Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: ChHn3M2/3ufgGG2aI6zQjv1hRKH+hCaffFT3m7oRaCQ=
Subject key identifier: 2E:AD:F1:48:5A:74:3E:34:F6:95:97:62:21:8C:CE:28:ED:3F:BA:13
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 01963EAFA99E7A25B4452315888D0C777FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 0408
Signing time: Wed 16 Apr 2025 13:00:21 +0000
Manifest this update: Wed 16 Apr 2025 13:00:21 +0000
Manifest next update: Thu 17 Apr 2025 13:00:21 +0000
Files and hashes: 1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: 2/fLHLkHGKcepyZ5cYbvBU37K1dPcnY34kwDSSbUcN4=)
3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:a9:9e:7a:25:b4:45:23:15:88:8d:0c:77:7f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Apr 16 13:00:21 2025 GMT
Not After : Apr 17 13:00:21 2025 GMT
Subject: CN=2eadf1485a743e34f6959762218cce28ed3fba13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:ef:bb:13:3d:f3:3b:28:16:fb:95:34:e6:
ac:ce:49:95:cc:54:4c:65:c5:61:2b:b6:bf:48:2b:
69:bb:a2:c3:16:b1:22:fb:86:78:b7:be:2c:16:16:
f2:23:e7:3c:85:e2:3a:91:27:a8:8e:0e:48:44:74:
a8:c1:68:2e:a9:af:14:1b:2f:f8:d7:45:d9:4d:85:
ad:9c:39:52:8a:72:35:63:59:9d:cd:b1:3c:1c:f9:
ff:65:65:83:ea:c7:5f:4e:cf:66:1e:13:21:55:08:
ee:0a:fb:79:c8:1e:5b:ea:6e:b0:22:99:3d:c7:59:
9f:88:61:3c:82:31:28:cc:4d:6e:c2:95:3f:f9:33:
f4:27:33:1b:bb:54:41:05:36:15:e4:29:f1:63:37:
29:16:98:a8:67:65:ab:a6:56:66:19:de:e8:8f:aa:
a2:9d:7e:72:36:b9:a6:0b:79:0f:d1:fd:d7:61:99:
97:ec:93:b8:28:af:29:c7:b7:9b:5c:8c:92:9e:cc:
b4:7d:2e:a7:01:70:22:d8:da:cb:f8:31:11:79:d7:
20:8c:97:b1:d6:1b:c4:b7:8b:f9:64:de:e7:97:a3:
d1:ac:a1:dd:52:00:9c:1f:37:df:7f:bb:48:62:ce:
80:6d:6e:6e:74:5a:27:70:f8:14:f4:81:51:b9:76:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AD:F1:48:5A:74:3E:34:F6:95:97:62:21:8C:CE:28:ED:3F:BA:13
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d6:6d:84:13:96:3a:ff:d0:6a:b4:30:f3:96:1a:8b:85:0a:
a1:87:69:eb:ff:89:7c:81:b0:d4:db:1a:01:7e:12:3a:62:7d:
32:e2:31:8f:fb:91:5b:02:f8:8f:52:0c:97:49:c6:19:42:4d:
6e:58:8d:1f:eb:e4:d1:0e:26:33:7d:67:d5:86:2e:34:d6:69:
24:5e:84:bf:a1:f8:45:a7:c5:1a:45:50:ba:72:73:1c:6a:ee:
a4:b1:a4:8a:22:99:fe:c4:a5:2d:45:a5:92:50:51:53:22:cd:
8c:f2:77:a6:33:80:cb:30:7d:cd:05:11:38:55:d3:23:c5:17:
91:45:98:1a:0f:4a:f0:77:3d:ed:2d:cd:c4:f7:1d:b9:6e:9f:
7a:f6:f7:18:e4:af:22:fa:e8:90:0b:57:18:59:85:60:93:f2:
9d:5c:c2:99:15:f3:ba:ef:1e:d2:04:aa:16:f0:df:b2:fa:0f:
ab:70:db:ef:a0:a2:ae:8c:62:54:c0:c5:b9:c6:88:ad:12:0b:
8d:6c:04:77:24:a1:94:f1:28:3d:85:1a:c7:3d:c0:1a:8c:26:
ff:4b:44:42:9a:c1:ff:9e:42:c1:e2:62:63:04:f9:dd:29:b4:
7f:ad:56:42:18:34:01:03:5a:d6:ae:5f:66:2f:38:c9:71:bc:
53:1f:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:57:29 2025 by rpki-client