Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File: eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier: 4Yooq0r2M15WodmocQsKY2CAl1hOK7FHZiVDAY4W674=
Subject key identifier: 60:F8:22:15:B3:DE:DA:E4:0B:5D:4B:5C:6E:E6:7F:05:F4:56:22:C3
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 01965801CCE79A55B5B1C03B7C226C79AFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number: 0D0F
Signing time: Mon 21 Apr 2025 11:00:35 +0000
Manifest this update: Mon 21 Apr 2025 11:00:35 +0000
Manifest next update: Tue 22 Apr 2025 11:00:35 +0000
Files and hashes: 1: 03o7NXcv7U3uhmW3vl8ktxXIEVI.roa (hash: uqR7OCO4P5GAQJzWKXoDWdhHBwfEakY01mZT4sBENQc=)
2: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
3: 7sjN2_HImQcJ9USVUGWMp0CNmPA.roa (hash: CA5FQ+7/XO2sFqAdifwglNJ59I+wJgTcZkMw34QXhR8=)
4: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: tk75vGdD805KmdI+leXmhpYTg8wpfb+OmfTp4sUTpJ0=)
5: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:cc:e7:9a:55:b5:b1:c0:3b:7c:22:6c:79:af:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Apr 21 11:00:35 2025 GMT
Not After : Apr 22 11:00:35 2025 GMT
Subject: CN=60f82215b3dedae40b5d4b5c6ee67f05f45622c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c8:9f:49:0c:92:52:c5:74:6e:c5:0c:a3:40:
88:52:18:47:9d:e9:b8:3c:4a:92:37:47:77:59:96:
14:2f:44:b5:4b:d8:f1:96:c1:05:53:3c:15:4d:e9:
42:e0:f3:b1:fb:ed:27:e4:31:f5:b7:4b:73:f3:88:
84:ea:2b:94:c3:33:f5:12:24:fb:b7:52:8b:09:34:
02:f3:84:92:f6:9e:c4:22:8f:33:b9:44:a3:97:fb:
d4:1e:04:8e:e7:dd:89:35:0a:7d:bb:2d:95:cc:d2:
e0:1a:bd:34:78:7e:93:f9:7f:4a:2b:66:7e:40:4e:
8c:43:7c:96:dc:25:e8:4d:23:96:ae:27:69:9f:68:
d5:ca:9c:03:2e:33:4e:90:88:72:f2:c3:ca:af:49:
16:49:ea:02:77:9c:65:97:50:31:59:b2:8c:0e:6c:
0e:33:a9:01:90:b6:7a:f2:7f:85:57:7a:2d:e8:ba:
99:df:e2:5e:6f:ae:a8:86:0f:ed:ed:68:13:bd:6d:
88:ec:e3:15:30:7d:38:f4:49:f8:ef:62:88:aa:87:
79:5f:39:12:f3:03:f6:40:f0:1d:75:ab:10:f6:67:
a0:99:64:e0:63:ed:31:ee:f0:e3:d6:b5:8d:5a:0f:
f5:f5:fc:ac:f2:1f:ff:80:d0:b3:5a:3e:7f:cc:9e:
f1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F8:22:15:B3:DE:DA:E4:0B:5D:4B:5C:6E:E6:7F:05:F4:56:22:C3
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:49:ec:34:30:57:48:7b:72:4a:bc:4c:f2:80:02:83:18:
1c:65:69:8c:df:27:a9:69:4b:76:cd:d2:16:68:ef:1b:b1:37:
84:01:8a:79:b6:0f:37:d4:fa:80:f1:44:a2:ba:2b:22:1f:bb:
58:a8:8f:cc:e7:10:a8:ed:26:8c:73:cd:ec:dc:01:cb:64:f1:
f7:92:43:78:74:e2:ea:96:06:ec:1e:6f:6f:8d:c0:ff:1c:63:
47:c9:e3:bf:ad:81:df:44:ef:cd:40:54:a1:51:35:14:33:57:
bc:d2:7e:c7:5c:5e:86:ba:c5:9a:4e:6f:ba:3f:03:55:de:99:
89:9f:35:99:28:a3:63:24:a4:7a:bf:20:c0:84:ae:1c:7d:c4:
79:b6:3b:6e:c5:33:f3:73:d3:80:e9:e7:57:4e:dd:bf:4f:d0:
d0:1c:c5:1c:64:1b:92:bd:c7:f8:22:4d:a8:62:8e:7b:30:26:
30:21:b2:80:80:20:d6:0d:d2:f4:66:90:e6:f7:01:b2:28:fa:
8c:7d:94:60:46:02:69:ac:05:64:e6:f2:cd:c8:ea:22:43:4c:
5d:40:66:e1:28:a6:b0:e1:10:8e:b9:d6:16:f2:25:a1:e0:4d:
2a:d2:cd:93:3f:98:00:fc:10:37:95:64:24:d6:3e:a0:e6:d4:
4e:0c:54:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:31 2025 by rpki-client