Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
File: eqYGEXu19-QWDvJo-fSqBFc4BEE.mft (raw, json)
Hash identifier: 1oUyEAIYD7lFoijdukxHvNz3MB56yK1eNYyGl5ATFIY=
Subject key identifier: 3A:AA:50:BB:EE:35:54:76:FF:3B:F0:EC:41:0B:46:82:D3:CF:38:EE
Authority key identifier: 7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
Certificate issuer: /CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Certificate serial: 0196515B8B22FCD85BDC5A7C6DE553F28EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
Manifest number: 1243
Signing time: Sun 20 Apr 2025 04:01:15 +0000
Manifest this update: Sun 20 Apr 2025 04:01:15 +0000
Manifest next update: Mon 21 Apr 2025 04:01:15 +0000
Files and hashes: 1: CvdXc9dAuoPgtz5B6HVq8TruKQ0.roa (hash: vZb7fKK94eyPt6Z0PY3dDQip6IArUPuz51Ar7XUuuO8=)
2: eqYGEXu19-QWDvJo-fSqBFc4BEE.crl (hash: XKdiqBjNc9UBHc/7FkaLzYw3N+3LIjjf4YutcC+GBVc=)
3: xXuydbuhDhETgHIlcb9KUf9zG4Y.roa (hash: 9XrkxjJNUOJOKboyq6AJj8CALCh/rjZYztA11ZmADyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:8b:22:fc:d8:5b:dc:5a:7c:6d:e5:53:f2:8e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Validity
Not Before: Apr 20 04:01:15 2025 GMT
Not After : Apr 21 04:01:15 2025 GMT
Subject: CN=3aaa50bbee355476ff3bf0ec410b4682d3cf38ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:df:be:58:6a:af:8d:c3:5c:68:4f:52:ea:
fc:a4:1c:9a:06:d4:be:80:3c:32:ae:eb:59:82:85:
51:aa:53:18:fd:7c:aa:94:39:a0:28:2a:a3:ae:73:
0d:c7:ff:41:87:0b:95:1d:85:ea:35:9f:33:0b:94:
02:ba:00:7b:04:47:90:6f:82:e2:88:e1:36:97:2c:
c8:27:f4:5a:c3:56:2a:c5:eb:d8:03:3e:d4:d2:a7:
5e:ac:5b:f0:f6:e4:da:f7:a1:b2:2a:bb:8a:03:fb:
e8:a0:66:0b:58:e8:5f:89:46:c2:11:b4:03:2f:31:
8e:10:b4:dd:fc:21:45:64:1d:c3:b4:8c:e9:d5:df:
e2:ba:3e:3a:5a:50:f5:dd:b3:8d:ed:41:6a:33:40:
b4:3b:03:36:59:ee:df:de:13:c9:7f:c9:83:ef:52:
3c:84:5e:b9:ef:0e:81:ab:86:ed:e6:74:d1:ac:44:
eb:74:b0:c2:de:79:50:29:3a:53:94:93:90:b7:a5:
9b:7d:81:fd:9c:f8:c4:b1:f5:2e:ba:72:25:db:ce:
2e:14:36:5c:05:97:c8:48:e0:79:78:f3:37:d7:8a:
ec:fd:1c:f0:2c:7a:71:69:55:2c:d3:60:4b:58:03:
cc:8d:66:5f:8c:db:7c:bd:bf:aa:a7:c2:80:09:d5:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:50:BB:EE:35:54:76:FF:3B:F0:EC:41:0B:46:82:D3:CF:38:EE
X509v3 Authority Key Identifier:
keyid:7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b7:99:0e:4a:6f:05:a6:82:97:96:9f:0c:df:54:d6:8d:27:
55:ef:5e:45:b6:d5:b2:94:bb:b0:6f:1d:e1:32:2c:ab:99:bf:
98:a7:2a:62:2d:fe:27:71:a9:ef:56:a1:24:e1:a4:15:12:0d:
47:3b:c4:cd:29:af:88:7b:e9:78:34:fb:40:90:ee:ee:19:bd:
3c:2f:e9:10:fa:73:a4:30:2c:77:5b:7d:fb:2a:cb:e2:00:8d:
70:a2:75:e6:40:d5:8f:a9:17:97:b5:99:c3:af:75:f0:17:02:
fb:12:77:ef:10:97:40:c1:87:84:32:2c:24:12:0b:44:b2:d8:
71:b5:07:08:76:f3:3e:68:b8:ae:7b:63:60:e7:a9:48:0e:00:
66:05:84:e8:22:67:30:64:69:39:3c:db:a0:6d:4d:7f:3c:fe:
c0:dd:0a:fc:44:ac:83:09:4c:c8:17:b3:88:24:6f:33:77:aa:
fd:ad:36:c6:15:71:e1:b8:2f:d0:b7:22:06:a4:59:f1:f5:05:
99:f3:19:0a:d6:3a:19:ac:f7:f9:47:7f:4d:fd:3e:f9:40:fb:
70:51:e8:05:66:ef:c5:45:8d:4b:a2:d6:30:50:49:aa:4d:37:
b2:e0:35:bf:e7:35:1a:54:5c:f0:c2:be:40:e8:d0:e8:a2:d3:
63:e5:c2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:37 2025 by rpki-client