Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: wajYdeBEPvyfb8qxgp9L0W+pNrzHW/7AEfjwnLM7FbQ=
Subject key identifier: E2:E0:4E:8F:CF:5B:84:B9:A0:51:C8:E1:34:0E:E0:9F:CC:73:8B:26
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 01963E0B674CE879973752B8C14FDE6B54AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 0564
Signing time: Wed 16 Apr 2025 10:00:56 +0000
Manifest this update: Wed 16 Apr 2025 10:00:56 +0000
Manifest next update: Thu 17 Apr 2025 10:00:56 +0000
Files and hashes: 1: 21v5q3pMDwpvxT2hARKYBVN9oBs.roa (hash: td2s5WSN+NdDkVRugdr/XPfHV2CBhN3a/Leo5BS5CwM=)
2: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: npTpmybwqNVQtS4ELxn7RdPrWqVjenOoSJ5eSU+mFok=)
3: nEwu5TmmWrj9UATGJds44UGD1Ts.roa (hash: 5ZaywPLeoC0QnbAlhOsY8aemb2/eQKD5NWLwsAEHpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:67:4c:e8:79:97:37:52:b8:c1:4f:de:6b:54:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Apr 16 10:00:56 2025 GMT
Not After : Apr 17 10:00:56 2025 GMT
Subject: CN=e2e04e8fcf5b84b9a051c8e1340ee09fcc738b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:36:4e:5c:92:b1:26:3b:1a:e4:1b:40:a0:
85:9e:3a:fa:ee:7b:ee:13:67:e6:c6:f7:b6:57:41:
b3:ea:9a:99:56:5c:1a:46:9f:2d:aa:9b:78:ec:1a:
38:6a:77:17:98:9e:6d:83:46:16:3d:47:29:15:d5:
2c:27:6b:66:c0:c9:c2:37:11:18:87:6c:49:3b:c6:
3e:b7:9f:3f:5d:75:c7:80:ef:08:be:3b:c8:15:75:
ab:58:6d:40:ad:f1:7d:21:d9:0f:07:79:a4:23:4d:
12:ea:e6:32:56:a5:04:5e:22:83:84:1a:69:05:d9:
0f:b0:7b:3c:37:7d:77:40:d2:0b:e8:7a:1a:20:50:
5f:21:02:5b:4c:5a:e8:ba:67:e9:f0:af:69:ad:82:
0f:c9:22:fa:57:fe:7d:ed:44:2f:7c:d5:ca:90:9d:
3d:5f:db:c3:fc:3b:f1:a7:92:09:64:9c:e9:0b:1a:
9d:66:e0:d0:1e:3a:88:1e:8d:96:49:7c:7b:60:e1:
65:d1:44:6c:2f:9a:36:57:1b:3e:46:7d:81:95:15:
e5:e8:46:5c:9f:c6:cf:f7:25:15:74:0e:cb:02:2a:
dd:12:bf:88:ff:92:d8:69:03:06:41:d9:ac:b2:fc:
21:d4:f2:86:0e:e8:31:d8:30:a7:49:d6:1a:4a:2b:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E0:4E:8F:CF:5B:84:B9:A0:51:C8:E1:34:0E:E0:9F:CC:73:8B:26
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2f:ba:54:63:ee:36:ac:8b:45:2a:95:a5:d3:34:7f:e1:44:
c7:c2:41:6c:f1:45:10:a7:2e:87:e5:48:0d:df:37:70:93:fe:
cd:3d:ce:95:df:06:c9:23:bc:a9:e3:78:29:4f:cc:0e:05:6a:
66:4b:05:92:c9:b7:0d:6f:32:04:2a:ac:83:2a:aa:06:a7:26:
67:b1:61:72:7c:64:59:f8:a1:46:dd:6e:e8:f4:6b:a0:e8:4e:
e7:7f:61:10:4e:cf:9b:91:3e:9e:a4:f7:4a:73:a5:6b:8c:3d:
6c:1d:28:09:bc:fa:64:8e:04:b5:cf:e1:bd:7c:bb:14:28:72:
3a:02:bc:59:5a:59:7b:63:af:68:d3:ae:84:8f:46:0e:fa:78:
bb:9a:df:e6:d1:f4:e0:3d:ea:92:3e:4c:9f:e3:8b:f6:b0:5e:
80:8a:48:98:cc:45:e9:d4:45:70:20:bc:80:ac:eb:1b:b0:6c:
ab:ae:a3:f1:0b:2c:9b:a3:36:c4:23:2e:a9:b9:44:bd:ee:c5:
df:b5:01:ad:d4:77:a4:0d:11:ec:33:5d:9b:fa:74:e7:40:48:
1b:bd:79:92:44:75:11:4c:b5:ea:ee:ad:81:6b:70:b0:5b:27:
5b:ec:c8:92:88:cb:cb:e4:e8:d4:a3:9f:ad:8b:02:58:2e:36:
c1:3d:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:06:25 2025 by rpki-client