Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
File: eSxdjDLKpGYjFoWMZb6-EshhrWc.mft (raw, json)
Hash identifier: x1NdFGMUh0U7PeXVUPR7omcUBM+gX56A+0ivxOWmSGk=
Subject key identifier: 6C:F5:FE:E0:2D:11:27:02:8A:2B:0F:EF:0C:29:34:E0:E4:16:8C:DB
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Certificate issuer: /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial: 01958BBB7F464C90B705476FDCDB8DD4115B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 19:01:15 +0000
Manifest this update: Wed 12 Mar 2025 19:01:15 +0000
Manifest next update: Thu 13 Mar 2025 19:01:15 +0000
Files and hashes: 1: 5zhQ3B9hLH2ZPYsiKLmy8Rojvg0.roa (hash: KI1hydbtzIhfdYk8QexN8+EHwEo9bPdSN9gLtHnLO94=)
2: eSxdjDLKpGYjFoWMZb6-EshhrWc.crl (hash: M+1YmqvB/oC4r7SsHsxqAawtqLyBM05iThwmvs02Wu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:7f:46:4c:90:b7:05:47:6f:dc:db:8d:d4:11:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
Validity
Not Before: Mar 12 19:01:15 2025 GMT
Not After : Mar 13 19:01:15 2025 GMT
Subject: CN=6cf5fee02d1127028a2b0fef0c2934e0e4168cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:80:ad:49:f7:d8:4e:8f:5f:fe:84:02:94:
d2:5c:ad:a3:39:fc:fe:c0:13:2a:a8:6c:d1:ea:3b:
4f:70:c1:73:7c:c8:a5:a4:47:2a:26:b5:13:2a:dc:
47:01:99:9f:73:2e:6d:bb:4c:23:15:fe:4a:7e:df:
41:98:e7:62:f4:d3:40:b1:45:5b:ee:54:57:27:21:
6f:67:01:a5:22:a0:9b:0e:61:3c:06:8f:28:4e:91:
85:c2:03:1b:b0:15:b2:15:60:1a:e6:6a:8a:dc:82:
6e:81:03:c5:31:96:6d:ac:71:b3:f3:db:3d:c0:df:
24:21:5d:8a:26:3e:b9:58:fa:62:87:dd:3e:45:d6:
04:af:42:e0:43:2d:12:56:af:8f:96:9c:b4:f1:22:
f9:12:5e:24:79:b3:51:97:5d:82:c8:44:26:ad:ec:
4f:95:77:b6:d3:26:db:21:5f:ce:49:20:ec:9e:fd:
32:c5:54:42:71:ec:df:04:8d:7e:85:5c:61:c4:4d:
78:18:03:05:c4:65:49:d0:fe:61:9b:06:3a:c4:b3:
44:08:61:8a:fa:1e:49:87:f1:58:cf:f5:a4:13:c7:
49:8f:f9:c0:92:6f:7c:18:ba:11:9b:c2:a5:11:40:
4a:b8:c0:ea:01:0a:bd:4e:10:0b:95:26:d0:9c:9b:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F5:FE:E0:2D:11:27:02:8A:2B:0F:EF:0C:29:34:E0:E4:16:8C:DB
X509v3 Authority Key Identifier:
keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c6:d3:f2:e1:02:99:11:9d:86:6c:83:ae:45:0c:6d:aa:33:
a8:eb:53:dd:c7:bb:ec:4c:87:c9:35:c7:ee:ad:fa:85:2c:f7:
4f:b2:a3:f4:af:1c:05:a5:29:66:63:d5:07:9c:96:42:b8:bb:
49:93:f3:d3:5f:1d:61:ca:6d:54:b6:56:ec:76:d7:26:e6:b3:
6c:25:bc:1d:b4:b2:08:c0:e7:c7:f7:83:53:4e:ac:12:37:14:
9d:9d:2b:56:49:02:ad:e4:c9:e1:a9:7f:66:24:00:77:e5:46:
62:ce:9c:d8:f3:bc:bb:85:94:68:b8:66:87:4a:5b:8b:8b:69:
fb:de:67:dd:88:ff:d1:57:61:b6:fe:c3:2b:f4:6f:43:6d:cf:
2a:a7:79:02:9e:24:fd:1f:cd:4e:54:58:29:d6:9d:59:63:58:
4b:54:8e:00:63:a2:ab:80:ee:43:1d:de:18:df:95:9d:70:46:
1b:e1:b0:ac:be:fb:45:a0:0b:67:cf:14:04:af:39:32:3e:7d:
39:2b:9a:21:be:c3:c9:3f:d6:92:bd:7a:64:1f:02:43:11:f2:
f0:d3:26:aa:fc:ba:fa:5e:01:09:32:2e:19:7e:5e:58:f1:6d:
d7:26:15:55:67:7a:5b:b4:f0:eb:43:1f:e8:24:50:2c:f8:9f:
ce:f4:97:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLu39GTJC3BUdv3NuN1BFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MmM1ZDhjMzJjYWE0NjYyMzE2ODU4YzY1YmViZTEyYzg2
MWFkNjcwHhcNMjUwMzEyMTkwMTE1WhcNMjUwMzEzMTkwMTE1WjAzMTEwLwYDVQQD
Eyg2Y2Y1ZmVlMDJkMTEyNzAyOGEyYjBmZWYwYzI5MzRlMGU0MTY4Y2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrSArUn32E6PX/6EApTSXK2jOfz+
wBMqqGzR6jtPcMFzfMilpEcqJrUTKtxHAZmfcy5tu0wjFf5Kft9BmOdi9NNAsUVb
7lRXJyFvZwGlIqCbDmE8Bo8oTpGFwgMbsBWyFWAa5mqK3IJugQPFMZZtrHGz89s9
wN8kIV2KJj65WPpih90+RdYEr0LgQy0SVq+Plpy08SL5El4kebNRl12CyEQmrexP
lXe20ybbIV/OSSDsnv0yxVRCcezfBI1+hVxhxE14GAMFxGVJ0P5hmwY6xLNECGGK
+h5Jh/FYz/WkE8dJj/nAkm98GLoRm8KlEUBKuMDqAQq9ThALlSbQnJvYDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGz1/uAtEScCiisP7wwpNODkFozbMB8GA1UdIwQY
MBaAFHksXYwyyqRmIxaFjGW+vhLIYa1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wZTRmNmMtNTEyOC00NmY5LWIzZjMt
OGI4MmMyMDI5M2ExLzEvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wZTRmNmMtNTEyOC00NmY5LWIzZjMtOGI4MmMyMDI5M2Ex
LzEvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsbT8uEC
mRGdhmyDrkUMbaozqOtT3ce77EyHyTXH7q36hSz3T7Kj9K8cBaUpZmPVB5yWQri7
SZPz018dYcptVLZW7HbXJuazbCW8HbSyCMDnx/eDU06sEjcUnZ0rVkkCreTJ4al/
ZiQAd+VGYs6c2PO8u4WUaLhmh0pbi4tp+95n3Yj/0Vdhtv7DK/RvQ23PKqd5Ap4k
/R/NTlRYKdadWWNYS1SOAGOiq4DuQx3eGN+VnXBGG+GwrL77RaALZ88UBK85Mj59
OSuaIb7DyT/Wkr16ZB8CQxHy8NMmqvy6+l4BCTIuGX5eWPFt1yYVVWd6W7Tw60Mf
6CRQLPifzvSXsQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:39 2025 by rpki-client