Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
File: cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json)
Hash identifier: xtmN2+lExoOqtMJWOQ8r+LrT4FLrniGpFS7eSOoY4GU=
Subject key identifier: 36:37:B6:B7:6D:AB:DA:61:82:14:A6:E5:0F:C7:AE:CD:38:74:ED:91
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial: 019654C9CAD8314F9A165BAE33763E825B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 20:00:32 +0000
Manifest this update: Sun 20 Apr 2025 20:00:32 +0000
Manifest next update: Mon 21 Apr 2025 20:00:32 +0000
Files and hashes: 1: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (hash: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=)
2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: MMsQ+GGFxQIhg8yjxnY1QvgEDHgexF6uJehOjYx/PQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:ca:d8:31:4f:9a:16:5b:ae:33:76:3e:82:5b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
Validity
Not Before: Apr 20 20:00:32 2025 GMT
Not After : Apr 21 20:00:32 2025 GMT
Subject: CN=3637b6b76dabda618214a6e50fc7aecd3874ed91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:5d:e8:5a:22:24:52:6f:4a:7a:9a:77:de:
96:b9:8e:c0:5d:cd:9e:b9:05:4c:c7:dc:b2:ee:81:
83:90:28:c4:11:a2:d9:89:8b:d4:10:e2:89:63:82:
29:40:b0:5b:1f:81:44:90:44:af:51:25:ec:9e:01:
89:97:0e:3c:1a:00:c7:52:13:f8:a2:ac:34:30:67:
7f:63:82:02:d0:23:ae:c9:d5:4b:21:fe:2f:9b:05:
69:08:34:42:5f:d6:91:c4:16:92:45:92:14:17:d7:
66:0b:3e:04:40:4c:42:41:21:cc:0a:c8:93:34:f3:
b8:2a:ab:f3:3e:3a:a5:5f:15:e5:d5:3e:10:9d:05:
9f:53:98:28:d5:16:bb:25:c9:27:93:20:ff:bf:08:
44:4d:aa:c0:dd:89:d6:72:32:87:fa:d5:a9:29:b8:
74:9c:5f:d1:81:4a:89:26:6b:2a:c4:71:49:72:4f:
11:9d:79:df:60:4e:dd:ef:b4:1a:90:c1:74:ea:82:
e5:e4:8d:58:3c:76:cd:10:4b:58:7e:c5:21:d1:cd:
39:07:cd:fa:63:1b:6e:84:ec:23:4b:43:b8:e5:a3:
89:6f:d8:a6:ea:28:1d:e9:58:39:0b:85:76:6f:9c:
8a:26:03:b3:9e:c3:4b:08:6c:f9:a6:bc:40:5c:9d:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:37:B6:B7:6D:AB:DA:61:82:14:A6:E5:0F:C7:AE:CD:38:74:ED:91
X509v3 Authority Key Identifier:
keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:18:1a:7a:75:cc:7e:22:f9:93:1b:99:25:b9:bf:38:8d:11:
80:9a:e5:86:25:52:18:4f:2d:7d:82:8b:e5:7d:00:e2:f9:7f:
c8:eb:bc:7b:19:f1:20:03:7c:63:6a:27:d3:62:27:ba:5d:2a:
5a:50:4a:fb:3b:54:b3:6e:eb:f3:6a:50:ef:75:e7:bf:c2:e5:
ee:e0:ea:bf:f8:4e:f7:0e:54:2f:3a:c7:1b:10:4e:ca:17:1c:
0f:1c:db:dd:28:1d:b8:b1:b4:d2:60:b9:ea:94:ed:67:21:aa:
a5:9b:9b:73:03:94:5d:60:c1:a3:ce:b7:65:6d:96:b5:bb:30:
ca:ea:78:b0:19:19:c6:e7:9b:24:d8:c3:d2:e6:61:fa:58:dc:
5c:43:e6:91:de:4b:d4:aa:de:58:31:59:02:66:fe:44:73:9e:
c2:ef:93:26:8c:03:a3:ff:67:ba:85:93:0a:a1:94:ad:f1:97:
c1:38:96:ab:84:08:0d:0b:5e:ce:3b:65:06:7d:c2:93:b7:78:
a0:0f:4f:78:bd:a5:70:20:ad:52:44:21:73:45:9a:17:b5:1e:
9b:e4:26:ef:90:84:73:b4:cb:ee:67:fe:ef:43:b4:b2:f6:7d:
49:91:04:2e:a5:51:33:50:91:b2:01:87:ba:c2:44:dd:74:b4:
d0:e9:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:12 2025 by rpki-client