Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
File: eA-G0ESkoqIzMZQYqo2prYN8duo.mft (raw, json)
Hash identifier: h8nfO/tN0esw30l7EoSr8LFmDiUqD6fsP4Ic9AOh1Ec=
Subject key identifier: 4C:E3:6D:1A:93:FE:95:3E:98:D6:07:BF:17:C2:29:60:F1:0B:6B:A2
Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Certificate issuer: /CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Certificate serial: 019578A243E171870E1197BE12E2BD3890ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
Manifest number: 148F
Signing time: Sun 09 Mar 2025 02:00:54 +0000
Manifest this update: Sun 09 Mar 2025 02:00:54 +0000
Manifest next update: Mon 10 Mar 2025 02:00:54 +0000
Files and hashes: 1: 3FcBSSiJh8aVrK9iYZdzbMgTqW4.roa (hash: 6RoiwnIQu/6s++wuEChPFYXGvNvnIKo47xh4stLwSlQ=)
2: eA-G0ESkoqIzMZQYqo2prYN8duo.crl (hash: 2tvHGIVlz2/lv6Wf5Ay0zmRE42nf5kvLIPZPEAE1yL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:a2:43:e1:71:87:0e:11:97:be:12:e2:bd:38:90:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Validity
Not Before: Mar 9 02:00:54 2025 GMT
Not After : Mar 10 02:00:54 2025 GMT
Subject: CN=4ce36d1a93fe953e98d607bf17c22960f10b6ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:b0:96:a0:d8:8f:15:e3:94:5a:b8:67:0e:
02:c1:49:13:78:2c:2a:6f:73:73:5c:3c:ee:46:c5:
09:dd:31:05:9a:33:bc:89:2a:24:bd:1f:db:17:6b:
06:a0:b8:ec:d8:00:f8:07:95:d6:9a:48:b0:7f:0f:
3e:c4:1a:7e:7b:37:1e:6e:2a:a3:b7:7e:89:de:8e:
1e:15:9f:06:06:fd:22:74:4e:19:c2:5a:e9:42:d4:
3d:72:d4:36:c9:2d:a7:7c:ea:6a:6d:28:f0:6e:e3:
44:de:b7:23:d6:37:7e:35:1d:de:21:c4:29:c8:28:
28:83:6e:60:df:38:77:19:6f:b0:35:f9:95:e0:20:
49:3c:94:92:5b:63:c8:a4:64:29:7d:c7:90:6f:13:
b7:06:11:29:4f:4c:10:ee:be:ce:79:31:64:22:ae:
96:24:3c:4e:47:0e:7d:5c:f8:d9:90:6b:17:b9:20:
0e:48:b0:13:b6:a1:9b:c7:56:87:3f:55:d1:25:94:
93:74:c1:f2:65:46:83:62:04:8a:c2:e9:ab:fd:2d:
27:f1:c6:16:78:35:8c:37:5c:2c:3a:89:12:f1:ed:
98:60:b5:12:a0:fe:ba:26:09:24:bb:d8:c7:3a:65:
33:46:42:b4:b0:02:c6:a5:87:e6:b6:79:5e:84:0b:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E3:6D:1A:93:FE:95:3E:98:D6:07:BF:17:C2:29:60:F1:0B:6B:A2
X509v3 Authority Key Identifier:
keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:87:b6:ef:da:ac:de:42:f4:79:fa:71:88:b8:58:74:40:40:
98:d3:35:11:a1:93:95:fb:a3:b6:11:5c:4a:b6:a1:29:3e:57:
da:b8:11:5c:84:2f:f9:61:bc:09:e3:04:03:11:91:9d:73:df:
25:f5:3e:f2:4e:f7:4c:69:cd:0e:b6:8f:85:07:98:52:f6:77:
65:31:c5:3d:c6:d7:46:e5:16:51:8d:19:93:be:d1:ce:a3:9e:
c9:3e:fd:5a:41:92:93:d8:24:60:c8:42:7c:8f:c6:4d:5e:ad:
c3:1b:34:07:bc:08:5f:cf:80:17:1b:12:f7:1a:17:9a:0a:22:
38:84:b8:ec:3f:b6:87:bd:13:a3:3a:2b:13:e7:b8:3f:db:30:
6f:7a:5e:dc:76:8f:5d:86:ac:c1:9d:06:44:a3:6b:c1:09:27:
cd:a5:2d:8d:9c:88:46:8c:11:f1:ae:3d:15:26:ae:e9:d6:c8:
65:da:69:f3:57:03:35:53:d3:0c:6d:47:8b:a1:b1:9d:2c:3f:
93:27:60:1d:bb:49:cb:dd:98:de:39:85:26:83:a7:e1:3b:e4:
36:84:fe:03:40:ea:17:8e:05:32:3e:30:a6:2a:fa:f5:2d:81:
39:59:a1:a4:c1:4b:7f:a3:5b:c7:11:c7:7d:88:cb:25:79:87:
42:e4:80:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:38:51 2025 by rpki-client