5e:
ff:79:88:53:2f:7b:04:e0:91:10:51:07:c0:f6:22:78:c6:99:
1f:96:9f:da:90:9a:ad:f7:b6:08:09:ea:37:dd:51:3d:43:70:
9c:ea:76:76:52:7c:f7:bc:1d:b0:d1:f1:e4:fd:8f:d3:cd:77:
68:f1:1a:81:cf:83:39:31:03:e0:c7:97:f0:6b:ff:fa:1f:42:
ed:a6:f7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 13:06:01 2025 by rpki-client