Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json)
Hash identifier: ONfyID9p+hHQYBImKnyyPW2sbwzvF4Zq9XuR4+z5oW0=
Subject key identifier: F4:5C:27:7C:88:21:45:3C:4D:FD:B0:ED:80:BF:8D:C0:39:EE:14:54
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 019639C05890AF25780C3B3028BADE9340AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
Manifest number: 14F2
Signing time: Tue 15 Apr 2025 14:00:28 +0000
Manifest this update: Tue 15 Apr 2025 14:00:28 +0000
Manifest next update: Wed 16 Apr 2025 14:00:28 +0000
Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: 85H0d4jQgTsW64a2Fq65qQIfjvmwAvFoT6dBFB8k2gw=)
2: QKuSiZFk1wVsULwYb8XPnEDMMuM.roa (hash: KAQooRb0Ywlt3epgyVY+X2EZbQ9cRsRyjFwggfxa9E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:c0:58:90:af:25:78:0c:3b:30:28:ba:de:93:40:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Apr 15 14:00:28 2025 GMT
Not After : Apr 16 14:00:28 2025 GMT
Subject: CN=f45c277c8821453c4dfdb0ed80bf8dc039ee1454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:23:dd:55:42:38:0d:fb:26:87:d5:db:02:
6d:86:07:d5:17:3c:06:25:be:37:07:e8:6d:dd:52:
ed:56:1e:12:da:16:77:c8:bb:2d:9c:0d:d3:05:a4:
bb:14:ca:a0:97:1e:ab:2c:5a:0d:d1:4f:12:41:f8:
76:5d:a6:01:e6:1b:bf:ec:25:ea:4f:b2:51:6f:2b:
0f:c4:88:a6:5d:b1:8f:7e:20:f9:c5:b0:99:7e:24:
6c:e3:e2:c5:c6:25:98:d6:15:7e:94:bd:48:3a:9d:
62:98:b2:ab:a6:16:1e:3b:00:ee:14:d0:cd:15:89:
a2:d9:01:e4:56:2a:fa:c9:89:35:c5:72:7c:9e:76:
fd:c5:1c:ca:25:4e:a5:36:81:94:1f:48:d8:ec:ed:
ad:32:83:00:0d:db:38:ec:61:7d:b1:bf:ba:92:1a:
6b:17:c5:b8:22:7c:55:fa:5e:cb:01:b9:f4:73:7c:
0c:1d:7e:38:87:65:bd:f8:b7:1e:d0:c8:49:8e:9f:
68:57:a4:7b:b1:42:bc:65:a1:bb:89:2a:f7:7b:20:
dc:c2:86:44:c3:48:5b:e2:66:c4:79:1a:c6:65:f9:
9c:a5:47:3b:d1:ee:5e:4a:2e:79:dd:08:9e:9c:37:
d0:3a:dc:b7:4d:94:82:f4:6a:d3:a8:f3:79:85:f6:
30:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5C:27:7C:88:21:45:3C:4D:FD:B0:ED:80:BF:8D:C0:39:EE:14:54
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ff:1a:e0:ff:17:e8:11:18:91:62:f0:9a:34:59:d3:09:a4:
0e:06:e4:e1:15:32:a9:b8:b3:ff:68:b9:5b:e9:a9:b6:43:2c:
f5:f9:49:bd:dd:39:6e:95:70:0e:54:a6:8d:08:19:75:d2:4a:
f3:74:8f:f3:69:8c:78:41:34:50:e8:1e:28:4c:ce:01:58:7f:
c1:9b:be:0f:47:56:f2:46:5c:53:24:35:13:a7:d6:ca:7c:9c:
45:bc:69:fc:67:06:a8:95:53:89:f3:33:aa:3d:c7:2a:f5:60:
a2:a4:98:44:b5:82:d2:f0:23:1c:78:32:70:8a:18:43:76:d9:
b8:a0:49:d6:ee:94:04:0a:c0:28:f2:4a:42:ee:ed:0d:88:47:
5e:0a:0e:2a:bf:a1:c7:18:b6:94:10:00:0d:2a:45:5e:32:e0:
a9:85:d8:3f:06:de:76:7e:65:87:7c:e2:7e:c2:ff:3b:e8:3b:
6c:95:d5:66:ad:3b:26:c9:bc:0d:66:2c:11:66:cb:94:d0:8e:
8b:d7:38:9c:13:fe:cf:7e:7e:ea:06:ff:e0:9b:8d:96:01:f2:
f1:01:c2:eb:98:21:1c:ad:37:ef:5a:b6:83:95:46:46:c4:3a:
e9:fb:5d:31:b5:1d:d6:34:6f:18:4e:f7:9c:19:89:d7:92:82:
85:68:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:47 2025 by rpki-client