Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
File: eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json)
Hash identifier: BpwL5RqkE1PPAakC3waIFnUGXWTKjHaEiVWLeEqcnec=
Subject key identifier: B4:3F:70:7E:61:4C:62:4C:61:48:73:8B:44:8E:46:9D:37:A7:FA:85
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Certificate issuer: /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial: 0196575CD743B6FCE0210927FE1870A3A414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
Manifest number: 119C
Signing time: Mon 21 Apr 2025 08:00:24 +0000
Manifest this update: Mon 21 Apr 2025 08:00:24 +0000
Manifest next update: Tue 22 Apr 2025 08:00:24 +0000
Files and hashes: 1: PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa (hash: Zn4dyGMYJbfaJjvxLWrM7du9HmyBjKhPRokK9xNb0s0=)
2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: bKhFONtyMCOh5apYzY1FH8KLJsCtQfkGrOxvQNYZc0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:d7:43:b6:fc:e0:21:09:27:fe:18:70:a3:a4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
Validity
Not Before: Apr 21 08:00:24 2025 GMT
Not After : Apr 22 08:00:24 2025 GMT
Subject: CN=b43f707e614c624c6148738b448e469d37a7fa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:eb:48:51:21:a0:70:e2:bd:01:7a:8b:3a:
a6:43:bb:73:d0:db:86:eb:d9:8d:47:f6:0e:11:03:
e0:bc:97:c2:27:c9:76:0d:67:e1:7d:1a:dc:c2:9c:
3c:93:49:12:f3:80:7e:b5:10:ac:01:02:91:73:1c:
38:8e:90:c8:c5:f7:29:db:d3:71:4c:43:53:c2:65:
62:68:aa:f8:9a:dc:39:d7:44:3c:76:5f:17:da:e6:
d9:55:53:2f:f8:8e:83:b5:77:a4:82:2a:ce:89:d8:
56:06:8f:25:6e:fb:b3:d7:82:a4:19:86:62:71:91:
ac:ea:4d:59:48:6a:ae:98:ec:2a:91:89:e8:4a:c6:
26:be:05:1b:2f:59:69:2f:e2:b7:cb:92:26:8c:52:
63:3a:32:7d:1b:e2:7c:6a:f7:62:8a:5c:e6:68:0c:
52:35:92:63:0c:45:f3:3a:a0:61:35:c1:ba:09:00:
51:8c:95:16:99:70:73:25:7c:4b:57:cb:f2:07:79:
d1:34:e2:f9:e1:b8:c3:df:ca:3c:d1:5a:31:d9:01:
8b:a0:bc:19:2b:4b:0a:79:13:48:b1:8d:f8:f6:67:
90:ec:6e:31:03:33:4f:99:31:be:7c:8c:aa:83:bd:
f7:fa:41:53:9c:c8:ec:a6:eb:53:e8:5c:d1:55:c0:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3F:70:7E:61:4C:62:4C:61:48:73:8B:44:8E:46:9D:37:A7:FA:85
X509v3 Authority Key Identifier:
keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:04:1d:c0:cd:63:b8:91:e9:2e:c3:4c:32:2b:6d:53:3d:01:
e7:4e:1f:a6:b8:63:6c:4f:11:32:02:e7:cd:4d:71:85:38:f0:
3e:2a:e4:62:41:db:62:41:db:54:36:ff:2e:c2:7b:39:d3:5a:
4e:01:27:bb:84:15:26:8a:45:f2:71:32:10:f6:ef:1d:6b:5a:
ce:72:c5:6d:2b:dc:13:a5:61:55:77:71:c8:98:fd:09:5f:93:
a6:07:7a:cf:c1:07:7b:d0:76:91:d6:2b:2a:5e:63:9d:45:41:
9a:b8:54:a6:2e:9d:48:41:de:6a:93:a9:87:c5:31:c1:72:92:
17:67:93:20:4d:86:24:26:d6:29:22:7d:f7:23:36:84:a2:c4:
2b:a1:d1:9d:50:20:72:6e:67:2b:74:4b:60:63:d8:68:3f:a5:
de:b1:ad:1f:dc:57:1f:68:bb:7d:d0:90:07:de:4d:ad:65:39:
18:4c:61:09:3b:91:f6:11:21:d5:a6:89:54:0b:ec:6f:18:d5:
73:ea:64:7b:a0:05:14:f3:df:5e:c6:12:79:0d:79:13:c9:a0:
2f:ca:d0:59:18:d1:0d:15:0b:9b:4b:ba:d9:d6:3d:59:12:19:
ae:c8:ff:fe:45:4d:60:43:eb:39:d5:93:cf:b5:8c:41:21:e7:
27:4c:4e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:55:26 2025 by rpki-client