Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
File: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft (raw, json)
Hash identifier: WozJllgPyqzMuoS88e6QS0FN52Bm2Rqhqawo37jlWuY=
Subject key identifier: 7D:1C:EF:08:43:BD:A1:6F:08:FF:B5:8F:5D:0B:5D:C2:14:82:F1:67
Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
Certificate issuer: /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Certificate serial: 01964CD94577E9D9D5D379407DB2A39CFB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 07:00:29 +0000
Manifest this update: Sat 19 Apr 2025 07:00:29 +0000
Manifest next update: Sun 20 Apr 2025 07:00:29 +0000
Files and hashes: 1: 3B54N1RzqRAgAHkYRgNdqkdOh5M.roa (hash: sve8I1LgrBKICchu1Eds5qUShF2pQrbxFBAqnwDuFVs=)
2: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl (hash: 3Be+KPlw5fp9NtpUOHHWir2JK3xDXFd/532J+OC6Bq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:45:77:e9:d9:d5:d3:79:40:7d:b2:a3:9c:fb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Validity
Not Before: Apr 19 07:00:29 2025 GMT
Not After : Apr 20 07:00:29 2025 GMT
Subject: CN=7d1cef0843bda16f08ffb58f5d0b5dc21482f167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:96:00:57:62:85:d7:bb:42:20:a4:e0:aa:f6:
c6:8b:23:5c:48:ed:f2:7d:ca:eb:34:eb:fe:0e:e0:
e6:b5:e5:0c:67:8b:d2:61:2e:94:64:df:e1:c3:d9:
e1:e0:6d:ca:08:fe:c8:cb:fc:66:c0:e6:a7:6c:50:
28:f8:7f:15:c3:e7:27:83:7a:a1:34:ad:9c:fa:ed:
a4:bc:e0:c3:c2:db:ec:1d:2d:69:06:d2:5a:a1:42:
f3:2d:5d:d2:ce:d3:aa:95:22:8d:37:ec:9c:f9:45:
6f:2d:da:ce:30:a8:31:25:1a:da:1f:1a:bc:49:b2:
88:52:8f:94:72:b1:03:f7:a2:42:90:5f:bc:38:af:
e8:3f:e3:2c:45:50:c5:a2:43:aa:d8:56:2a:cf:69:
d0:23:1a:c1:1f:3a:64:04:63:40:44:dd:0b:cc:03:
6b:2c:89:7a:e5:2f:3e:d8:19:d9:66:57:6f:88:3f:
d2:1a:5d:e6:7c:28:2b:f9:24:a0:64:96:92:36:49:
02:e3:90:97:75:d7:21:47:b3:a8:ec:58:77:e9:ed:
44:8d:23:b0:23:78:ac:d4:1e:6e:90:bc:41:43:ff:
d3:7e:e7:53:ba:ab:53:d3:f5:5e:fa:bd:c5:fa:f5:
a3:47:e4:d7:25:ba:9d:9a:92:37:ad:4c:1e:84:c5:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:EF:08:43:BD:A1:6F:08:FF:B5:8F:5D:0B:5D:C2:14:82:F1:67
X509v3 Authority Key Identifier:
keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d7:58:35:c3:27:b7:62:01:1e:94:e9:89:b0:88:0b:3b:52:
10:e4:ad:05:e5:41:d3:4b:2c:fc:ad:f6:59:93:29:c0:12:ab:
a4:55:3b:4e:83:13:04:e1:e7:54:6c:9e:45:79:f2:cb:3f:aa:
4d:ac:f1:e3:23:4a:25:d7:80:f9:c8:ea:2c:3f:e5:ce:fe:cf:
e6:91:d8:01:90:ca:8c:2a:b3:ef:86:8d:8f:13:c9:8f:e2:83:
c9:b1:c4:be:e2:10:c7:46:79:b5:27:2b:96:1c:da:3b:d2:e4:
32:11:6f:44:f4:70:d7:3e:76:2e:b1:25:7b:2d:6e:5c:06:f0:
0e:c2:ee:62:52:b5:8d:4e:6b:f1:25:cd:94:d2:b8:d0:a8:3f:
e9:52:f2:7e:9d:99:66:04:cd:ac:78:13:4e:60:66:6a:17:d5:
3b:ca:fc:ce:bd:32:fd:82:2e:82:33:89:02:e4:2c:c3:8d:c4:
bb:89:2e:95:7b:ab:fa:92:ad:db:4f:f9:0b:47:1a:32:71:2d:
77:e6:7f:1f:12:c7:24:52:b9:42:19:6f:25:f2:f2:54:fc:89:
fc:66:19:4b:af:6a:83:43:62:37:68:8a:b8:c7:52:4c:2b:ad:
a7:13:e8:d4:97:b0:de:36:50:44:bb:8f:88:46:37:39:be:2e:
be:9f:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:13 2025 by rpki-client