Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
File: eSMEzs5_tlUdYh4ld0N1PX0-fro.mft (raw, json)
Hash identifier: PEfg/9ew56vmRwVRGCD5BWGcigt/3nUX9drMHH1f0Fs=
Subject key identifier: 39:90:64:10:97:A7:FC:18:EB:A9:43:B3:51:90:06:A1:00:54:E1:15
Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
Certificate issuer: /CN=792304cece7fb6551d621e257743753d7d3e7eba
Certificate serial: 01958CCEAEF25BABC053F7E6850B73A5B3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
Manifest number: 11DB
Signing time: Thu 13 Mar 2025 00:01:50 +0000
Manifest this update: Thu 13 Mar 2025 00:01:50 +0000
Manifest next update: Fri 14 Mar 2025 00:01:50 +0000
Files and hashes: 1: IMdPglYzX5a0Y8UZyR6PoX9F3qI.roa (hash: LlemrthVpDv3Bg7I6x+S4EwJBWPGL+Tm33DKrH5qsTc=)
2: eSMEzs5_tlUdYh4ld0N1PX0-fro.crl (hash: BxP6zeE/ywVjF1juDAjrQfcV+QotavXcDGaQs+llObw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:ae:f2:5b:ab:c0:53:f7:e6:85:0b:73:a5:b3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba
Validity
Not Before: Mar 13 00:01:50 2025 GMT
Not After : Mar 14 00:01:50 2025 GMT
Subject: CN=3990641097a7fc18eba943b3519006a10054e115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:7d:58:a0:61:9a:55:e7:d8:e7:5c:87:b0:
2e:3e:25:40:23:f8:b9:bf:76:fd:14:dd:c6:5e:69:
9a:70:6e:df:f4:87:37:99:f0:a5:d3:9f:f5:e8:7c:
da:15:47:03:4a:0b:ae:94:a2:9c:0b:53:01:ce:93:
69:1b:90:7c:4f:2e:b1:86:66:13:ee:1a:4e:f8:8c:
37:ea:72:09:36:cd:8c:27:17:98:93:5e:76:ea:07:
ab:f5:f1:fe:ea:de:8c:bc:77:10:10:1d:29:64:6e:
87:54:34:67:e4:ad:ed:c8:b3:03:b9:e1:13:5c:9b:
46:e7:ca:9b:4f:6d:0e:a7:fb:d7:4d:2a:8a:13:92:
31:b5:b4:0d:2f:a3:c9:2b:3a:64:c5:c9:8c:bc:0e:
c7:4c:cc:92:1c:a0:56:64:30:76:be:5a:5f:7c:b7:
8b:3e:79:5b:83:01:fe:a3:ae:c3:cd:52:b5:4d:86:
a9:66:15:4c:c6:12:3c:5a:60:3c:9b:ea:b7:13:d5:
ab:8b:41:6e:05:72:bb:25:ae:b0:e6:da:dd:82:13:
9e:3e:b8:a3:90:72:64:83:43:27:a6:02:06:1d:5f:
da:d1:1e:90:5a:70:30:c2:7d:a1:6d:2c:0e:59:1f:
e4:a1:3c:88:dc:76:a8:de:a5:aa:59:3e:75:d1:34:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:90:64:10:97:A7:FC:18:EB:A9:43:B3:51:90:06:A1:00:54:E1:15
X509v3 Authority Key Identifier:
keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:48:67:d5:6d:22:0a:e9:3e:cf:92:ab:c3:79:9e:3e:57:ef:
2b:e2:cc:03:1b:89:61:87:df:94:d6:cc:4b:4f:e0:0c:76:e1:
3d:e1:d4:38:d8:a5:6a:9b:33:42:03:fb:4f:a9:ac:70:61:b2:
9e:6b:bf:f1:f0:3a:0c:8a:e8:79:c8:19:bb:32:c5:bf:b1:6f:
c7:d5:c2:c7:c7:f7:1e:29:67:fa:64:0c:fe:bd:b9:af:db:89:
59:a4:c4:42:ce:a4:11:bb:ad:80:e1:b4:7e:fe:b8:23:71:c1:
f4:38:62:c6:bd:e0:98:b8:26:6a:90:d0:65:ed:f5:dd:2a:8c:
9e:0d:ae:f0:04:e0:70:8f:57:fc:1d:fc:10:51:4c:2d:b7:24:
7b:cd:2a:60:80:cd:41:50:38:82:7d:91:67:64:3b:92:af:e3:
3a:0a:9e:f4:3e:bd:dc:82:2d:e6:a6:0e:85:19:24:88:59:d3:
ec:bf:42:86:d0:84:0e:69:fa:47:36:f6:f9:e4:78:f8:31:28:
6e:a9:70:1d:77:95:9a:5b:f0:90:f4:9a:6c:a8:12:b4:5d:67:
bb:db:44:f8:90:6b:37:59:35:36:57:67:6a:8f:95:43:91:5c:
a3:56:e2:90:bd:55:d5:3e:4b:b6:e7:70:57:89:b3:02:4d:4d:
ed:e8:d0:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMzq7yW6vAU/fmhQtzpbP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MjMwNGNlY2U3ZmI2NTUxZDYyMWUyNTc3NDM3NTNkN2Qz
ZTdlYmEwHhcNMjUwMzEzMDAwMTUwWhcNMjUwMzE0MDAwMTUwWjAzMTEwLwYDVQQD
EygzOTkwNjQxMDk3YTdmYzE4ZWJhOTQzYjM1MTkwMDZhMTAwNTRlMTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWl9WKBhmlXn2Odch7AuPiVAI/i5
v3b9FN3GXmmacG7f9Ic3mfCl05/16HzaFUcDSguulKKcC1MBzpNpG5B8Ty6xhmYT
7hpO+Iw36nIJNs2MJxeYk1526ger9fH+6t6MvHcQEB0pZG6HVDRn5K3tyLMDueET
XJtG58qbT20Op/vXTSqKE5IxtbQNL6PJKzpkxcmMvA7HTMySHKBWZDB2vlpffLeL
PnlbgwH+o67DzVK1TYapZhVMxhI8WmA8m+q3E9Wri0FuBXK7Ja6w5trdghOePrij
kHJkg0MnpgIGHV/a0R6QWnAwwn2hbSwOWR/koTyI3Hao3qWqWT510TQWxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmQZBCXp/wY66lDs1GQBqEAVOEVMB8GA1UdIwQY
MBaAFHkjBM7Of7ZVHWIeJXdDdT19Pn66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lODRiNWQtMzUxMS00NGU5LTkyNjEt
ZWQ4MmFlN2RiZDU5LzEvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lODRiNWQtMzUxMS00NGU5LTkyNjEtZWQ4MmFlN2RiZDU5
LzEvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUhn1W0i
Cuk+z5Krw3mePlfvK+LMAxuJYYfflNbMS0/gDHbhPeHUONilapszQgP7T6mscGGy
nmu/8fA6DIroecgZuzLFv7Fvx9XCx8f3Hiln+mQM/r25r9uJWaTEQs6kEbutgOG0
fv64I3HB9Dhixr3gmLgmapDQZe313SqMng2u8ATgcI9X/B38EFFMLbcke80qYIDN
QVA4gn2RZ2Q7kq/jOgqe9D693IIt5qYOhRkkiFnT7L9ChtCEDmn6Rzb2+eR4+DEo
bqlwHXeVmlvwkPSabKgStF1nu9tE+JBrN1k1Nldnao+VQ5Fco1bikL1V1T5Ltudw
V4mzAk1N7ejQDg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:05 2025 by rpki-client