Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File: eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier: wO1wDDPE3ts4gS8EIKBDf/bgPdJC9O6yqDXbiqgcW4I=
Subject key identifier: 24:AE:1B:64:CD:8E:F4:B0:CB:BA:BB:3C:2C:1D:1F:E7:32:46:9B:25
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer: /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial: 019653EEADFD6D1BBD474A4C54BE39D5A167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number: 120E
Signing time: Sun 20 Apr 2025 16:01:13 +0000
Manifest this update: Sun 20 Apr 2025 16:01:13 +0000
Manifest next update: Mon 21 Apr 2025 16:01:13 +0000
Files and hashes: 1: 8reTSTj3AwMaAQKMOvOjjWzjRZU.roa (hash: l5w2EwX064H88HHHHAQh4ec4rfO96cZ19m2IwMvLv2c=)
2: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: IWgdWuKsl1iveCD8onElLPbOgLwt/8nqTX8ADcGn7C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:ad:fd:6d:1b:bd:47:4a:4c:54:be:39:d5:a1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
Validity
Not Before: Apr 20 16:01:13 2025 GMT
Not After : Apr 21 16:01:13 2025 GMT
Subject: CN=24ae1b64cd8ef4b0cbbabb3c2c1d1fe732469b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:09:cd:18:f3:06:76:bf:50:58:94:53:fa:
35:14:70:59:61:67:fa:fa:a3:c3:37:d7:8a:e5:0a:
93:cd:87:8b:42:6b:b4:15:a4:a7:92:d3:26:4f:51:
ae:d8:0a:79:6a:f1:a1:cd:9b:b5:3c:e1:60:be:be:
ba:cd:50:d2:ae:f5:01:cd:b2:dd:bb:24:ad:9b:3b:
f3:38:51:36:51:60:38:82:7c:e7:e4:71:c3:fb:be:
47:3e:28:0a:d1:7a:65:f5:15:06:d0:c2:5f:72:e1:
3b:eb:c7:d3:42:17:86:8a:74:8a:90:78:38:72:a4:
b6:8e:61:c6:f9:47:7a:d6:5a:7d:47:e4:cf:69:fc:
29:f3:81:bc:44:c3:1d:8d:e5:3c:35:4e:eb:33:ac:
83:5b:c8:43:5b:8a:20:ff:18:38:bd:4f:b5:4b:e4:
5a:39:ff:a2:60:8c:a4:31:bb:d0:4f:37:a4:47:40:
16:c6:7a:2f:bd:5a:e4:22:e0:a0:e8:6d:c0:8a:e2:
01:de:49:6c:ce:1e:5e:0b:e1:b8:25:5d:3d:42:66:
29:df:b3:f0:88:77:09:88:23:7e:97:f9:e8:4d:e5:
0c:4e:82:28:52:1a:92:6d:b5:91:8b:3d:f2:61:9a:
2f:45:39:0c:ca:16:d5:8c:49:9f:f8:a0:8b:aa:61:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AE:1B:64:CD:8E:F4:B0:CB:BA:BB:3C:2C:1D:1F:E7:32:46:9B:25
X509v3 Authority Key Identifier:
keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3a:59:15:21:86:17:e5:8e:0b:6c:de:b6:48:e7:f6:10:ce:
67:20:e7:cc:f0:cb:41:26:f0:97:63:fa:1b:1e:30:a8:3f:e8:
2f:32:56:ed:e2:4d:f1:ca:01:81:c4:0d:87:3f:3f:6f:4d:66:
26:1f:0e:65:38:7a:33:c6:23:cd:78:6a:1a:2a:0f:18:c8:f9:
22:4b:a6:cc:bb:81:ff:63:38:d5:4e:a6:a7:2a:dc:15:80:fe:
8c:6e:f8:8f:ab:35:f5:f1:08:8c:46:4d:c5:71:93:c9:75:2a:
22:12:47:72:f7:f9:84:b5:d8:65:3e:ea:f1:b4:34:3d:de:85:
fa:22:d6:2e:b7:fa:6a:ca:c3:aa:ce:9c:50:ab:e1:9e:c2:1e:
d8:f6:a3:5d:57:b2:23:f4:06:5c:6f:53:25:51:1c:fd:ad:07:
c4:20:22:e2:ed:65:22:9d:ba:cd:0a:09:cc:60:42:75:14:09:
8e:fe:66:b6:3f:26:d8:54:9c:46:98:5e:b9:df:ee:0e:d1:7c:
8d:f0:a4:dc:3b:8f:1e:0b:55:b6:8d:84:6a:de:54:b7:5c:49:
e0:14:5a:80:95:98:77:b2:78:d4:a1:f6:2d:67:a1:71:e7:12:
17:ab:cd:9e:f6:8d:c2:94:25:5a:e5:c5:21:78:64:d4:0d:fa:
cc:d4:d8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:55 2025 by rpki-client