Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
File: 59eZrg792Ybd53-zWtChCCPLly8.mft (raw, json)
Hash identifier: PxfX9BVX8EBfC+FMBkdJcV6MV3/RCrKlZ3bUUazPBH8=
Subject key identifier: E4:C8:F9:54:DF:A8:10:A7:19:88:5A:34:DD:D6:B8:54:55:79:AA:3D
Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Certificate issuer: /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Certificate serial: 0196440D5A142A71C223AA77DE94F36BD733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
Manifest number: 14FD
Signing time: Thu 17 Apr 2025 14:00:47 +0000
Manifest this update: Thu 17 Apr 2025 14:00:47 +0000
Manifest next update: Fri 18 Apr 2025 14:00:47 +0000
Files and hashes: 1: 59eZrg792Ybd53-zWtChCCPLly8.crl (hash: PQBnkj8IWjfCyRdpEkcubOaCBG4Tdy+NlcEcyHmkQsg=)
2: Kvx8CFJShgrk9zFYI0lUsh--CwU.roa (hash: PVmg//o7LkW03D9ltn/laGXzfCJ6cNBsJDyBEL8Jj7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:5a:14:2a:71:c2:23:aa:77:de:94:f3:6b:d7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Validity
Not Before: Apr 17 14:00:47 2025 GMT
Not After : Apr 18 14:00:47 2025 GMT
Subject: CN=e4c8f954dfa810a719885a34ddd6b8545579aa3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:d7:4a:c2:7a:dd:35:82:b0:fc:11:d2:87:
69:e6:2c:ae:65:2b:7e:cf:36:a7:cc:20:37:b9:0f:
0a:8e:93:b7:7b:4e:f7:95:50:98:9e:f3:1e:d2:f3:
12:26:de:68:54:6a:ac:a9:03:03:11:11:7d:70:9e:
f9:86:d4:ce:73:92:59:cf:9a:23:64:51:f8:50:37:
81:24:e9:aa:d3:1a:ae:9b:06:df:5e:d5:b4:17:8c:
6b:62:76:12:4c:65:61:de:17:81:b9:d5:01:30:11:
1e:a5:f3:ad:ed:21:fe:6f:76:cb:99:2a:6f:bc:c1:
f8:a5:5d:7d:6a:76:84:48:41:6d:3a:bd:30:01:73:
c8:70:e6:53:c9:85:56:e7:36:68:ac:ba:bd:43:d0:
61:1b:51:76:36:ce:5a:4e:ee:9c:7a:28:c4:d4:9f:
11:03:31:fa:39:79:31:f8:24:57:a6:9a:2a:6b:95:
b2:47:0d:b1:3a:bd:e1:78:8f:0d:ca:ea:23:0a:bf:
99:30:92:a0:fd:14:8c:19:d6:3f:c2:e5:b3:60:91:
75:f9:33:aa:4a:4c:18:fe:01:c1:05:6e:c1:9b:e9:
00:c6:1a:92:6c:1f:d1:b9:45:54:9b:48:65:d9:f3:
0a:19:8a:c9:50:d9:70:62:f9:12:c8:b6:dc:a8:98:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C8:F9:54:DF:A8:10:A7:19:88:5A:34:DD:D6:B8:54:55:79:AA:3D
X509v3 Authority Key Identifier:
keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1d:e7:70:ff:d0:4a:ee:60:da:72:1f:4b:6f:fb:d3:5b:29:
de:9a:02:62:63:86:c6:96:46:1e:07:f8:82:96:28:8c:ae:8b:
6a:f5:ac:7b:c4:0a:3b:ea:4a:bc:26:79:ae:cf:5a:45:48:d8:
ab:46:53:50:a5:37:32:aa:c2:ba:64:8f:63:d9:99:ac:fe:a3:
2f:1a:ba:6c:78:91:28:24:fa:bc:fe:2a:6d:5d:e2:46:19:eb:
65:ed:ef:9f:5c:85:40:9a:5f:50:4a:64:2a:c3:5a:97:f7:b2:
14:10:2c:32:dc:ac:ac:63:1a:37:cf:45:f5:3d:cf:e9:e3:60:
3f:1f:1f:38:80:9e:2d:94:a8:f8:c5:6f:0d:80:a3:92:fb:32:
c1:6d:f2:7c:ce:68:e5:96:28:3c:75:86:23:fd:44:72:38:08:
5d:fe:e9:ed:3b:a5:0d:b8:d4:ec:9f:87:51:f6:9c:a7:97:bc:
36:f5:62:30:35:21:90:fb:2f:6d:08:04:e2:b4:ae:3c:cb:46:
0f:70:76:f5:d4:5f:6c:5b:7f:fb:1c:4d:98:2b:e6:84:de:fc:
c0:01:66:34:5c:0b:47:7f:50:76:ff:57:c2:18:39:e1:ac:8c:
89:47:ab:be:a8:6c:b1:8f:77:e0:87:f1:10:7e:83:29:a3:58:
f2:30:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:55:14 2025 by rpki-client