Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: UEfMv8hF6PTl2x2TeenXtxbwtdpYTmxl0EmBjn1awq0=
Subject key identifier: 4D:C1:08:09:C6:8B:16:8C:E9:9D:2E:A5:4A:0F:2A:A5:C3:BA:C9:0C
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 01964C6B31F5E62407E4569337BFD27EFE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 0551
Signing time: Sat 19 Apr 2025 05:00:15 +0000
Manifest this update: Sat 19 Apr 2025 05:00:15 +0000
Manifest next update: Sun 20 Apr 2025 05:00:15 +0000
Files and hashes: 1: TGEoQxRmlQ38EiYNIatYTvTH93M.roa (hash: QWHoHKjGgLkuoWxfCEDNTogSFC/uyVtmYm1jupJjvhQ=)
2: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: TcPU/UB0R6JQlLLieFg2dW9VbXMNEbLKrn0a0OxbDPw=)
3: iHMXX39pKFTmpCSIkM3KYruFykM.roa (hash: KD8CGVAAX5SZe35sI/CYcgZ0uCRVoDZr5Q7avFwAmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:31:f5:e6:24:07:e4:56:93:37:bf:d2:7e:fe:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Apr 19 05:00:15 2025 GMT
Not After : Apr 20 05:00:15 2025 GMT
Subject: CN=4dc10809c68b168ce99d2ea54a0f2aa5c3bac90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:8b:54:0a:49:b5:9a:76:42:f7:ab:63:39:
d7:35:51:1c:56:98:1f:dd:13:aa:26:84:ae:c1:8f:
05:fb:3a:4a:18:7e:3a:03:3c:bc:23:36:1c:87:b9:
e4:38:76:81:d3:0c:4f:6f:a5:e6:31:e7:5b:fb:b1:
20:22:67:27:ae:d0:c0:4c:d1:ce:20:34:d3:ea:18:
22:04:9a:00:bf:38:af:c2:e9:26:34:08:5e:80:fc:
ff:74:63:82:9e:7a:cd:41:11:af:46:c6:79:71:89:
f7:32:0f:e0:fb:00:41:f0:ca:4a:3e:7d:ef:fd:c1:
a1:9f:a2:a3:07:a5:62:f4:3b:04:ce:c9:74:1f:d4:
db:2b:80:c4:43:5a:ba:3f:9f:e2:ac:b5:40:39:40:
26:c3:0c:a7:a1:73:e3:15:b8:db:01:28:10:e7:24:
1d:0d:0e:dc:f1:c4:f9:05:5e:1e:19:c3:0a:3d:59:
1a:44:61:ab:da:8b:14:86:cb:e6:66:88:a5:41:15:
d1:a0:3e:f1:a1:e8:bc:84:8b:64:11:c8:55:97:81:
05:94:d2:1c:d8:a2:d9:5c:4e:39:df:29:e2:1b:df:
af:8e:06:46:23:ca:a4:64:dd:7e:5c:fa:e0:b9:92:
15:d0:86:23:f0:1f:cd:d4:32:78:1e:1e:7c:40:f0:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C1:08:09:C6:8B:16:8C:E9:9D:2E:A5:4A:0F:2A:A5:C3:BA:C9:0C
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0d:88:e2:a8:47:8f:9c:3c:83:03:61:d0:7a:c8:b5:5d:6d:
46:29:e9:5b:0b:08:4d:9c:f1:24:12:5c:a4:82:93:cd:0d:7f:
59:61:cb:5b:31:f1:23:37:a0:d3:90:e4:49:05:ca:0a:6e:47:
39:a0:7b:01:3a:d5:f6:1f:d1:64:2b:e9:87:d6:33:ea:a6:bf:
9c:8d:87:79:81:39:85:b6:da:e8:c6:96:68:01:37:cc:9a:ea:
21:f6:8a:98:ce:29:0c:ba:f5:60:6e:5b:8c:d3:8a:d3:bc:3d:
4f:c5:0f:96:b3:40:59:6d:76:67:c0:ac:7c:95:51:7e:ca:3a:
31:38:59:4d:fa:e8:61:5e:92:b5:28:a3:28:43:1a:8e:cf:56:
81:d7:eb:8c:85:1b:5e:ae:dd:e2:a6:b6:53:d6:12:50:88:00:
f0:56:66:e0:1f:1f:bb:f6:7e:bd:24:31:a9:fc:85:12:d2:31:
32:4b:ce:8b:c0:cc:b7:7a:6d:29:04:ad:30:7b:e8:4c:c7:a3:
f0:43:59:1d:7e:47:86:5a:66:d9:1c:14:d4:82:da:83:58:3b:
a6:b9:36:94:bb:cb:65:7a:cf:73:9d:82:39:91:ce:e1:e4:a3:
bd:ff:a9:ce:c6:3d:60:25:9c:ef:79:6d:97:fc:e4:f5:1c:dd:
5d:16:73:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:15:22 2025 by rpki-client