Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
File: EIPENieVN9T3JtIxDO8UpC8bK4o.mft (raw, json)
Hash identifier: dVQS8GTMT+u+36NrpuakwIOrYgCU5FXMI3PJF0e87g0=
Subject key identifier: D9:4C:1C:1C:DC:31:7C:DD:95:9F:25:0B:60:93:69:29:46:AC:29:71
Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Certificate issuer: /CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Certificate serial: 01964857DACD5496C3213EB8FA0880C67E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
Manifest number: 0212
Signing time: Fri 18 Apr 2025 10:00:39 +0000
Manifest this update: Fri 18 Apr 2025 10:00:39 +0000
Manifest next update: Sat 19 Apr 2025 10:00:39 +0000
Files and hashes: 1: 9xKnDYTGsncir9pGK8UvDoqBIrQ.roa (hash: ruj+NSfqLyzPa16DtiDqJuwEcOM3gn9igG3unI9kKcI=)
2: EIPENieVN9T3JtIxDO8UpC8bK4o.crl (hash: DiJJdRPv8YnRhkJ4dPg182E1gygWaLgS8ESjSvHCsMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:57:da:cd:54:96:c3:21:3e:b8:fa:08:80:c6:7e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Validity
Not Before: Apr 18 10:00:39 2025 GMT
Not After : Apr 19 10:00:39 2025 GMT
Subject: CN=d94c1c1cdc317cdd959f250b6093692946ac2971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:d1:d5:e4:d0:97:3f:bc:13:a3:9f:dd:5d:
e4:b5:b9:6c:30:00:8a:55:f4:05:19:aa:a7:25:52:
24:b7:be:63:a9:36:a8:80:7a:89:74:50:b3:c0:98:
e7:18:74:36:9c:ed:f9:9d:4a:30:af:76:1c:d7:6c:
41:62:72:8e:da:17:78:d4:31:5f:d7:c9:1e:d6:20:
f2:78:1e:0c:1b:07:22:2b:8a:3e:fc:b4:74:b3:55:
ac:79:09:c5:5b:5b:f4:de:00:4d:c8:96:c2:d4:8b:
a9:8d:12:e5:03:cb:e9:9a:52:11:3e:0c:cb:bf:7d:
ce:fd:05:91:18:8b:f9:aa:56:74:f4:7f:10:4b:af:
da:f3:70:ed:c6:6f:f4:e5:6d:f9:47:51:c1:67:6f:
20:97:69:8e:b8:0a:05:93:b1:4f:7c:95:b6:27:3d:
80:c1:e5:1c:bb:69:21:11:f1:9e:e8:0f:dd:47:25:
c0:4e:61:52:07:2b:18:4a:f1:54:a5:d0:f7:0b:01:
12:8e:95:ea:a4:7e:d0:d7:a8:b3:00:bd:19:ce:d3:
70:d2:f8:b9:ab:43:f9:50:ec:44:c1:c8:2a:f4:ab:
3b:43:6b:f4:95:94:03:76:67:cf:4b:95:c1:0f:cf:
86:d8:65:3e:6a:7c:1c:af:c2:02:46:da:3d:ab:a7:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4C:1C:1C:DC:31:7C:DD:95:9F:25:0B:60:93:69:29:46:AC:29:71
X509v3 Authority Key Identifier:
keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:49:5a:ab:f7:c8:31:63:a0:ef:60:d9:eb:b1:f8:e5:52:6b:
31:c4:5b:21:4c:7f:dc:d0:91:1c:9b:06:3d:3a:f5:47:7e:69:
65:37:f1:77:19:f3:87:aa:b5:19:fd:50:ed:cb:65:9c:00:f1:
06:21:b1:ad:8e:84:94:ab:46:2c:3a:78:34:39:57:3b:a9:f2:
2c:d7:5e:47:c3:bd:ba:2c:b3:50:5f:65:ac:c2:98:be:8e:53:
21:2c:c9:b5:22:28:4e:d1:19:14:64:8e:d7:a5:b6:95:7c:41:
59:a6:ef:a7:cb:92:5c:f3:fa:3e:5a:8d:be:8b:cd:2f:a5:5c:
50:78:fd:0b:d8:24:53:4b:07:17:88:b4:d4:1f:38:e2:8f:9c:
44:02:ae:f0:18:b3:e6:64:07:8d:49:df:cf:d1:66:57:6a:98:
ad:7d:c6:25:d4:09:1c:b0:20:35:74:21:c5:6e:82:81:b9:66:
2e:a1:ef:e9:33:25:38:a0:a4:c7:03:05:94:fb:e8:2a:37:0b:
29:a9:57:ab:94:91:6e:b1:47:0a:2a:6f:80:cc:99:b1:77:41:
94:b6:94:a6:12:fe:fd:8c:f9:e1:f4:4b:4b:dc:87:d0:d8:5d:
42:15:8a:44:f0:f9:13:42:c1:97:c4:5b:8f:64:51:a8:14:f1:
fa:9c:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:15:32 2025 by rpki-client