Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
File: eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft (raw, json)
Hash identifier: 32y7EAUbWbzjMFEZhZEw0/ZdZeO73P6I/S+PsfoAT9k=
Subject key identifier: 06:91:29:AF:56:8A:76:5F:EC:70:1D:99:E4:36:1B:38:5F:EC:FD:DA
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Certificate issuer: /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial: 01964DB4CC4454F50C9797E16CCE3BF84683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 11:00:16 +0000
Manifest this update: Sat 19 Apr 2025 11:00:16 +0000
Manifest next update: Sun 20 Apr 2025 11:00:16 +0000
Files and hashes: 1: NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa (hash: jeQ6CR9o4kjg+lITTYhPycLMezjSSuHW+WQ2edSSAyQ=)
2: eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl (hash: 3LyjSfLRwaYWLkiouS+aV2ILi6XkLxwrh+/scNhm57w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:cc:44:54:f5:0c:97:97:e1:6c:ce:3b:f8:46:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Validity
Not Before: Apr 19 11:00:16 2025 GMT
Not After : Apr 20 11:00:16 2025 GMT
Subject: CN=069129af568a765fec701d99e4361b385fecfdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:e8:c0:4e:1f:96:09:66:10:71:6e:d2:ce:
ec:eb:31:87:00:1b:a4:06:22:a6:81:1d:20:2f:f8:
60:45:9e:05:06:9f:22:40:a5:36:3b:ff:cd:05:a8:
27:7b:9d:a1:81:0b:e3:9b:64:a6:97:3b:e7:50:c2:
22:72:2a:14:ea:d6:e4:48:38:d5:6a:3e:58:fd:9e:
1b:c8:60:bc:6e:b4:4d:12:17:b0:ec:03:d4:e3:ec:
1d:3a:72:67:a0:c2:56:0f:88:fe:3c:5c:a9:3c:bb:
fe:93:f9:de:81:a2:78:a3:11:14:56:d1:15:2c:7a:
c8:60:01:d6:34:4a:5f:11:c1:47:2e:c7:f4:4d:42:
00:3e:ae:11:1e:9a:83:ca:c8:b6:31:a3:b6:15:bb:
19:f5:34:d4:4f:f3:1f:9e:5c:b0:3c:b3:61:b1:e7:
2c:05:f9:80:63:f0:28:04:21:d3:a1:3d:1e:66:68:
e3:e1:07:a9:45:dc:af:16:1a:f6:53:4b:c3:fa:48:
82:ea:1b:b3:c2:a7:8c:8b:67:2f:96:53:ff:2e:52:
6e:85:0d:9a:d0:07:e6:82:64:25:d5:81:fa:b1:af:
86:b5:b3:a6:a5:13:da:10:d5:6f:e4:73:e5:be:74:
e0:21:0f:0b:d5:79:d6:19:ea:28:c0:35:9d:2e:4f:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:29:AF:56:8A:76:5F:EC:70:1D:99:E4:36:1B:38:5F:EC:FD:DA
X509v3 Authority Key Identifier:
keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:47:aa:48:22:10:da:6b:bf:4e:a8:a6:42:89:72:4d:9c:02:
6c:d9:d7:80:97:36:f5:57:11:e6:f6:96:e3:8d:42:6d:b9:86:
dc:67:a8:e5:d8:77:e0:cc:ba:f4:5d:1b:81:98:aa:12:f9:9c:
be:8f:02:0b:8c:41:c5:c1:92:f7:8b:3a:00:39:44:a0:56:98:
8e:ab:bf:f3:eb:c7:fe:03:7f:e5:84:00:be:29:68:2d:79:68:
2d:ac:c3:95:6d:eb:39:5b:84:3d:de:4e:a7:42:4b:7d:c6:88:
5a:ab:37:dd:75:0a:32:05:15:43:d0:bc:d3:ea:6a:a0:01:42:
c4:0d:d3:f2:24:bc:95:9d:f7:75:e9:64:73:f7:cd:95:c6:a6:
9f:50:3e:6d:f8:16:a0:f0:75:82:00:bb:ef:2b:70:7d:c8:6a:
b4:c8:d7:15:4a:87:20:8d:40:fc:20:2c:94:2e:d4:d8:30:52:
6e:9b:14:34:c0:f7:d9:ef:ee:26:6b:f2:c0:98:46:b2:40:b8:
1f:b6:27:48:fa:5e:17:11:b2:d3:75:d0:39:67:a4:ff:e0:93:
6a:91:ea:96:c2:37:5c:e8:4e:20:1d:ba:23:be:0a:44:80:06:
2d:81:a1:9f:e2:a9:5e:4b:17:22:f3:6c:92:e3:cd:ed:4c:40:
b8:60:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:51 2025 by rpki-client