Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
File: eF70vSl2vykqtzMEkH9RDNAMyKI.mft (raw, json)
Hash identifier: jskcYS/MbEjVHccaymJi0F4S3f4GyPmPidjXwDHN8TQ=
Subject key identifier: 24:AF:5B:12:DC:AB:3A:10:12:50:EC:0C:E1:B8:D9:EB:D7:49:3C:E1
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 0196526DA0A459D07803A760D7599675E41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
Manifest number: 0BE5
Signing time: Sun 20 Apr 2025 09:00:38 +0000
Manifest this update: Sun 20 Apr 2025 09:00:38 +0000
Manifest next update: Mon 21 Apr 2025 09:00:38 +0000
Files and hashes: 1: ENQ20xMkXGryE3-R9yWMozdkmQw.roa (hash: KvgZxgzrzbwhIVZaQOAAyDaKtwhWmv2kX8Vy8zgIZhY=)
2: UZ6oBAYvDqEIadhrw2DO49OXd4M.roa (hash: hNLRe7VoLal2kN+aDGwW7RFMXgmWRT2E6T33XzWJ1Fg=)
3: eF70vSl2vykqtzMEkH9RDNAMyKI.crl (hash: 3BWM/nlOZoW5mNEWL3qQYXMAZIXfb2TBWBDIEjQsxi4=)
4: ij_jY1B8G7JPOxZEgHI2au9jigs.roa (hash: 9ggbS2YlHgtm+sTyMI/V9GVMhp50lC25Zf0jsvILQrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:a0:a4:59:d0:78:03:a7:60:d7:59:96:75:e4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Apr 20 09:00:38 2025 GMT
Not After : Apr 21 09:00:38 2025 GMT
Subject: CN=24af5b12dcab3a101250ec0ce1b8d9ebd7493ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:25:c2:61:78:82:1e:3f:49:08:80:ae:06:
92:8d:59:bf:04:70:d5:d3:b1:77:6f:1f:c2:c4:e0:
c1:ae:1a:b3:7c:9d:26:0b:8f:cc:38:ca:17:71:7b:
7a:04:e7:b3:63:df:55:b7:36:2f:18:77:f5:87:68:
e3:ef:04:57:b4:81:42:9e:b1:03:a3:00:76:f2:43:
d5:48:26:d8:bd:af:fb:af:33:bf:4c:a3:73:b0:0a:
44:98:f8:7f:12:4a:d8:25:4c:0d:e2:3e:dd:da:5e:
94:58:f9:01:a4:99:b8:53:d0:47:f0:31:3d:56:c0:
2c:14:ce:aa:cd:e8:1d:85:d9:83:9a:60:d1:64:d6:
e9:6d:97:55:07:d9:56:33:43:14:59:eb:50:e0:4e:
8d:a1:b5:71:46:93:06:0b:05:4b:17:3c:3d:2d:dc:
c6:7a:a2:ea:00:20:fd:70:e7:1d:18:53:07:78:82:
8d:f7:ef:98:f9:e6:5d:31:1e:8b:d0:39:1f:35:28:
f8:f8:b2:20:ee:51:7e:1d:d8:de:aa:91:9d:ea:48:
5e:bf:92:62:47:3a:9c:13:c0:af:13:48:29:e6:08:
12:66:91:82:b5:7b:dc:ec:3f:43:61:b2:be:00:24:
52:38:40:c1:46:dc:ad:b1:b1:4f:13:da:2e:31:d9:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AF:5B:12:DC:AB:3A:10:12:50:EC:0C:E1:B8:D9:EB:D7:49:3C:E1
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:24:28:89:c4:ff:2d:64:b7:c4:03:c3:42:dd:99:d0:07:87:
0e:37:c5:7f:56:8f:b2:55:2b:4d:2b:17:1d:67:e3:33:96:b6:
7a:3c:76:d2:75:ba:b1:d9:73:25:1b:6e:b6:9e:4c:bc:e4:55:
f9:9e:26:6a:1b:1c:c1:3d:88:c1:e2:e0:2a:72:74:68:00:12:
8e:eb:7a:00:92:f1:44:94:ab:9d:68:0b:74:c8:1a:5c:d1:d2:
a4:52:0d:f5:6d:b6:ac:d6:76:01:29:7a:17:fb:a6:15:b8:da:
c6:06:b8:ef:87:06:04:c7:b2:f2:db:95:0c:68:cc:9b:1c:74:
1b:0a:ae:b2:96:91:19:e2:6b:82:10:77:71:bb:70:d8:e6:42:
7d:97:9b:f7:1e:0d:93:04:03:9b:40:ad:53:71:67:40:be:9c:
49:8e:c7:c2:fe:16:2b:34:4e:4f:28:fc:2f:c4:43:57:19:73:
7d:5f:62:6c:72:62:e1:f6:69:f9:51:76:61:87:18:d5:b3:c4:
23:53:a4:14:6f:96:41:8f:28:ce:59:9b:e2:26:48:54:25:1d:
6a:91:68:6d:48:65:59:17:88:3f:82:22:17:1e:96:ec:d3:be:
fc:20:9f:18:5a:66:a2:df:20:0d:1c:eb:0d:f5:1a:a9:55:df:
88:bb:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:08 2025 by rpki-client