Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
File: eUif00bnIUhmFZrC8OycmQxPFLk.mft (raw, json)
Hash identifier: CBCzyNol1VNrzxEc71+4FSPGH/jmoC0KVhYHAD4UaWk=
Subject key identifier: 03:2B:A7:E9:9E:A2:8A:FA:20:C1:74:BD:22:F3:3C:D2:BA:F4:36:43
Authority key identifier: 79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
Certificate issuer: /CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Certificate serial: 01965E03CC64ACB2A6D0C33B3E2C69E98697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
Manifest number: 0360
Signing time: Tue 22 Apr 2025 15:00:29 +0000
Manifest this update: Tue 22 Apr 2025 15:00:29 +0000
Manifest next update: Wed 23 Apr 2025 15:00:29 +0000
Files and hashes: 1: YbVpJmm5d19rM-zYZeA0ZWdtDMg.roa (hash: l5rWO723DVA6iEz8C5Lvzh9vlRYqelqcHe5HXOP/cpM=)
2: eUif00bnIUhmFZrC8OycmQxPFLk.crl (hash: KVHiejpfI/QqnyN7EBgWqa+c0mCM1OuOfp28LpUy73c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:03:cc:64:ac:b2:a6:d0:c3:3b:3e:2c:69:e9:86:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Validity
Not Before: Apr 22 15:00:29 2025 GMT
Not After : Apr 23 15:00:29 2025 GMT
Subject: CN=032ba7e99ea28afa20c174bd22f33cd2baf43643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:38:c3:f2:f0:1a:49:ef:ad:12:19:09:cc:
46:a0:bd:b7:db:ef:e5:73:27:6d:98:d4:58:dc:a5:
56:3c:ce:de:72:26:85:84:fb:16:12:74:a6:96:a7:
78:8b:f4:4f:a3:63:97:80:19:4f:1d:2c:3c:f1:30:
cf:5d:8e:20:ee:ed:87:77:e9:f2:81:46:3d:ab:32:
25:91:37:be:2a:fa:d6:5e:a8:0c:d5:38:9c:2c:9f:
68:51:54:4d:b0:59:7e:40:4d:1e:a2:c9:e0:8c:4a:
cb:4d:59:17:c2:de:71:68:53:dd:17:fb:50:61:dc:
a7:f7:ad:00:c5:d3:cb:76:fb:3a:ae:af:eb:b1:8b:
b6:b0:5b:90:49:e4:0c:e7:db:9e:8c:52:5d:6f:82:
ac:f0:fd:72:6a:cd:d6:27:ff:3e:e5:35:ea:63:48:
c0:2e:5d:00:43:16:2c:b4:ad:c2:20:0e:39:33:25:
ae:62:c5:e0:b1:30:78:6c:a3:ca:5a:b1:25:ac:d3:
a0:03:8a:10:a1:1f:d5:7f:ca:9b:d3:98:88:4d:b6:
0d:fa:1f:fe:62:06:1f:0d:d4:6f:38:3b:fd:22:3c:
da:11:6b:ec:fe:9f:7e:7f:75:6b:1f:b7:62:0a:b4:
26:e2:da:30:6d:9e:ac:14:0e:db:84:23:b7:0c:c3:
06:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2B:A7:E9:9E:A2:8A:FA:20:C1:74:BD:22:F3:3C:D2:BA:F4:36:43
X509v3 Authority Key Identifier:
keyid:79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:94:cb:00:ee:1b:6a:f5:35:ef:5a:2b:40:4a:72:e6:63:34:
7e:3e:43:3a:2c:42:c2:bd:22:67:7a:14:82:8e:86:90:c6:e0:
fb:c9:4f:99:cd:02:88:ac:26:48:aa:94:90:2f:48:6d:1c:16:
61:79:4c:8e:d4:87:9e:79:8c:f7:2f:13:d2:17:98:2a:46:3d:
46:4f:7c:24:f3:e5:d2:27:b6:3d:02:6e:52:de:7c:fd:70:9a:
e8:e7:a4:66:5e:5d:af:50:58:69:c5:04:29:67:9e:52:00:aa:
d9:45:01:3f:9e:7b:92:0f:0a:12:c1:49:4c:41:5d:ee:01:4d:
bf:0a:d5:2f:5e:bf:07:a4:55:5b:3e:12:7b:20:e6:dd:4b:1f:
34:b7:9c:a2:5c:a1:22:18:71:2c:c2:e8:a5:87:71:33:d2:fe:
fa:8e:a0:25:93:77:23:79:11:af:e7:17:92:d8:2a:cc:53:d8:
3e:f4:21:3e:bc:69:13:df:93:7f:7d:c9:66:0b:e3:63:67:9e:
da:4b:f8:84:09:a5:e4:57:98:40:05:d7:da:2e:ee:cb:0e:2d:
b9:eb:e9:12:b8:77:b3:67:80:bf:ee:fa:38:c3:6c:ba:42:11:
37:41:ad:35:63:2a:cd:9c:a9:84:33:37:83:93:1a:cb:fc:1d:
18:42:45:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:59:16 2025 by rpki-client