Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
File: esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json)
Hash identifier: qt77T5LkNgkK2c1glJ0Mo4A9vFmN5OdwoMy7ZZmP9zI=
Subject key identifier: 91:B2:B9:AD:9A:3F:5F:C7:D2:A9:2A:4E:DD:B3:42:B6:E3:41:81:46
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 01965EA8E69E020306184505FC00A7190C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
Manifest number: 0CFA
Signing time: Tue 22 Apr 2025 18:00:49 +0000
Manifest this update: Tue 22 Apr 2025 18:00:49 +0000
Manifest next update: Wed 23 Apr 2025 18:00:49 +0000
Files and hashes: 1: SYRnChSsh0_v6fjwXGx7ILcwh_8.roa (hash: ub+o2UwDjpsKp4KwHEYNQcFaXm52BqcyybdGRXcC+wM=)
2: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: 0Q3bW1BklTQp54ZGKK872gG1X+OfJ0dhqeoCSGmix9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:e6:9e:02:03:06:18:45:05:fc:00:a7:19:0c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: Apr 22 18:00:49 2025 GMT
Not After : Apr 23 18:00:49 2025 GMT
Subject: CN=91b2b9ad9a3f5fc7d2a92a4eddb342b6e3418146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:d1:22:49:67:07:80:81:26:39:41:d6:fe:
70:b6:eb:75:d8:b5:0a:53:42:15:85:b9:9c:8d:fb:
50:e8:67:50:8a:63:82:1c:42:bf:db:ab:b1:ba:d3:
31:80:ad:7e:77:c1:02:c2:97:f4:74:53:83:e0:69:
48:b7:e1:43:6e:28:1d:9e:43:04:ce:a3:61:a5:e7:
f8:49:dd:3c:a5:b0:9d:94:8f:5f:9e:5a:92:bf:f2:
dd:83:94:39:96:71:27:06:f6:f7:ff:8a:93:80:ed:
10:75:9c:23:3d:88:94:d8:d0:80:cb:cf:bf:7b:7c:
aa:66:5a:97:50:0c:6a:92:80:0c:33:14:5e:74:b2:
cb:ba:de:a0:f1:f0:0a:9a:58:5a:3c:21:77:5d:1d:
ce:08:f0:ec:1e:a0:e4:a6:ee:34:e8:71:22:d5:c7:
0d:b8:9a:60:b9:8c:f1:71:5a:8b:e3:95:f5:10:ae:
5d:6a:ca:04:7b:40:70:53:c7:6a:b5:2d:be:38:0a:
bc:af:d6:de:60:e9:6c:01:5a:b8:59:2f:64:52:f3:
98:70:1d:cb:6e:20:4b:be:1e:66:96:a7:54:05:1c:
a6:0c:3b:e6:0f:87:c5:f5:e5:c6:53:93:e5:70:8e:
ad:fa:8d:70:78:d9:db:54:14:06:3d:59:29:55:a4:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B2:B9:AD:9A:3F:5F:C7:D2:A9:2A:4E:DD:B3:42:B6:E3:41:81:46
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e3:c4:7a:e9:bd:1f:98:17:10:77:81:74:80:45:87:87:ca:
12:b2:1b:19:0b:6f:c3:9b:d5:0f:6f:70:e5:7f:43:e6:66:ad:
69:ef:a4:1d:96:58:40:79:15:19:15:d8:43:2c:49:60:d9:31:
a2:21:31:a1:ba:b1:a6:e8:98:29:01:9f:42:0d:95:15:c3:5b:
2e:33:80:a6:84:10:2e:97:ba:ac:08:1c:77:cd:ff:e0:e0:2d:
dc:fb:ca:42:f6:cb:c7:7d:47:37:59:b8:37:96:97:54:78:f5:
e0:c3:80:39:91:97:56:66:c6:d2:39:fb:9e:1d:d7:a4:40:15:
82:ad:56:05:bc:1a:b9:6a:b7:f3:d5:0e:0a:0b:40:16:b4:db:
6d:d2:8e:39:64:74:48:70:6f:c0:6b:d6:7c:5c:3c:27:27:32:
b8:eb:0e:5d:71:02:45:ee:3a:b6:e6:b2:8b:b0:f6:11:5c:b8:
39:2a:40:1e:5e:32:35:0d:f5:23:33:40:aa:e3:81:c1:34:bf:
fe:5b:9b:66:6d:ef:fb:2e:29:0c:38:79:8e:f8:12:51:1c:50:
03:fa:81:85:93:dd:4e:b5:81:f9:66:7d:e9:a3:fa:86:36:1c:
ea:a1:7c:c7:67:26:d7:cf:59:93:cb:07:79:81:33:ea:67:9a:
54:71:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:32:09 2025 by rpki-client