Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: GJXBlDkt4mM7+64fqBUqy9FJ9FYf7qLEyCyRfWbMuoU=
Subject key identifier: 5C:88:3E:DC:F4:BD:A4:FB:F9:28:56:45:03:E3:FF:C0:47:69:03:B3
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 0196556E8051B100B6433E8D28369E9809AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 1124
Signing time: Sun 20 Apr 2025 23:00:27 +0000
Manifest this update: Sun 20 Apr 2025 23:00:27 +0000
Manifest next update: Mon 21 Apr 2025 23:00:27 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: zafe6DJmI8EesbIDKinCxpmIpyfyrxNadL+Ywn6KHO0=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:80:51:b1:00:b6:43:3e:8d:28:36:9e:98:09:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Apr 20 23:00:27 2025 GMT
Not After : Apr 21 23:00:27 2025 GMT
Subject: CN=5c883edcf4bda4fbf928564503e3ffc0476903b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:ce:7f:f9:db:88:40:b4:9e:03:7c:e9:6a:
55:5b:a5:b5:4e:f8:4c:99:77:b3:41:c2:67:d5:62:
97:2c:d2:4d:5a:90:a0:10:c1:ef:95:d5:44:73:6a:
6a:4f:32:05:17:5f:13:bc:d4:4d:7d:d1:03:03:f9:
45:72:fa:ae:c6:91:96:5d:13:0c:3e:81:07:eb:69:
52:7f:8d:c6:f8:3e:d8:5e:29:a8:02:76:12:9b:75:
bd:4e:74:f1:10:41:74:bd:78:41:86:1e:cc:d8:dc:
36:9f:7e:a4:07:24:9d:3e:03:e9:54:96:8d:52:cc:
2b:50:05:1a:cd:56:91:73:09:e1:f8:45:2d:ed:d7:
55:cd:aa:ea:10:a9:1f:5d:f6:e9:47:04:f4:2e:30:
2a:89:53:f9:39:3e:b4:1b:57:b7:5b:4a:25:09:9f:
22:ec:68:83:0b:d1:91:96:e1:3d:0c:8c:a0:44:af:
7b:40:86:96:40:f2:d4:8b:18:8e:35:26:bb:ba:3b:
68:0d:ce:6b:ac:7b:5f:97:80:03:63:55:d4:25:66:
f6:dc:5d:e7:54:99:e4:fe:01:6f:aa:0a:06:22:8b:
33:5b:0b:2f:2b:38:8a:8f:19:71:1b:67:36:18:8b:
97:2e:59:f1:a2:e6:ab:af:56:29:08:c0:aa:42:1e:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:3E:DC:F4:BD:A4:FB:F9:28:56:45:03:E3:FF:C0:47:69:03:B3
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7b:28:57:b7:95:c3:58:86:08:4d:c1:38:57:ee:37:a1:ba:
20:e3:be:8b:b5:14:86:b0:c2:4c:e3:b0:76:1e:06:99:57:fb:
47:3d:bd:c4:0b:6c:6f:f2:f5:54:81:b9:7c:10:dc:30:98:d7:
fc:13:60:27:df:6c:b5:55:34:0b:67:f9:eb:5e:12:cd:35:71:
3c:81:97:4a:a1:55:6c:05:40:3a:0d:7a:6e:4f:e4:6e:d1:bd:
ac:4d:5e:bf:fc:61:b3:36:3b:5c:f3:07:3d:2f:c9:5b:28:03:
fd:21:93:8e:76:ee:ef:94:9a:1f:6d:67:f3:40:33:d7:a1:26:
02:46:3a:b3:49:8b:db:61:8e:e1:80:e7:d4:e6:a6:27:31:a3:
03:c3:bc:ca:85:c7:94:15:59:56:5e:bd:5d:39:9d:f3:03:83:
bc:f6:bb:bd:fa:d5:5d:e0:46:b8:bc:e7:0c:5a:61:4b:f9:34:
c3:d3:ac:7d:5c:75:1b:97:50:aa:9a:69:a1:cb:63:55:87:ca:
1f:c1:1e:03:aa:27:20:3e:7a:62:82:47:26:f7:8c:c1:dd:a0:
09:17:b0:55:60:b1:74:f6:3c:e1:23:37:ea:f4:a5:f1:4f:dd:
10:b0:2e:35:56:fd:ba:29:71:77:43:11:38:0b:6a:b6:94:cb:
92:66:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:36:00 2025 by rpki-client