Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: xqWi6QzrNFd9pTaUTYHjOw9e292ftABOuiw0ayGjBaQ=
Subject key identifier: 12:48:4D:FD:B3:81:2C:9A:1B:ED:21:6F:B6:9F:F1:B0:EA:CF:AA:49
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 0196542556F95628E6A26B272C3CDB70049D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 17:00:55 +0000
Manifest this update: Sun 20 Apr 2025 17:00:55 +0000
Manifest next update: Mon 21 Apr 2025 17:00:55 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: Z1QeMXXZq35PDvIR8yR6DcSlHK47YovBBm9ez07bb2E=)
2: vfIxBAsj822N76w697miZZQZT-M.roa (hash: Q7ba86E3b6I2IxLmX1JkWhxhrGYtcU7zADafi/RdHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:56:f9:56:28:e6:a2:6b:27:2c:3c:db:70:04:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Apr 20 17:00:55 2025 GMT
Not After : Apr 21 17:00:55 2025 GMT
Subject: CN=12484dfdb3812c9a1bed216fb69ff1b0eacfaa49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:c8:af:47:2d:06:18:6b:44:8a:54:bd:8a:
ee:5e:ed:5f:66:3c:ce:0a:2d:84:41:b1:32:09:d3:
75:e7:a4:f8:1a:62:6b:86:e4:7c:3e:af:b1:49:11:
a8:fd:ac:a5:a3:a1:63:2b:90:72:a9:b8:a9:a7:ca:
09:b0:76:cc:a3:e5:f0:28:31:7a:1e:d7:54:f7:58:
6b:3c:2e:bb:76:71:d2:94:83:73:b0:1f:bc:18:f1:
7e:b7:b3:03:69:f4:7a:7a:36:a4:9b:f9:12:0f:d7:
a9:71:22:f6:0a:f8:5b:ec:05:0d:09:93:80:0a:f4:
34:e7:a1:0d:56:10:03:0c:54:90:2f:7e:75:e6:31:
68:85:a8:f9:cf:e4:51:dc:86:a5:81:65:03:1e:d3:
13:3c:3d:f2:1a:b9:81:f4:fb:54:10:33:af:3d:7f:
53:d0:28:69:f8:55:25:03:bd:84:9b:06:a3:bd:ba:
33:40:26:05:51:58:c8:88:d1:59:a5:67:ea:56:18:
a2:cb:2f:b7:38:e2:9a:b3:f8:3c:bb:24:c7:d5:04:
a0:2c:a2:be:df:de:82:32:55:bd:f4:f8:24:eb:46:
a3:a1:6e:11:ae:15:53:64:08:31:fe:f3:e9:12:d3:
ea:92:b5:31:b4:91:9f:ca:cc:e4:8d:f6:e0:da:b6:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:48:4D:FD:B3:81:2C:9A:1B:ED:21:6F:B6:9F:F1:B0:EA:CF:AA:49
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:48:39:f7:58:41:41:fb:0b:b3:dc:25:3e:79:95:6c:8a:e2:
18:46:40:f2:a2:54:0d:7f:1f:a6:72:12:c1:9e:c2:36:f6:4e:
54:c5:7c:a0:af:c8:a3:1c:20:25:f9:c1:50:4f:31:cd:4e:51:
0b:55:95:40:f7:8f:66:60:5c:b8:4f:b7:5c:f7:18:67:25:80:
84:b9:9a:4f:dc:a8:e9:ed:23:63:6e:ef:59:0b:fa:b4:69:09:
16:0f:d9:83:16:bd:00:7f:a2:42:df:34:e5:0d:12:03:90:62:
8c:df:1b:6b:eb:d4:2e:53:5a:29:45:45:79:d3:c3:7d:ae:95:
0f:62:8e:c1:e2:b1:cb:74:25:45:7b:2a:64:3a:f0:22:a3:4f:
11:a0:64:90:f0:2f:36:f2:b6:5d:ea:fe:00:25:b3:99:e6:fa:
4e:ba:d1:d5:07:ea:48:77:27:e6:f6:af:1c:a5:b8:ea:04:77:
a1:4e:e6:30:95:db:a3:74:cd:4a:ee:85:de:42:0d:9f:22:8e:
ec:df:d8:2b:48:9a:b9:d0:9d:4d:f4:26:9c:a5:df:ef:c1:13:
7a:89:f8:ac:f3:4a:1b:11:0d:ca:3b:04:cf:aa:ce:55:e0:f2:
90:d1:51:61:b2:e5:09:5d:1c:35:b2:3d:72:83:96:2b:76:38:
cf:a9:a5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:20:44 2025 by rpki-client