Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
File: esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json)
Hash identifier: 8MCdYe4ZqDB2gfCnNEMS7sPurSR+8G4515vvtvamzgM=
Subject key identifier: 5C:E2:D9:4B:B4:CE:26:00:94:0B:FB:A1:80:FF:CD:1B:30:25:86:FC
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 01958C297FD9EA1EF2748AA1BE178F0A22D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
Manifest number: 0C8D
Signing time: Wed 12 Mar 2025 21:01:24 +0000
Manifest this update: Wed 12 Mar 2025 21:01:24 +0000
Manifest next update: Thu 13 Mar 2025 21:01:24 +0000
Files and hashes: 1: SYRnChSsh0_v6fjwXGx7ILcwh_8.roa (hash: ub+o2UwDjpsKp4KwHEYNQcFaXm52BqcyybdGRXcC+wM=)
2: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: 4+vRbX88bMcxrkjxOHenSfzdU+AKe0S3IMOgriQr824=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:7f:d9:ea:1e:f2:74:8a:a1:be:17:8f:0a:22:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: Mar 12 21:01:24 2025 GMT
Not After : Mar 13 21:01:24 2025 GMT
Subject: CN=5ce2d94bb4ce2600940bfba180ffcd1b302586fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:35:f7:1a:5f:c8:cf:42:bf:f7:e2:4c:e4:04:
76:33:f4:6e:c5:71:2a:35:35:37:bf:7f:3e:f1:b4:
ca:cc:9f:8a:76:c9:af:44:f7:65:5c:0b:0a:33:9a:
bc:b3:ae:21:cb:19:14:e9:80:3d:b7:f1:f8:65:c5:
c4:cf:cb:5e:74:03:62:11:a0:d4:44:a6:4c:55:5d:
53:32:0a:4c:97:8f:ef:aa:d1:13:a6:2b:83:5e:5a:
51:fc:6b:bf:74:a4:b7:40:23:87:09:03:dc:fc:1e:
9d:19:40:a7:76:c9:fe:ea:f3:97:e8:c9:73:13:42:
92:dc:d4:dd:0e:8b:ed:65:bd:89:6a:ec:c3:74:be:
b5:76:41:85:2d:bc:74:90:83:72:8e:15:98:f2:e9:
99:77:f0:6f:05:54:ff:91:cb:c6:84:63:23:66:05:
e0:c2:eb:ef:4f:d2:09:21:26:e6:3a:dd:0b:a6:18:
f9:c0:6c:c6:64:df:a3:2d:ae:ad:52:eb:cd:65:b3:
7f:64:90:c8:87:4b:ea:37:7e:27:5d:a1:fc:80:09:
5e:a9:53:e6:09:89:c5:f4:41:46:0b:28:77:4c:6f:
67:d2:9a:74:27:ee:98:98:c3:f4:ef:02:45:cd:15:
2d:d6:97:94:ad:76:39:6a:48:e7:1a:53:b6:da:4d:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E2:D9:4B:B4:CE:26:00:94:0B:FB:A1:80:FF:CD:1B:30:25:86:FC
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:11:66:d0:6b:d4:ac:8e:ab:05:a3:c7:3d:e6:d4:dc:c5:20:
bb:dd:a3:07:bd:f9:fa:ec:e1:89:db:d6:f7:64:75:8d:e0:33:
b5:a2:0f:33:0f:48:56:b3:ea:f7:18:0d:ed:82:0f:82:12:f3:
b3:64:4b:40:b1:7b:c9:f6:86:3a:60:c0:7d:3d:c6:61:b2:53:
92:5c:90:38:70:b0:a7:b3:ac:fe:1b:11:76:1a:a1:06:69:ba:
b6:ea:5a:90:a2:36:f7:fc:52:20:8a:0e:ba:75:60:76:72:11:
33:b8:b6:f3:9d:ae:83:87:8a:a2:4e:e8:d1:4a:aa:df:79:3d:
98:f2:98:8c:b1:4a:71:68:5a:d5:31:f6:0f:b4:d3:21:c4:58:
c2:57:13:83:e0:cc:1d:8b:bd:7c:e4:cf:2f:79:10:27:70:f8:
61:f1:24:95:2a:6f:3f:8e:fa:81:09:b1:d4:fa:b9:f6:cf:6b:
71:c9:05:ab:a8:f8:f1:2f:86:95:f7:a5:78:40:78:e5:3d:eb:
dc:c2:af:b9:bb:ef:8d:9e:dd:38:6f:de:a3:12:1e:6a:eb:5a:
0d:7c:db:48:70:97:0b:c8:fb:65:b6:88:3b:8a:8d:d8:59:05:
e9:fd:08:9a:89:2a:f1:eb:91:9a:07:2a:06:1d:fe:3d:ec:bc:
19:b5:f6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:08 2025 by rpki-client