Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: RH/e3TljU0Wi1KwcKacEN34u9j9CD9/Gd1RxH2Yglkk=
Subject key identifier: 5A:F9:2A:3D:DF:36:89:F2:0B:6B:EF:5A:E4:A8:2B:4E:26:90:C4:FE
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 019659823FB85EA34086BDD5B1647227C748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 18:00:30 +0000
Manifest this update: Mon 21 Apr 2025 18:00:30 +0000
Manifest next update: Tue 22 Apr 2025 18:00:30 +0000
Files and hashes: 1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: J/JTgDJLyAdVsTCTFVfQmBVyifxBnIVgPR9DJgBrVIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:3f:b8:5e:a3:40:86:bd:d5:b1:64:72:27:c7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Apr 21 18:00:30 2025 GMT
Not After : Apr 22 18:00:30 2025 GMT
Subject: CN=5af92a3ddf3689f20b6bef5ae4a82b4e2690c4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:0c:61:52:7e:91:01:b5:bd:bb:49:1a:6c:
9a:3e:e6:76:93:09:c0:d1:4a:08:0c:a2:c2:56:62:
b9:e6:e5:ba:74:fe:ea:a7:a3:c8:45:6f:8e:0c:5d:
43:72:40:d9:74:42:80:19:88:b4:5e:7e:0b:69:10:
90:d4:5e:2e:4e:92:c0:e1:49:0e:bb:77:5f:ef:3d:
22:57:3b:ed:c9:52:c5:cd:62:53:6d:c3:fb:d4:ee:
18:72:01:2b:ae:46:b7:d6:4d:85:6f:72:fd:01:bd:
72:fc:fd:ad:0e:74:88:1e:f5:e5:f1:4b:46:d0:0e:
2b:70:d4:60:c0:8b:1d:76:fb:4b:57:bb:fd:4f:a9:
3b:a7:ae:a1:e6:3b:f6:c6:d2:89:cf:8f:b5:52:27:
26:8f:07:1c:12:60:bd:e9:2d:e3:49:80:08:f4:af:
c8:09:09:29:b7:1d:7b:84:91:87:ef:1f:08:2c:dd:
e6:fe:98:78:ac:43:18:16:34:97:a2:fc:9e:b5:6d:
8d:fb:04:44:d1:eb:26:70:b7:1d:a6:7f:c6:09:16:
91:cb:e4:8e:00:9a:ea:ac:fa:6d:ad:3f:5c:ea:9c:
04:4f:29:00:74:b5:8e:d7:0d:d6:fd:66:dd:25:22:
4b:91:17:ac:b9:1c:5b:c9:3e:a4:54:ca:37:94:60:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F9:2A:3D:DF:36:89:F2:0B:6B:EF:5A:E4:A8:2B:4E:26:90:C4:FE
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f4:e3:22:22:69:b7:a1:22:0f:16:fd:ff:3f:1f:7d:16:af:
6a:5c:6b:f3:a2:48:bc:b1:8b:2d:fe:e5:f4:c7:a3:d0:60:53:
fb:92:69:9f:83:7a:1d:b5:67:68:b3:92:14:7f:a8:ca:d8:85:
d5:84:35:5e:43:65:2d:9f:86:40:f4:60:74:2f:8e:d9:02:07:
a8:44:11:e5:db:e8:2d:cc:19:79:f7:d7:95:5a:59:f2:93:23:
0c:32:02:a9:ac:f3:90:3d:6e:b1:b2:94:a4:0b:d6:54:65:05:
71:ea:19:8f:d1:aa:cd:72:0f:b0:6c:b7:69:67:72:3b:d7:8d:
35:e4:62:f5:d6:7a:ce:b8:39:0a:0f:bf:3c:85:18:b9:81:21:
03:1c:ae:7b:72:c8:4b:cf:ad:0f:b8:2c:dd:d6:12:3e:88:66:
ea:62:62:cb:0e:83:d8:49:82:33:6b:1b:8a:c3:52:a7:95:c4:
a0:fc:ab:91:d9:26:b7:45:1d:c1:d2:53:02:ed:ee:eb:e2:d6:
a7:06:db:5a:8d:14:2f:38:0e:33:72:2b:9c:23:c9:78:5a:fd:
95:e7:cd:b0:3d:00:a6:3d:df:66:33:e4:c7:9b:34:69:9e:ab:
21:c7:cb:00:b4:a6:b9:a9:82:7d:5b:61:2b:9e:33:3a:72:58:
76:66:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:19 2025 by rpki-client