Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File: EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier: L5xjCiExLLPufrvpSpqyDapLPAfw1V1yNOKrOoAGJk0=
Subject key identifier: 53:26:D5:B7:FA:48:83:FD:58:7E:E8:E1:B1:C9:FC:F8:B1:80:0D:0B
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 01958F9882C8065A5960FF0496552C0DE566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number: 149D
Signing time: Thu 13 Mar 2025 13:01:31 +0000
Manifest this update: Thu 13 Mar 2025 13:01:31 +0000
Manifest next update: Fri 14 Mar 2025 13:01:31 +0000
Files and hashes: 1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: MnqnFL6AmJ2OrjDamT8efjC5q4AzZ2FhgT/fBIGbcWg=)
4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:82:c8:06:5a:59:60:ff:04:96:55:2c:0d:e5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Mar 13 13:01:31 2025 GMT
Not After : Mar 14 13:01:31 2025 GMT
Subject: CN=5326d5b7fa4883fd587ee8e1b1c9fcf8b1800d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4f:84:40:23:30:6f:9c:4c:5c:9d:a2:c9:b1:
ac:b0:8c:84:ab:89:75:27:81:ec:dd:82:ab:ea:22:
c2:84:d1:e7:2b:20:52:9f:ac:12:93:8c:ea:8c:76:
25:fd:a6:87:54:c0:93:03:16:a4:68:4c:e2:d9:70:
42:6d:c4:71:fa:ab:80:1e:60:c3:b2:bc:6a:82:83:
ba:75:4d:a1:20:0a:ea:71:72:8b:93:8d:b8:5c:e1:
64:bf:6b:f6:b9:60:f6:24:ad:37:1c:e4:48:fe:ab:
53:71:70:9d:c2:95:1b:2a:ad:49:c8:cd:33:e4:1a:
ae:2e:4e:86:f7:43:04:c0:34:e3:7f:5b:a5:fc:c6:
3c:9e:1a:1c:e6:20:da:81:a6:59:d2:b2:ad:9f:f5:
32:bc:eb:7e:32:97:2f:c7:fa:94:5d:d2:f5:74:42:
54:fd:86:f9:45:4b:a4:73:8c:dd:5c:7d:a5:db:79:
b2:49:79:15:12:5d:45:9f:2d:51:3b:39:3e:1f:84:
c9:4f:32:f9:c7:45:e5:31:68:72:97:6e:0f:15:e5:
6b:55:79:61:d0:4c:68:eb:dc:52:c9:9f:2f:b2:b1:
d5:3f:c1:fc:b8:6b:d8:ac:9c:fc:f4:4f:66:1a:23:
ab:eb:be:9f:8b:7f:db:78:b5:f4:19:05:19:d6:80:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:26:D5:B7:FA:48:83:FD:58:7E:E8:E1:B1:C9:FC:F8:B1:80:0D:0B
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:9d:37:b3:02:e8:0d:a8:46:a6:30:66:d1:4e:30:5e:09:91:
26:46:d0:37:bd:6a:fc:21:f0:6e:24:85:d1:b4:b0:03:fa:86:
61:d4:6a:a8:6e:31:18:6a:43:f7:ac:f6:8d:cd:8e:a6:07:51:
e9:9f:f4:61:dd:49:d8:40:51:89:1c:a8:38:4a:1a:89:80:7e:
d9:a4:ce:b0:8f:51:09:2e:39:6d:e5:63:fa:91:51:9b:15:81:
d0:4b:54:c1:71:b0:55:06:ea:e2:f8:c6:b6:ce:eb:59:26:9b:
a4:5c:09:bb:db:28:f7:be:70:bd:f0:39:03:00:ef:59:ac:ad:
59:8c:22:e7:d2:00:f7:9e:99:03:43:df:94:da:a9:37:87:d2:
8d:5c:e8:26:c3:d8:b2:d8:64:f1:5d:20:fc:cc:11:40:ba:83:
9e:1a:d9:be:9d:ad:ee:00:bf:53:da:61:31:cf:37:44:99:81:
bc:3b:67:ea:79:1c:f1:d9:03:dd:56:c6:f2:d5:08:28:4b:fb:
13:d4:ab:81:e1:60:71:24:46:09:18:cd:5c:71:be:d2:e7:b0:
37:52:fb:a6:1b:01:62:5a:e3:6c:25:97:9c:62:57:fc:b8:5c:
07:0c:60:49:73:8d:a6:ed:82:36:3e:6f:ef:83:39:84:c9:e3:
e2:70:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:08 2025 by rpki-client