Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
File: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft (raw, json)
Hash identifier: 2K0iSPP+/fmEAvvXMZYlqlxjn0kDkqwi67qgHOS3bmU=
Subject key identifier: 8E:F4:47:5E:38:6A:52:B0:7A:3C:28:AC:1A:97:98:C8:ED:F3:C9:5A
Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8
Certificate serial: 019654933E137B8A6936CD4C369ADE0E85D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
Manifest number: 0DEA
Signing time: Sun 20 Apr 2025 19:00:57 +0000
Manifest this update: Sun 20 Apr 2025 19:00:57 +0000
Manifest next update: Mon 21 Apr 2025 19:00:57 +0000
Files and hashes: 1: 7zyHfGLCt61eCife6uW0qcGV8aQ.roa (hash: Obf5nHalQ5b5PGXQ7xcaKDODktDmBaiUg7460b0pjaA=)
2: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl (hash: 7ko1rtGMSN7MVpZS91ZgMBoryW32XFzJAG0QlgnagZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:3e:13:7b:8a:69:36:cd:4c:36:9a:de:0e:85:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8
Validity
Not Before: Apr 20 19:00:57 2025 GMT
Not After : Apr 21 19:00:57 2025 GMT
Subject: CN=8ef4475e386a52b07a3c28ac1a9798c8edf3c95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e9:05:b6:a2:b7:d6:9d:7d:16:3a:a7:10:4a:
ba:5f:d6:cb:9f:a4:05:b8:39:a4:df:85:b6:fc:0e:
ce:ff:55:a6:dd:77:1f:9f:d2:42:66:a2:ee:81:94:
cd:95:e2:7f:ae:f4:aa:be:66:75:a9:d5:f1:3f:d4:
8c:3f:2e:e2:83:09:ab:37:26:bd:41:5f:1a:12:66:
d9:2f:bb:17:94:b2:87:79:0f:f0:c2:1f:b8:98:43:
fe:51:db:02:a1:94:cd:b6:d8:b7:12:08:25:de:f0:
03:bd:7e:40:6b:f4:43:eb:7b:68:a3:2f:83:55:30:
49:03:46:e6:a2:49:bf:72:29:3f:d8:5d:08:67:5e:
02:5b:48:d3:11:4c:b5:3d:cb:b0:3c:8c:75:bb:ba:
6c:15:af:a3:a4:8d:1c:ae:a9:80:0e:dd:13:c7:04:
61:15:4d:9e:6d:80:48:62:d0:4c:93:ba:e7:81:8a:
6d:0c:c5:e9:9b:cd:9b:e6:53:f8:1e:cd:61:a7:a7:
e2:94:39:45:4f:39:5b:5d:92:f9:f9:4e:5a:dd:cb:
09:ed:70:4a:29:f7:37:0e:4f:99:89:ba:e7:41:b1:
24:c4:3f:27:da:98:3f:30:90:04:3b:0c:68:2e:7d:
bb:1d:87:45:48:d7:20:60:4e:2e:db:2e:b8:77:76:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F4:47:5E:38:6A:52:B0:7A:3C:28:AC:1A:97:98:C8:ED:F3:C9:5A
X509v3 Authority Key Identifier:
keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:e8:2d:ed:5d:20:c8:e8:3b:4f:48:f9:b7:2c:e1:ac:04:
3a:03:1f:d4:54:d0:60:a1:45:6e:9d:6e:a0:13:97:be:43:62:
5f:4f:fa:e4:e1:7c:00:b9:f9:9a:1b:10:ce:2f:5c:4e:2e:98:
fc:d5:2c:24:35:48:cc:cf:e6:e2:d4:1e:10:71:63:4e:e5:52:
b6:00:68:ea:15:89:b7:b2:c0:7d:b8:43:e7:77:79:44:ae:b9:
c1:8a:bd:05:27:88:60:9b:7b:d0:a6:06:cc:0b:6f:b2:0a:a8:
72:da:60:3a:07:c7:49:3c:e6:d6:62:9e:93:01:05:7f:5d:f9:
b7:bc:f1:b9:b1:e7:db:7f:3b:f5:47:23:5d:12:0a:27:b0:f9:
8c:5a:e9:d7:ed:46:0c:a8:6f:10:c4:61:3a:76:c1:d1:6d:c6:
a4:a8:13:8e:5c:52:48:c3:7f:1a:03:1d:cf:e0:d5:15:6a:0d:
7e:34:b2:67:b5:9f:db:ab:98:f1:2a:d1:a6:85:37:87:f9:13:
26:1f:b8:7e:1e:e1:4a:34:01:d1:88:eb:5d:19:cb:b7:2f:13:
56:04:db:12:70:eb:69:79:e7:d3:cb:0f:6c:9d:5b:42:1e:64:
b8:66:6b:1d:4b:0b:fd:27:25:27:26:57:19:47:26:d8:3d:29:
ee:03:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:41:45 2025 by rpki-client