Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File: eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier: ti82z2WHTSRj3PqyjqP2q/IGfjliIxyVLwYbUWJdE+0=
Subject key identifier: 43:34:EE:19:25:9E:19:71:E5:7E:DC:66:F6:64:87:3E:42:7A:51:4B
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial: 0196556E89AD727DEF535724468EBAB0C7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number: 1028
Signing time: Sun 20 Apr 2025 23:00:29 +0000
Manifest this update: Sun 20 Apr 2025 23:00:29 +0000
Manifest next update: Mon 21 Apr 2025 23:00:29 +0000
Files and hashes: 1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: SRYrNdPLDweIudpfcvf6OYlZjH7BgH90awph2thsAPE=)
2: rCglPn4knwgWeE7oLxm6sX7WFlI.roa (hash: wKFZrWQvHUIDP0fnVkeuzqCpYiJl4+aOfjYBOGOYUoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:89:ad:72:7d:ef:53:57:24:46:8e:ba:b0:c7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Validity
Not Before: Apr 20 23:00:29 2025 GMT
Not After : Apr 21 23:00:29 2025 GMT
Subject: CN=4334ee19259e1971e57edc66f664873e427a514b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:88:ce:db:01:f2:5d:28:ed:36:69:74:5d:
46:fc:58:d4:4c:39:48:30:76:13:22:da:93:b3:1e:
f2:2c:d0:65:10:2b:fc:ea:27:3b:16:17:d7:94:a9:
08:32:53:9d:6e:4e:2e:d7:77:39:c5:ec:e9:c3:f4:
7c:92:61:3d:21:6c:af:7d:b0:4d:d1:06:d9:3d:89:
74:48:80:9e:e5:88:7a:d7:d1:22:3d:1c:53:b8:3c:
a1:0f:6c:e5:c3:61:0d:79:c6:fd:01:4e:74:82:ad:
90:a1:5a:24:2a:76:c7:68:38:89:b4:6e:5f:85:c6:
0c:07:93:5e:02:f4:2b:9f:ea:c8:55:6a:7c:45:1b:
42:91:46:5c:89:78:29:15:c8:db:12:d6:f9:4f:3f:
05:6e:17:14:42:1f:06:81:d4:c0:7d:ef:44:4d:b3:
cc:d4:61:d7:b5:7e:30:12:b4:62:2b:c7:d5:e1:e8:
b5:ef:8d:c5:bd:e7:4d:22:66:53:20:32:87:4d:58:
28:ef:b2:72:f8:b2:68:fe:b8:cb:bf:26:d3:5c:9f:
f4:11:21:db:27:b6:56:d6:c5:49:fe:b1:c6:e1:f3:
7a:a1:f3:bd:aa:43:7e:60:17:a3:8e:ef:38:ec:84:
bd:05:ed:76:03:d5:a6:1e:e5:a6:cc:a1:e4:92:3f:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:34:EE:19:25:9E:19:71:E5:7E:DC:66:F6:64:87:3E:42:7A:51:4B
X509v3 Authority Key Identifier:
keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:85:77:c8:41:a9:c2:a6:04:4d:d6:4c:4e:2f:bb:1e:4d:fc:
54:91:82:33:7a:63:cf:55:a2:67:e0:7a:f9:06:32:03:ac:1d:
65:f8:a3:8a:09:5b:94:9e:aa:3f:2e:e1:00:28:4b:21:a7:40:
cd:41:76:fe:62:8a:48:13:43:5f:2b:0f:85:54:09:c0:87:f2:
b1:cc:20:38:6d:ed:27:68:65:56:ee:06:49:be:cf:a5:79:13:
d3:85:c5:39:c5:b8:50:5f:87:ce:84:d4:06:2a:42:d2:1d:61:
1a:52:fc:3b:a9:be:a7:c7:c7:12:a6:1f:6c:92:69:a3:48:df:
3d:3b:da:54:6f:c4:c9:0b:7c:69:28:65:34:d4:ed:5e:a5:ab:
a2:04:99:a5:95:12:20:c6:97:af:21:a0:ed:4c:d4:6f:83:3b:
68:6f:e2:23:c4:f6:36:c1:e0:84:b1:c5:36:ef:6e:a6:12:79:
24:f7:17:28:02:63:65:9f:0c:d9:4f:98:86:cb:31:85:56:8a:
b7:03:8a:af:14:98:2f:0a:e0:b8:41:0b:bc:46:94:62:35:83:
7d:4b:28:5c:b1:22:14:62:0d:31:96:d6:1b:26:d2:63:0f:51:
12:58:a9:42:0d:28:d0:5f:2c:ba:c4:1a:58:ed:4b:32:b3:7c:
18:8e:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:06 2025 by rpki-client