Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
File: eLBPuvqja3H8027KULX-DojdNVE.mft (raw, json)
Hash identifier: wkzL3vn7GOWxcQzBoDrF+h/bJ6GxCwoVRHlREvpLLxo=
Subject key identifier: C4:0B:3E:3F:80:05:D0:58:70:EE:D0:93:95:7D:C4:A8:70:AE:98:24
Authority key identifier: 78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
Certificate issuer: /CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Certificate serial: 01964EC826C8CC7F3D2BC3C7A1CFEF651140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 16:01:02 +0000
Manifest this update: Sat 19 Apr 2025 16:01:02 +0000
Manifest next update: Sun 20 Apr 2025 16:01:02 +0000
Files and hashes: 1: _bd1uUXdWfimJKjSRLsLwjuEcR8.roa (hash: uctm/cSaahCT9GH/ghFykbr6OfbIpXkqwxi32eXN9Ao=)
2: bqoiPzwRe4PUMqiK_-uqiOSrT8g.roa (hash: zxBqKx04g5nB2wdjrM/3iI8Vlwm/BGdUl98rn328O3U=)
3: eLBPuvqja3H8027KULX-DojdNVE.crl (hash: SQh6U0nMhmE+CCl+bXa7Z8qhQIK1Ppl5mNTJQatvIro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c8:26:c8:cc:7f:3d:2b:c3:c7:a1:cf:ef:65:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Validity
Not Before: Apr 19 16:01:02 2025 GMT
Not After : Apr 20 16:01:02 2025 GMT
Subject: CN=c40b3e3f8005d05870eed093957dc4a870ae9824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:46:b9:c1:48:d0:b2:c9:43:cc:d7:c7:2f:
5d:f4:e1:d0:05:5b:c1:1a:e3:a8:33:cb:c7:1a:00:
3b:18:27:b4:ea:9e:df:42:05:5b:8d:ca:c2:c1:1a:
16:ca:6f:c3:a7:da:ca:58:7d:ce:74:55:c9:be:2d:
20:33:89:ab:d0:a3:6a:30:7a:79:ae:b1:6d:05:8d:
c6:33:15:83:0d:4a:9e:12:fe:2e:ca:57:1e:1f:0e:
00:e7:e6:7d:7c:36:0f:2d:78:45:0e:9a:ca:18:fe:
0c:6e:09:87:1e:bc:93:d5:3b:c8:2b:fa:af:9e:a7:
e5:18:d5:37:3b:1f:7a:0b:b6:8b:fd:8c:1f:3a:27:
42:8d:04:3b:57:df:e7:18:be:6d:c3:5f:4e:be:c4:
e7:13:b5:38:4e:91:7f:ff:60:a2:03:6a:ac:36:0a:
8e:8e:01:31:ff:68:b5:23:6a:4f:21:fb:eb:ea:c6:
23:ef:ad:ea:05:98:5f:79:cf:40:47:8d:d4:ae:7a:
fc:32:6b:a1:43:22:f7:35:f5:bf:69:b2:dc:45:b7:
3b:5a:a4:aa:e1:c8:c1:94:cf:70:ca:bf:92:c2:1c:
da:9e:bf:06:35:66:f7:71:47:dd:ad:19:18:47:fe:
19:6f:e2:9a:8a:c4:f4:f5:95:35:5c:fe:08:f4:5b:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0B:3E:3F:80:05:D0:58:70:EE:D0:93:95:7D:C4:A8:70:AE:98:24
X509v3 Authority Key Identifier:
keyid:78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:21:7d:b6:95:a0:41:34:b7:3f:ed:c7:fa:01:ac:3c:ef:f2:
82:96:db:7f:89:c5:87:32:de:df:e4:40:d1:dc:a9:49:58:22:
