Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
File: 72eEaVdKzAPXguYygf9E-qqz-Ec.mft (raw, json)
Hash identifier: GvLP6m9j8isiqK/wuBnoN/Jse1t68RkXiiG7snv4Lts=
Subject key identifier: C0:AA:F3:91:0B:B7:CF:50:6D:FC:8D:B4:99:78:DF:DF:2F:31:7C:F9
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial: 019609E88B17D189D675B0B771E2EEC64136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
Manifest number: 1041
Signing time: Sun 06 Apr 2025 07:02:36 +0000
Manifest this update: Sun 06 Apr 2025 07:02:36 +0000
Manifest next update: Mon 07 Apr 2025 07:02:36 +0000
Files and hashes: 1: 4mzcp9MGPOcBj8vWEpghNUUZwrg.roa (hash: FMPgZ78dma8cFYdFXzHOT5nVPlXdvUP/dSywWfkO/HA=)
2: 72eEaVdKzAPXguYygf9E-qqz-Ec.crl (hash: GRQvpw39zOBN1GHlZfItmMQkMLICOVda1++JUF5Zbds=)
3: YraDuYuMIlkEmdPd43lQxmtLVG0.roa (hash: vscD5TcTDxAgQFa013w668xvOsNW4c0gyN2OgXv6DfA=)
4: oHxQEiIs7BKIPX_5IGdNKOpzESY.roa (hash: M3xmeWif8M7PD+E/s7ne/nAK7kiWHb0spy7RsLe2xeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:e8:8b:17:d1:89:d6:75:b0:b7:71:e2:ee:c6:41:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
Validity
Not Before: Apr 6 07:02:36 2025 GMT
Not After : Apr 7 07:02:36 2025 GMT
Subject: CN=c0aaf3910bb7cf506dfc8db49978dfdf2f317cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:f8:c1:b7:7b:4a:41:24:c6:5a:5b:cc:6a:
07:83:f1:e6:a0:74:03:71:7f:56:28:67:ac:97:56:
03:bd:75:75:b7:08:3b:ed:31:67:4b:70:9a:40:f1:
a7:2f:19:de:60:8c:cc:9d:1e:91:c7:b1:1e:8c:80:
f4:65:3a:85:7a:53:f0:68:63:25:6d:bb:e8:f1:a6:
f1:4d:7a:88:34:f7:e2:06:1d:cd:79:e9:a8:4d:7f:
8d:a0:07:d1:20:e0:73:2a:7d:8b:9b:93:ad:8e:99:
81:e6:58:39:36:a2:c4:a0:75:a9:77:34:73:25:ab:
49:70:53:ce:23:91:00:34:e7:23:cf:36:61:69:1c:
77:b1:3a:f1:1b:06:c4:63:bc:a7:94:80:b2:aa:c9:
e6:d3:0c:35:d7:33:4d:02:3b:22:56:d2:63:e6:f3:
4e:0d:71:8d:85:f8:cc:b8:bf:a4:50:cd:10:59:c5:
b2:06:dd:d5:f6:f0:f0:31:f4:b3:18:de:df:89:6e:
f2:11:92:63:1f:45:36:62:ce:ff:bb:a7:d1:c9:8f:
94:12:10:d5:0a:45:7a:a4:d6:1b:19:f3:93:b8:b2:
41:3f:41:a0:4d:e4:10:ed:98:de:c5:ad:49:4f:7e:
73:d6:52:5f:61:f3:8b:1d:6d:88:3d:67:29:31:d3:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AA:F3:91:0B:B7:CF:50:6D:FC:8D:B4:99:78:DF:DF:2F:31:7C:F9
X509v3 Authority Key Identifier:
keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ac:57:1f:03:d4:2a:03:82:08:f2:d8:d5:55:a1:ec:95:e2:
9c:5a:99:6d:de:c5:95:ed:c4:1f:f1:b5:cc:5c:73:f3:a7:88:
2a:e9:70:8a:27:39:25:1f:7e:32:a1:d0:4a:31:58:3d:25:0f:
a5:c3:db:d8:9c:78:2a:8b:30:d4:7c:e7:6e:46:f6:95:72:66:
4b:ef:a9:d1:26:0b:27:bf:af:8d:7a:88:38:88:f5:e1:2c:52:
b3:a8:d0:25:a0:0d:7a:c5:90:ca:cd:0d:06:aa:1d:f9:d3:9d:
57:75:78:86:b4:69:bb:53:1d:83:36:e1:bd:1a:71:4d:bd:05:
27:4e:c2:3d:04:c2:2b:db:93:72:8c:8d:d8:c1:48:66:03:82:
9a:09:aa:3a:bc:70:90:e3:36:05:c7:f0:0e:56:bd:65:a8:c2:
7f:91:8f:1c:36:6f:06:fd:4b:49:8e:ae:3f:a3:51:47:c1:17:
cd:42:bd:42:db:3f:7f:28:22:67:e4:f0:27:1e:fa:16:47:70:
80:f1:ee:38:7a:10:60:7a:40:e1:81:06:89:93:57:ed:02:57:
43:bc:37:cf:11:27:f2:56:ad:16:0e:bf:02:e1:23:49:77:be:
1c:55:7e:d7:1e:30:64:6b:1e:07:4d:1d:49:15:eb:f7:1e:f2:
0a:48:bb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:47:59 2025 by rpki-client