Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: 0mjpGFHsb/eECyCEB84zhs3SWAC0iY6Hba/sBnsZDkk=
Subject key identifier: F0:F0:D4:A2:80:DF:BD:24:20:EC:12:5E:D0:FB:9B:5E:6B:DB:5E:7F
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 01960A1E94311F51CA7437339B8CA4BB7831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 14D9
Signing time: Sun 06 Apr 2025 08:01:38 +0000
Manifest this update: Sun 06 Apr 2025 08:01:38 +0000
Manifest next update: Mon 07 Apr 2025 08:01:38 +0000
Files and hashes: 1: HCkGRctLJ1ePeWXWFjnQs-P5BH0.roa (hash: tw5rYUuFpBr4QpbNuBNtp2/1hdw23rZNSzLDyhsXnAY=)
2: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (hash: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=)
3: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: 2aHk+R3rVlQoppNx3pci8Rjh6sXTlCnws1oCV2lOjIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:1e:94:31:1f:51:ca:74:37:33:9b:8c:a4:bb:78:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Apr 6 08:01:38 2025 GMT
Not After : Apr 7 08:01:38 2025 GMT
Subject: CN=f0f0d4a280dfbd2420ec125ed0fb9b5e6bdb5e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:d2:8c:4f:db:fa:b5:c5:f4:87:77:08:1b:
ec:2a:2f:ff:5b:d6:a7:24:86:29:85:b0:7c:3c:26:
ce:27:d9:62:78:68:b4:e7:80:8d:de:64:a4:66:62:
2f:24:06:f2:6b:b8:5b:2c:77:bb:d6:0b:53:c0:da:
a5:9c:64:b9:68:b5:84:60:c4:ed:53:74:2e:df:97:
0a:7f:5f:2b:eb:25:04:d0:59:ea:4a:56:5b:7e:cb:
71:02:51:76:a1:35:36:fd:72:c3:a5:eb:5f:a6:e8:
4e:9b:8b:43:d3:ec:36:91:17:60:36:a4:77:b6:c4:
9a:95:96:46:4a:d6:14:e2:66:cb:5c:04:d4:c0:fe:
4d:d0:3a:58:4f:e0:2e:12:2e:ca:ae:d1:31:bd:0d:
79:f9:91:8d:40:48:a4:73:db:4c:e7:20:bc:21:13:
e7:9f:56:7d:3e:3f:80:af:1a:81:7f:f8:a2:f4:d6:
f8:60:9f:fd:3a:1c:0e:b1:7e:59:6a:d2:a9:bf:a2:
83:a2:47:bc:b3:e4:5b:45:d7:2d:3d:8d:ca:82:99:
04:03:11:78:4e:cd:36:77:1e:a1:b7:f2:ae:3e:49:
c8:d9:fb:48:11:f3:bd:56:73:fd:6a:c2:69:59:2e:
3f:2a:58:b0:57:a6:05:89:ac:56:b9:5a:e7:d8:35:
6b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F0:D4:A2:80:DF:BD:24:20:EC:12:5E:D0:FB:9B:5E:6B:DB:5E:7F
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e4:c4:fa:9c:84:82:45:f0:e7:b6:63:62:44:44:ff:98:20:
b7:4b:06:5a:e3:68:a4:3d:eb:2f:b9:bc:57:c7:21:16:8d:15:
bf:03:ae:ba:cc:09:9e:27:6c:11:e5:85:13:91:98:08:85:6a:
f9:4d:9f:45:94:ed:73:b5:c2:6e:8c:3c:19:b6:34:d4:1f:97:
e3:ae:68:73:e4:cf:37:9a:5e:8f:1e:2f:ba:3b:df:e5:5c:f5:
ac:0d:d2:ae:4c:44:06:74:a1:99:ea:23:52:67:8c:cd:39:ad:
7b:44:c1:f8:5d:b8:a1:20:43:ed:67:04:ad:40:69:b8:06:f9:
95:18:cb:53:81:1c:22:67:00:17:9d:07:49:c6:41:69:08:c5:
b3:1e:12:a5:83:17:38:c6:18:7d:28:10:7e:af:8c:78:f2:7d:
83:76:2a:55:6e:e7:fe:d7:4b:b8:a9:58:9e:50:aa:2e:49:d0:
34:c9:4c:49:cd:53:29:4d:bd:bf:a7:96:b2:af:df:59:3c:7e:
e1:8b:e6:d8:88:a8:c7:57:6a:67:15:34:c8:38:30:b1:42:a5:
48:35:86:92:79:b5:77:b0:0e:12:e1:3e:fd:85:af:7a:7c:b8:
92:92:a6:7a:c8:b9:39:61:40:67:a3:54:41:3e:c5:29:fa:a2:
90:3e:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:30:37 2025 by rpki-client