Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
File: ecuROUt5B4HTqHc6hV5amjryCBA.mft (raw, json)
Hash identifier: Nfv8rorbjeWC4XjzI0BIxy4kCKBWfS8uexanYgkfHvQ=
Subject key identifier: AF:63:1C:63:22:BB:07:9D:7A:DC:A6:64:39:88:8E:C0:AA:73:EA:A9
Authority key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
Certificate issuer: /CN=79cb91394b790781d3a8773a855e5a9a3af20810
Certificate serial: 01964E90E009B4002C9516245A3624467D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
Manifest number: 40
Signing time: Sat 19 Apr 2025 15:00:39 +0000
Manifest this update: Sat 19 Apr 2025 15:00:39 +0000
Manifest next update: Sun 20 Apr 2025 15:00:39 +0000
Files and hashes: 1: 5YkjXXO1-roWgSaa-VjH_Qj1GQk.roa (hash: zhJALOAXOJL7mF2t5wg9TLqnLmZcgXJJ2Y83N1a9W4U=)
2: LMHD5jghEaDQC9_G7jF8XWal8ps.roa (hash: jxKicmXNBewinH9/ixPIJjvckHeRxlb2ek2Hy+28d80=)
3: ecuROUt5B4HTqHc6hV5amjryCBA.crl (hash: ZH1T3yqHnWmXn/r0gxwRvXC0l5k2Ys1prSqPPfYkLtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:e0:09:b4:00:2c:95:16:24:5a:36:24:46:7d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cb91394b790781d3a8773a855e5a9a3af20810
Validity
Not Before: Apr 19 15:00:39 2025 GMT
Not After : Apr 20 15:00:39 2025 GMT
Subject: CN=af631c6322bb079d7adca66439888ec0aa73eaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:23:3b:c0:41:5c:52:cb:ef:52:ec:41:61:
50:c1:0f:2f:04:be:f8:c9:dc:15:95:05:ae:49:6e:
2b:2f:a1:69:37:19:a5:d8:b8:d4:c6:f5:57:ab:33:
ec:d6:76:40:39:b0:1c:46:36:a4:c8:70:42:2c:68:
90:72:7f:04:eb:97:0b:49:ea:9f:fc:97:fc:1f:06:
de:ff:68:1f:68:3b:20:3f:6c:cd:a9:a8:8b:a9:4a:
2c:d7:7b:05:ab:c2:88:23:88:33:53:d7:d4:9b:68:
3d:65:24:62:34:69:ab:77:9e:4a:3a:84:ed:f9:e6:
2f:35:8f:7b:a3:60:ad:fd:6c:11:b5:12:a7:03:0b:
cb:57:b8:05:85:1e:c5:1a:05:61:bd:12:21:0a:03:
e2:fb:b6:13:84:39:96:b9:a5:19:0e:4d:72:93:1e:
e1:03:b9:2a:09:5d:eb:89:cc:13:1a:8d:bc:8a:f7:
63:7c:e2:04:50:71:56:ef:b9:60:80:0c:78:1b:5a:
4b:93:2e:e0:c4:53:98:af:51:79:39:74:bc:59:bf:
13:4c:14:96:8d:5d:fc:8e:ee:c5:8c:ea:ce:d0:d2:
3c:17:0a:12:ad:cd:e7:c0:0e:65:a3:0f:a3:3b:10:
cb:31:86:d5:ad:9b:05:2f:91:2e:77:0f:61:be:7e:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:63:1C:63:22:BB:07:9D:7A:DC:A6:64:39:88:8E:C0:AA:73:EA:A9
X509v3 Authority Key Identifier:
keyid:79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fc:65:19:1b:6e:5d:22:de:ec:c2:b9:cc:13:ff:cb:8c:2a:
b3:e5:8e:f6:ac:51:d9:61:52:d7:94:7f:18:e9:15:30:71:e4:
06:04:f4:e4:3a:62:e7:38:90:60:1c:1c:39:15:31:0b:43:08:
f1:c4:b8:69:2e:27:9d:85:81:c8:55:5d:4d:57:51:58:8a:eb:
ca:cb:f7:90:a2:d8:19:2e:ab:ad:29:15:74:73:ea:55:82:fb:
70:c2:83:ca:bb:0b:58:fa:da:3e:e7:4a:12:93:08:45:e2:98:
31:7a:c1:2f:4a:0c:f2:4a:3f:1b:18:88:6a:aa:00:59:b0:30:
06:a2:a9:23:aa:8c:bf:c3:79:d0:15:66:df:cb:0a:74:04:da:
cc:c5:15:03:13:f0:07:ea:67:6a:50:e6:cd:c9:a6:b4:1d:ee:
a9:5c:63:e7:1e:96:53:60:78:ac:00:ae:4b:e9:fb:97:d9:60:
79:ab:44:ac:d7:fb:ec:9d:9b:14:34:c1:c7:c6:94:b8:6f:7b:
93:ea:5c:6d:0a:03:0b:55:f1:b9:0c:fc:22:d2:f2:e6:42:ff:
63:2b:2b:79:ed:fc:ba:b0:54:34:1d:f5:64:2c:e8:28:7e:7b:
4c:9a:65:af:50:43:01:aa:f1:97:86:ed:81:b7:47:6c:7c:5a:
7b:32:2c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:53 2025 by rpki-client