Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: GQHcfkG7ucMGEawfjve0jim4hU49gIAaCDvhnHxe3Mk=
Subject key identifier: 43:5E:4D:D0:96:21:B6:7A:47:8E:41:B1:1D:FD:CB:8D:8E:84:8C:07
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 019658A68F52FB6BD58AA359F1BFD7339307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 0158
Signing time: Mon 21 Apr 2025 14:00:32 +0000
Manifest this update: Mon 21 Apr 2025 14:00:32 +0000
Manifest next update: Tue 22 Apr 2025 14:00:32 +0000
Files and hashes: 1: EEIAqtmVTfDQz48mHq-GMD6waLc.roa (hash: 3I5ks4zv9gLi70KUpbYz4Uh7wDMwe9QwqPi5S9dB8EU=)
2: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: WUG8GsJxI/A++tI/U4cemf3Me7X+Rc7IEic23ubqq8U=)
3: w4V_TjeH7dLAgq7qSzPwinxxOG4.roa (hash: 6GCYoFHD3EJJhlFtbdNd/9KCCDomHYZ8sStHyLnmZws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:8f:52:fb:6b:d5:8a:a3:59:f1:bf:d7:33:93:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Apr 21 14:00:32 2025 GMT
Not After : Apr 22 14:00:32 2025 GMT
Subject: CN=435e4dd09621b67a478e41b11dfdcb8d8e848c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:87:8d:23:30:f3:cd:2b:d1:91:55:d3:9a:
b0:63:bd:b3:f6:28:52:bf:7f:b8:c1:d5:f4:16:9c:
86:fe:e6:e0:5c:44:06:72:b1:c9:6a:4e:22:28:06:
b3:8d:5f:60:8e:6c:99:f0:02:0a:ed:76:48:1b:78:
9f:0d:43:48:be:87:0f:0f:8d:e1:a2:48:32:1f:19:
8f:45:44:23:39:dd:e9:04:18:cc:73:95:e9:c1:84:
e7:83:a4:83:76:04:3d:a0:3e:c5:44:92:5d:01:4c:
8a:12:92:ba:f8:19:2f:95:d1:75:2b:b6:d5:53:8e:
eb:18:cb:55:83:31:af:ba:5f:b0:57:72:63:ad:ac:
34:83:74:45:6f:f1:e9:93:4d:a2:fd:1a:f4:9f:36:
2d:4e:eb:29:9d:df:3c:f6:29:5d:13:c8:0c:13:32:
d1:a4:0a:57:8e:cf:3f:73:7e:67:ee:b5:74:fd:f7:
49:9b:17:cd:ec:99:e5:81:74:c7:f4:07:d6:91:ea:
57:19:d7:69:f3:5e:43:f5:ae:52:62:47:d4:26:72:
92:d5:31:b8:a6:24:50:ff:3e:1e:e8:69:07:12:75:
c8:c3:69:93:ff:86:9a:6e:a3:ad:b7:9f:f5:d1:b3:
06:58:e7:de:3d:90:70:13:f4:df:1c:4a:81:86:5d:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:4D:D0:96:21:B6:7A:47:8E:41:B1:1D:FD:CB:8D:8E:84:8C:07
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:91:85:ed:a9:90:61:7f:96:1d:47:68:94:96:93:57:ed:77:
39:3c:d3:a9:5f:a5:c1:89:49:94:3f:e4:22:18:1e:73:13:9f:
14:07:6b:12:07:b8:d5:e9:a0:69:12:0c:d6:62:3a:99:57:89:
c1:ed:9a:38:79:4b:0a:bd:77:ae:55:10:92:10:cf:cd:2d:65:
13:86:8d:6b:8b:6a:8d:d7:87:f3:79:a2:5b:24:74:ad:be:82:
c2:09:9b:98:31:e8:21:5e:e8:e8:02:f4:c9:56:e5:31:5a:86:
87:a9:45:1a:19:8d:3e:c2:53:62:e4:59:a9:b8:5c:8a:17:79:
c4:02:8a:cd:64:47:20:05:48:7a:97:dd:9b:68:96:04:88:15:
57:4b:e8:62:b4:5b:71:7e:b0:eb:bf:05:3b:eb:a9:8f:54:de:
79:f4:0d:73:c5:a6:1a:5f:94:e4:ba:ce:3e:56:5a:55:2d:91:
3b:63:67:82:61:9d:cb:47:ea:41:52:64:15:f9:22:c3:fd:4d:
55:e2:5e:99:e8:23:aa:f7:29:88:9c:c7:9a:69:ba:01:28:1e:
ac:8a:db:8c:5d:a7:10:9d:ac:88:cb:8f:a9:66:62:14:aa:6b:
4f:d4:98:2f:b9:48:6f:c6:c1:3c:2e:ad:f6:ef:70:94:64:92:
00:2a:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:13 2025 by rpki-client