Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
File: e1dU5NIIxkNfGr7JN83iAAkgTcA.mft (raw, json)
Hash identifier: VtEgeCdJifpEzROpjoBsSdD70zBOXRVBneRRmEI4jRI=
Subject key identifier: 86:C0:28:93:CB:B9:86:33:37:17:D4:75:68:72:B1:37:D3:B4:67:C8
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 019650B5FCDD677BD401229BA1C1F7C82370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
Manifest number: 0958
Signing time: Sun 20 Apr 2025 01:00:25 +0000
Manifest this update: Sun 20 Apr 2025 01:00:25 +0000
Manifest next update: Mon 21 Apr 2025 01:00:25 +0000
Files and hashes: 1: 67OzM8ECZbyoq_BnZX1dgSdsSqE.roa (hash: g9PYZvAqU4JsF+aihO2ckiHQRSBgUe4u8ImvTFXc4Uo=)
2: EsKSgJ8EQmtQ4eatv1jfClm65kw.roa (hash: KfQqwkTsCtwKGnXEQFbFhy/ovkmWCSEcDlc1yTA8r8k=)
3: e1dU5NIIxkNfGr7JN83iAAkgTcA.crl (hash: I2kJnKwUAOsBFW01JA66JCipQsZXvzsdKT1yKHQlqmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b5:fc:dd:67:7b:d4:01:22:9b:a1:c1:f7:c8:23:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: Apr 20 01:00:25 2025 GMT
Not After : Apr 21 01:00:25 2025 GMT
Subject: CN=86c02893cbb986333717d4756872b137d3b467c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:58:41:3a:89:ba:45:e8:3c:e5:5a:10:7c:
04:cd:82:5a:f1:b4:df:00:37:5d:13:5d:62:05:55:
c0:c4:51:e7:49:75:0d:bf:80:41:b5:20:e8:8f:8a:
f0:9c:1b:87:27:1a:c1:d6:f5:12:39:9f:44:51:e1:
93:89:54:90:a8:3e:a3:60:b5:25:e3:51:0e:33:5c:
c0:a3:7d:9b:2d:e6:7f:6a:c8:ad:bf:d8:96:69:aa:
ca:8a:58:52:0f:f3:7a:e1:75:46:b2:ee:74:be:e6:
81:65:da:59:f7:b3:c9:64:33:21:2c:b9:64:28:7f:
3d:7a:be:1c:e6:ba:46:40:1f:84:86:ff:24:b5:46:
52:6e:77:ed:6e:4c:44:a2:5d:5f:23:05:a8:6a:cf:
e2:6d:42:ae:d8:0e:c1:ff:85:d0:05:0e:ab:4f:b1:
67:64:56:76:e8:3a:46:0f:a0:b3:e8:f9:6a:f7:8a:
2f:2e:a5:0c:ef:40:4d:1d:dc:05:4f:d2:30:74:98:
23:3a:25:b4:15:aa:94:93:87:cd:70:53:25:c4:f6:
d3:88:25:d6:92:f4:75:9c:61:bb:da:de:b2:97:3e:
d2:2b:83:77:a2:5d:8c:ba:0a:38:05:0b:c6:95:42:
53:52:a3:62:5d:24:f3:fd:b0:90:cc:2f:c7:3d:1f:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:28:93:CB:B9:86:33:37:17:D4:75:68:72:B1:37:D3:B4:67:C8
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4b:1e:22:2d:f8:34:c8:49:9c:44:68:39:d7:9b:7d:4b:58:
35:d7:48:98:1e:e0:39:8a:f6:1a:ea:c5:e7:d7:19:6b:01:8a:
38:b3:1c:23:88:32:dd:d6:d9:90:4c:b5:55:cb:b0:13:cf:e9:
80:95:ba:43:2d:d5:a4:f1:0d:dd:1f:1d:70:51:16:20:bb:99:
16:09:7c:9c:15:d2:97:49:9a:ac:c8:42:88:0b:6f:48:98:ce:
06:96:45:a7:72:a8:14:0d:a8:a3:92:85:a4:25:4d:17:30:a4:
2d:09:8e:e9:5b:c9:3b:c5:37:f7:50:93:0d:c4:ae:68:12:25:
e7:d4:c4:a7:57:bf:47:51:b5:5f:c1:2a:ea:60:72:1e:f0:23:
25:4e:43:eb:5b:45:58:e0:22:0a:71:36:12:6d:30:41:cc:99:
93:63:10:53:79:5b:9c:b0:51:55:df:12:fd:0a:cf:ce:73:b9:
cc:77:3a:3e:76:f7:44:16:bb:e4:98:49:6a:88:0b:5e:2f:58:
31:05:97:b3:5f:c4:2e:4f:28:89:cf:9e:12:b3:5c:c9:04:d5:
9b:b1:00:8d:6e:97:41:75:59:c8:28:85:4c:21:00:11:2f:fb:
ee:f8:0e:11:e0:23:b3:f6:17:9d:49:e9:bc:69:bf:c9:42:98:
e4:a5:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:12:42 2025 by rpki-client