Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
File: egoGVk08cX0tbaoegzxJWXawuto.mft (raw, json)
Hash identifier: TvVz9DYELGinJMmeX+/4YRE+9EanuFEysCNv987deds=
Subject key identifier: F4:C0:12:58:A1:5D:3A:AE:4A:FD:DD:9D:7F:8F:0A:6E:3B:DD:D8:60
Authority key identifier: 7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
Certificate issuer: /CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Certificate serial: 019614D8832B42C9EDFCE3F33094CA1B1ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
Manifest number: 137C
Signing time: Tue 08 Apr 2025 10:00:55 +0000
Manifest this update: Tue 08 Apr 2025 10:00:55 +0000
Manifest next update: Wed 09 Apr 2025 10:00:55 +0000
Files and hashes: 1: 2bWZH-siKv9yamXLxhMW4gBTBXs.roa (hash: xWCLh4hIiubp753R08bjE0GaWYotTbdn6hf3WZPct+A=)
2: 7IdkztL4D2rd1OWu-Fwdy4TrVLU.roa (hash: dbyo4ZfaUk/gfa7oD7KrfiLAvIhYyozL2QxpQuJXGrE=)
3: egoGVk08cX0tbaoegzxJWXawuto.crl (hash: TMVkcFmf0yy/wsgm2N48IEYN7fzHkodKrjiCyWs2CNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:d8:83:2b:42:c9:ed:fc:e3:f3:30:94:ca:1b:1a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Validity
Not Before: Apr 8 10:00:55 2025 GMT
Not After : Apr 9 10:00:55 2025 GMT
Subject: CN=f4c01258a15d3aae4afddd9d7f8f0a6e3bddd860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:d7:be:de:0b:a7:05:36:ce:63:21:a6:24:
57:b9:4b:20:6f:79:00:b9:3b:a6:fb:37:53:dc:59:
11:5b:3e:31:12:0b:4d:bc:8c:80:2f:40:2a:e7:ed:
50:07:5b:bb:eb:15:0b:65:7f:a2:fe:a1:3b:69:8d:
f0:29:0b:18:47:c5:87:ef:31:8a:06:28:bc:3b:67:
e4:c1:64:89:67:47:e8:d0:5d:d3:29:88:e7:d2:51:
dc:46:08:fc:61:a5:7a:3c:ea:cc:08:11:38:93:5d:
70:aa:6f:f6:11:00:e1:85:33:a4:6f:54:48:ac:8a:
c4:61:98:0a:b2:ad:6b:20:53:0e:1b:5f:f6:70:95:
e2:16:bb:06:66:d7:a4:be:9d:4b:e9:87:07:4b:e6:
05:7c:5b:d3:d1:c7:ef:72:0b:b7:47:f9:ab:27:78:
b7:32:0e:85:14:88:ad:98:a6:84:f2:1a:d5:e6:19:
ba:bf:4f:c6:87:86:0e:66:55:22:29:62:1c:71:89:
ce:a3:b4:68:fa:33:6e:4e:cb:cb:72:aa:32:05:ec:
7b:23:db:3f:ba:de:05:c0:04:ac:64:71:dc:68:d6:
ae:27:c7:77:80:a2:7f:0b:ef:2e:61:30:58:23:55:
42:35:88:ad:98:e6:3a:0d:80:9d:12:ce:dd:35:82:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C0:12:58:A1:5D:3A:AE:4A:FD:DD:9D:7F:8F:0A:6E:3B:DD:D8:60
X509v3 Authority Key Identifier:
keyid:7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:13:67:9c:d6:e0:4f:f3:06:fe:42:d0:98:33:62:77:12:85:
57:34:65:d6:51:32:ba:a5:aa:d7:14:53:1d:66:2a:c5:ea:02:
b6:95:ed:b6:dd:ae:1a:6a:7a:d2:fa:79:94:3a:5a:8a:e4:cf:
73:5e:4c:12:a4:39:e0:b4:fa:3b:88:ab:db:f4:56:44:b4:6a:
8e:aa:eb:5d:bd:08:d7:43:01:5f:00:e9:f5:ca:01:c2:d6:ff:
5a:bc:1c:69:84:e5:dd:1f:82:94:9b:f0:15:f0:2a:b1:e2:1d:
83:bd:da:37:c4:6d:8a:ae:23:97:9a:be:3b:ea:d9:12:c5:26:
2e:38:94:36:79:4c:24:e9:76:02:41:fb:00:6c:49:15:c6:98:
db:a8:96:c2:8a:c2:0a:20:d1:ea:8a:17:59:c8:18:a6:2a:ea:
5c:1a:c0:30:6b:2f:7d:21:c1:57:d2:28:c4:8b:c1:89:2f:c7:
b4:cf:e1:5e:f9:a0:cd:08:93:e6:a9:05:17:f9:dc:9c:eb:70:
4b:78:93:0d:10:d4:ba:28:55:ec:79:43:24:41:4c:36:12:00:
ac:f3:aa:32:69:eb:da:40:70:27:19:d7:7c:98:f5:b4:8f:65:
6a:a6:f2:ff:39:05:78:e6:c5:f1:ef:41:fc:66:e4:5b:11:4f:
43:7b:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:17:07 2025 by rpki-client