Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File: edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier: UqTcdoYfvYpTJXmLZo3/uhEIljzyoVSUKPCVkTQmwpE=
Subject key identifier: 74:C4:DD:B7:03:D4:5B:6B:58:99:49:37:E6:2F:74:C0:D8:32:F6:1B
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 019646A07EAE720B74D6B85F7A39AA017460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number: 1018
Signing time: Fri 18 Apr 2025 02:00:45 +0000
Manifest this update: Fri 18 Apr 2025 02:00:45 +0000
Manifest next update: Sat 19 Apr 2025 02:00:45 +0000
Files and hashes: 1: TYJYGhUdPQj6nUzCCLnr49eyuJI.roa (hash: FFOiY72wCTLfd9O6jpfQiklPE7rmHUgalP7Yo7iSGDQ=)
2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: rC5h82hTAuwq9uztJn1HcT1NXWybSt+1DGp6a6iJH4c=)
3: hAlLG94IoU5kKafsGjrMwkfb3Zw.roa (hash: ln0Y8HQZmVKSWnd47yKAygvb/rzeGv9K49zzh8vw+ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:7e:ae:72:0b:74:d6:b8:5f:7a:39:aa:01:74:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: Apr 18 02:00:45 2025 GMT
Not After : Apr 19 02:00:45 2025 GMT
Subject: CN=74c4ddb703d45b6b58994937e62f74c0d832f61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:55:05:64:10:80:c8:54:d5:3b:ed:22:08:
4d:1f:4a:bc:db:06:fa:1a:c8:1b:f7:9e:15:3e:54:
c9:5a:0a:fa:4a:13:1e:80:7a:4a:51:70:b8:51:62:
50:d6:4f:ef:83:c8:c8:e4:08:33:56:36:3b:ef:64:
0c:05:21:05:d9:2a:1d:7b:0b:cc:ed:52:98:35:f6:
09:4c:8a:78:f0:1d:c0:30:fb:98:f8:9a:19:86:54:
4f:75:c8:f9:5a:81:fd:71:5a:43:54:36:3d:31:76:
27:09:db:50:79:8d:2d:3d:06:91:90:b2:d1:94:d4:
33:26:e7:ab:01:38:04:31:0d:8a:5d:40:2c:cd:ee:
e2:2f:b4:b2:66:70:c4:6a:ed:a0:8b:34:14:0e:0a:
c7:a8:29:9b:1b:b4:4f:4e:b6:08:37:d1:53:7d:d8:
6b:2c:85:5a:90:72:72:5f:83:92:0a:eb:f7:fd:8e:
37:da:34:5d:3e:fc:4a:c8:18:bf:33:37:ed:bb:f8:
de:c6:3a:0d:16:5b:a6:20:55:60:1a:83:b9:b5:9f:
14:d1:93:61:94:6f:ab:dd:94:12:0c:ef:79:ae:ee:
2d:e0:83:f0:cc:9e:a8:21:2e:99:83:2d:da:2a:68:
18:41:6c:58:53:68:f2:9e:1f:15:ab:92:e5:34:9e:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C4:DD:B7:03:D4:5B:6B:58:99:49:37:E6:2F:74:C0:D8:32:F6:1B
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3c:28:f0:b6:8f:3b:96:4b:ef:05:41:d8:8c:b1:03:73:d0:
d7:29:39:ff:ca:6b:35:7c:33:c3:36:d0:3f:f1:14:fe:df:49:
5f:41:9f:80:23:b2:f8:36:59:f7:40:a4:af:92:a8:b4:24:a7:
f2:c2:b8:d0:f1:97:b1:d1:d5:32:cf:6f:f2:ec:b2:29:c8:dd:
15:c7:6c:32:92:02:af:56:b2:ff:37:c8:24:71:d1:d2:54:51:
af:d2:1a:3b:69:dd:df:77:e1:01:4f:4c:3c:24:58:d8:4f:c9:
f2:c7:19:70:73:cf:5f:85:22:d4:2f:f0:76:70:a2:9b:9c:68:
27:14:63:f2:f9:6f:f9:da:0b:bd:a7:c9:35:b6:b0:31:7d:d3:
fb:58:ea:2d:22:dc:5a:5b:c5:39:68:41:9d:13:23:d9:15:5e:
95:64:2c:0b:5a:6e:27:d9:4b:b1:a8:fd:53:01:f2:fc:c4:22:
c4:f2:c2:2e:3c:9a:2a:a0:44:93:e2:84:e0:17:61:5f:f3:4c:
ad:dd:cd:27:c0:cd:72:6c:21:bf:0b:17:a3:64:55:71:61:cf:
7b:42:5d:64:ad:7f:84:57:46:68:19:df:78:c1:88:0c:9a:ea:
c0:c8:b6:1a:18:ed:80:f5:04:09:5c:cf:55:1a:99:5e:e4:75:
bd:09:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:37:51 2025 by rpki-client