5b:8b:8f:e9:7b:b2:c9:f4:22:60:83:80:bf:a8:aa:83:ed:73:
ca:72:5d:f4:fe:26:9d:f2:ab:93:15:73:9b:fb:d4:83:0b:f0:
c8:59:22:e2:ed:b4:62:88:16:7f:04:d7:68:a7:d0:c6:74:42:
71:fc:c0:9d:3f:7e:14:d1:51:c1:58:b7:01:c0:41:ba:b8:36:
14:57:c1:b2:34:bd:49:63:01:d6:ab:ef:55:4c:34:26:69:03:
04:ca:76:05:1a:c9:50:b7:ee:8f:35:7f:6f:47:28:ab:37:f3:
0c:a6:47:14:fc:8e:a2:18:94:0d:20:ba:46:90:b1:2c:ca:fe:
f7:93:ff:f1:c3:74:83:52:e4:ee:c0:d0:b6:bf:e7:ee:b3:93:
30:19:1d:c2:21:0d:57:41:92:21:ef:74:8b:fe:ef:00:fb:c0:
e0:d6:48:89:69:03:fe:0c:9d:12:65:bf:05:48:a6:fe:f3:44:
ce:58:69:59:52:7a:26:b0:a3:df:a1:55:98:89:86:7e:bf:0e:
5c:4b:71:16:99:7a:30:9e:93:fd:2a:68:b1:de:72:03:b6:e8:
9c:36:01:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOyCbIzH89K8PHoc/vZRFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YjA0ZmJhZmFhMzZiNzFmY2QzNmVjYTUwYjVmZTBlODhk
ZDM1NTEwHhcNMjUwNDE5MTYwMTAyWhcNMjUwNDIwMTYwMTAyWjAzMTEwLwYDVQQD
EyhjNDBiM2UzZjgwMDVkMDU4NzBlZWQwOTM5NTdkYzRhODcwYWU5ODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxdGucFI0LLJQ8zXxy9d9OHQBVvB
GuOoM8vHGgA7GCe06p7fQgVbjcrCwRoWym/Dp9rKWH3OdFXJvi0gM4mr0KNqMHp5
rrFtBY3GMxWDDUqeEv4uylceHw4A5+Z9fDYPLXhFDprKGP4MbgmHHryT1TvIK/qv
nqflGNU3Ox96C7aL/YwfOidCjQQ7V9/nGL5tw19OvsTnE7U4TpF//2CiA2qsNgqO
jgEx/2i1I2pPIfvr6sYj763qBZhfec9AR43Urnr8MmuhQyL3NfW/abLcRbc7WqSq
4cjBlM9wyr+Swhzanr8GNWb3cUfdrRkYR/4Zb+KaisT09ZU1XP4I9Ft1NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQLPj+ABdBYcO7Qk5V9xKhwrpgkMB8GA1UdIwQY
MBaAFHiwT7r6o2tx/NNuylC1/g6I3TVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUxCUHV2cWphM0g4MDI3S1VMWC1Eb2pkTlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jNDFjNzQtMGI4Mi00MGU3LWEwYmYt
MGFhZTFjY2Q4NzRiLzEvZUxCUHV2cWphM0g4MDI3S1VMWC1Eb2pkTlZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9jNDFjNzQtMGI4Mi00MGU3LWEwYmYtMGFhZTFjY2Q4NzRi
LzEvZUxCUHV2cWphM0g4MDI3S1VMWC1Eb2pkTlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiF9tpWg
QTS3P+3H+gGsPO/ygpbbf4nFhzLe3+RA0dypSVgiW4uP6XuyyfQiYIOAv6iqg+1z
ynJd9P4mnfKrkxVzm/vUgwvwyFki4u20YogWfwTXaKfQxnRCcfzAnT9+FNFRwVi3
AcBBurg2FFfBsjS9SWMB1qvvVUw0JmkDBMp2BRrJULfujzV/b0coqzfzDKZHFPyO
ohiUDSC6RpCxLMr+95P/8cN0g1Lk7sDQtr/n7rOTMBkdwiENV0GSIe90i/7vAPvA
4NZIiWkD/gydEmW/BUim/vNEzlhpWVJ6JrCj36FVmImGfr8OXEtxFpl6MJ6T/Spo
sd5yA7bonDYBNA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:33 2025 by rpki-client