Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier: Gh6NgkCC+OzGpjpjVHARotIVL12sxnMj2yp3kLbXDXI=
Subject key identifier: AA:71:70:A0:85:31:70:48:64:D2:09:A3:F2:7D:67:FC:20:56:FC:C4
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial: 019644B1D4919FA3F988F2314104DE3A0FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number: 07D5
Signing time: Thu 17 Apr 2025 17:00:26 +0000
Manifest this update: Thu 17 Apr 2025 17:00:26 +0000
Manifest next update: Fri 18 Apr 2025 17:00:26 +0000
Files and hashes: 1: 1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa (hash: WaCyd+8XHtQ9NQJZXiDHgOg3ILGjfZThoYeSrYEPMP4=)
2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: ywOnwlbupJD8ffY20Iu/26omJSRavMX1RHw4QCuOoNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:d4:91:9f:a3:f9:88:f2:31:41:04:de:3a:0f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Validity
Not Before: Apr 17 17:00:26 2025 GMT
Not After : Apr 18 17:00:26 2025 GMT
Subject: CN=aa7170a08531704864d209a3f27d67fc2056fcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:d0:0f:e8:b0:d7:44:9e:63:92:f9:d8:9e:
14:3d:95:40:28:07:6f:88:17:87:3c:95:d9:ee:c1:
85:39:80:ca:89:6e:c6:f1:13:c8:2e:53:eb:de:ae:
c4:d3:2f:93:55:ad:66:49:29:2d:77:45:21:11:b6:
8a:b1:3f:07:f8:c2:66:98:7c:8c:ce:4f:41:3c:c7:
14:bf:fd:bd:35:0f:26:a9:03:9a:59:71:bb:fd:33:
37:29:29:d7:76:3b:c5:b8:50:0d:76:7f:86:88:6e:
f2:2c:17:dc:5e:29:1a:97:c9:87:f9:fe:cb:39:9e:
5b:a8:32:07:34:49:56:0d:8b:03:a5:36:08:e0:25:
19:6e:f6:3c:3a:e9:34:be:49:a5:15:ad:5e:70:e1:
74:84:02:43:af:94:bd:81:63:27:70:3f:3f:1e:5d:
ba:a0:ff:f5:14:72:89:e7:4f:7b:8e:68:89:56:51:
61:c3:a8:63:96:84:17:e0:93:4b:19:e4:a1:c1:0e:
aa:e7:b6:e7:38:2d:9e:1e:83:54:9a:f5:e6:6d:5f:
5a:77:1d:ca:13:d6:f4:8b:69:dd:7d:90:c4:70:25:
8b:9c:8e:a9:f0:ca:c6:9e:20:3a:ae:63:4d:73:b9:
33:f8:ac:d3:29:68:7c:8f:8f:49:55:50:e5:cc:ba:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:71:70:A0:85:31:70:48:64:D2:09:A3:F2:7D:67:FC:20:56:FC:C4
X509v3 Authority Key Identifier:
keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d5:c3:70:81:2c:b0:6c:5f:b8:20:50:d9:71:07:12:3c:81:
f4:5f:3f:02:3c:d0:00:74:48:6e:07:07:96:e9:be:bf:12:d9:
05:a4:41:a0:5e:0a:06:65:87:1d:58:2a:9e:de:60:08:6e:aa:
03:c1:b2:9f:45:4d:e3:9c:bc:28:ab:56:37:94:f0:0a:97:43:
f0:d6:64:87:d2:2a:fa:cc:87:90:c5:05:f1:9b:28:72:41:56:
1e:a7:b3:23:95:46:41:32:49:db:ac:63:a7:bc:fc:40:25:d9:
80:7e:e0:cb:af:2c:19:f9:89:5e:6a:77:bf:a4:5e:24:d2:e9:
30:95:08:b4:a8:de:cd:1f:91:b8:d6:10:ef:13:4e:c9:2a:66:
22:3d:1c:37:8b:0e:bf:8e:64:be:b4:1f:bb:b0:b1:7b:cc:53:
b9:15:2c:24:ce:f9:d5:86:c8:8c:c9:b2:ec:cb:16:a4:44:31:
1c:8b:36:88:d3:e6:27:f6:49:ad:1e:7b:34:8c:cc:e4:61:c5:
45:be:44:c8:fa:a1:f9:1a:f8:80:d3:e8:4e:0f:2a:90:b6:20:
85:69:fa:35:bc:d7:ee:39:59:95:24:47:85:79:dc:6a:5b:53:
d7:ef:01:76:08:2c:cf:79:b2:8e:88:9e:7b:f7:ef:f9:b3:7e:
b1:3f:18:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEsdSRn6P5iPIxQQTeOg/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYmRhOGNhODY5NDhkOWZlMDI5ZGExMTFhMGM5ZTcwZDMw
NDZhNWEwHhcNMjUwNDE3MTcwMDI2WhcNMjUwNDE4MTcwMDI2WjAzMTEwLwYDVQQD
EyhhYTcxNzBhMDg1MzE3MDQ4NjRkMjA5YTNmMjdkNjdmYzIwNTZmY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF/QD+iw10SeY5L52J4UPZVAKAdv
iBeHPJXZ7sGFOYDKiW7G8RPILlPr3q7E0y+TVa1mSSktd0UhEbaKsT8H+MJmmHyM
zk9BPMcUv/29NQ8mqQOaWXG7/TM3KSnXdjvFuFANdn+GiG7yLBfcXikal8mH+f7L
OZ5bqDIHNElWDYsDpTYI4CUZbvY8Ouk0vkmlFa1ecOF0hAJDr5S9gWMncD8/Hl26
oP/1FHKJ5097jmiJVlFhw6hjloQX4JNLGeShwQ6q57bnOC2eHoNUmvXmbV9adx3K
E9b0i2ndfZDEcCWLnI6p8MrGniA6rmNNc7kz+KzTKWh8j49JVVDlzLqNLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpxcKCFMXBIZNIJo/J9Z/wgVvzEMB8GA1UdIwQY
MBaAFBC9qMqGlI2f4CnaERoMnnDTBGpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMGE3OTAtNGVkOS00NGMzLThkZmQt
MGJlZjlhM2JhYmE4LzEvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jMGE3OTAtNGVkOS00NGMzLThkZmQtMGJlZjlhM2JhYmE4
LzEvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdXDcIEs
sGxfuCBQ2XEHEjyB9F8/AjzQAHRIbgcHlum+vxLZBaRBoF4KBmWHHVgqnt5gCG6q
A8Gyn0VN45y8KKtWN5TwCpdD8NZkh9Iq+syHkMUF8ZsockFWHqezI5VGQTJJ26xj
p7z8QCXZgH7gy68sGfmJXmp3v6ReJNLpMJUItKjezR+RuNYQ7xNOySpmIj0cN4sO
v45kvrQfu7Cxe8xTuRUsJM751YbIjMmy7MsWpEQxHIs2iNPmJ/ZJrR57NIzM5GHF
Rb5EyPqh+Rr4gNPoTg8qkLYghWn6NbzX7jlZlSRHhXncaltT1+8Bdggsz3myjoie
e/fv+bN+sT8YcA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:34:49 2025 by rpki-client