Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File: elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier: cXCPbOSxocYF2n4+6ryZJb1Cpn+8VXLgV7T97QkHKPk=
Subject key identifier: BC:4F:61:1F:AF:95:50:23:52:9C:A7:99:D3:66:E7:64:50:0E:48:AC
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer: /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial: 0196127CE93ABEF765D6031B4CF82DED5C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number: 0494
Signing time: Mon 07 Apr 2025 23:01:38 +0000
Manifest this update: Mon 07 Apr 2025 23:01:38 +0000
Manifest next update: Tue 08 Apr 2025 23:01:38 +0000
Files and hashes: 1: Ei-k7RiW07sWpfPP67i23htmomc.roa (hash: NiFmAUaoToM3PE1q94mcr4KCSU+oRmSZyOhAcNpUk0I=)
2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: FBWDz4HuCUu9o1EyyFiKv2J9LXuUkI/XCYZfsLVBLFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:7c:e9:3a:be:f7:65:d6:03:1b:4c:f8:2d:ed:5c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Validity
Not Before: Apr 7 23:01:38 2025 GMT
Not After : Apr 8 23:01:38 2025 GMT
Subject: CN=bc4f611faf955023529ca799d366e764500e48ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:5d:1a:d0:ef:2d:32:eb:a8:dc:b3:5f:38:
3a:85:bc:c7:2c:5c:cf:5d:2a:e9:4f:b3:52:01:1a:
b4:7e:93:9b:ff:02:83:76:57:3a:06:ab:4f:a0:35:
ee:3a:ac:eb:61:2b:a9:33:86:aa:20:ed:5f:0a:91:
7e:4d:a1:1d:63:f4:7c:03:d0:96:0a:77:88:34:e9:
84:bc:3e:4c:28:d2:24:e8:df:ff:0f:c1:e3:85:d2:
07:32:43:1e:ff:b3:6d:cd:fa:f7:fc:68:86:5f:cd:
f6:13:c2:b7:51:47:0d:59:7f:57:1c:21:0d:ff:ec:
97:03:9a:45:0d:30:11:86:51:8d:41:9a:0a:bb:c8:
69:8d:c6:f4:40:43:76:01:e9:0b:e8:b8:10:d5:9c:
f8:62:6d:45:ec:4f:68:f4:74:34:36:08:5d:b1:ff:
93:ba:fd:56:7b:dd:44:58:38:3b:7b:1a:35:d2:ab:
6b:e9:81:db:d6:a9:b7:96:e1:55:89:c8:a5:10:b8:
97:7f:dd:43:e1:9c:24:8b:2f:44:8f:b2:ac:25:77:
52:ec:1a:2e:bb:44:29:f7:25:c1:6b:14:00:63:20:
41:00:e6:52:68:c2:37:73:e2:0e:8c:74:8f:9b:35:
0c:0e:d8:68:05:95:96:14:79:9f:ea:61:74:20:1b:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4F:61:1F:AF:95:50:23:52:9C:A7:99:D3:66:E7:64:50:0E:48:AC
X509v3 Authority Key Identifier:
keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b0:61:bb:00:25:8e:2e:73:b6:1c:73:01:4e:bd:cc:b3:46:
c2:34:9f:7f:44:a7:b8:b2:7a:a9:46:04:93:c1:fe:11:be:a8:
75:d6:a4:43:f6:5b:b7:9b:b9:aa:90:8d:d0:e9:8f:e3:02:b1:
ac:e7:ab:8a:d8:8c:22:9c:43:64:0a:d3:1e:5c:fc:a3:a9:06:
0f:4f:52:c3:a0:65:4c:b2:b9:bf:fb:9f:f7:c5:ae:fd:e9:5a:
8c:e3:69:65:c0:48:70:05:68:a3:2b:df:7f:ea:34:64:d8:06:
1a:b0:2d:99:70:99:9a:f0:16:cb:e4:e6:28:e1:57:8d:ae:d9:
1b:7f:ec:3c:89:38:14:85:d9:e3:e6:0d:fe:8c:e6:e0:df:27:
a5:b8:19:f3:a8:c0:a7:9b:7e:af:97:2c:2a:46:ce:f3:a3:02:
4f:70:83:16:c4:21:e3:13:df:c3:31:63:51:d2:1c:63:42:7c:
72:80:76:88:22:bb:9f:43:3f:6d:4b:2d:b5:c0:6b:07:c6:3c:
a7:cf:9d:7f:97:08:4b:04:ad:18:17:41:d8:cd:ff:ea:38:d9:
29:d2:92:4d:f0:19:0c:2c:81:dd:92:d2:4a:6d:77:48:a1:11:
a4:ba:0c:58:8d:b5:25:38:ba:ee:4a:81:12:92:c2:79:7a:e3:
24:b9:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:03:41 2025 by rpki-client