Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: k3WP4JAmwlkEG995PzGmCHZmbhOsg/ABwGdkEfJQVAE=
Subject key identifier: FE:0A:AA:27:FE:8C:F0:73:A1:3A:91:FE:DF:2C:E3:DE:77:2A:25:7D
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 01965048693A285A762FD0705205FD921B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0AD7
Signing time: Sat 19 Apr 2025 23:00:44 +0000
Manifest this update: Sat 19 Apr 2025 23:00:44 +0000
Manifest next update: Sun 20 Apr 2025 23:00:44 +0000
Files and hashes: 1: DBzbCVVWKBBC28Y3-45UdBhQsro.roa (hash: vieVkdTJtG2uejbz3Rj9wI1wTAldkSJkHwon8UEhcVM=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: LNhsM9mkgrXVj4IXsQ44i2EoqgqtDXxeQfSUf2zI+Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:69:3a:28:5a:76:2f:d0:70:52:05:fd:92:1b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Apr 19 23:00:44 2025 GMT
Not After : Apr 20 23:00:44 2025 GMT
Subject: CN=fe0aaa27fe8cf073a13a91fedf2ce3de772a257d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:c3:15:17:6c:09:ab:9a:c9:f9:9c:36:a9:
45:89:18:50:86:80:7b:45:70:6d:6a:76:d6:56:90:
5c:f5:ce:bc:8d:a8:e9:86:b2:e8:36:eb:ef:cb:f6:
04:3b:9e:63:49:47:e5:34:96:b1:0a:30:52:2c:16:
cb:02:c2:7e:f4:f7:15:53:63:4c:d2:56:a5:79:61:
b1:01:99:e3:27:4e:ab:22:4a:fa:7d:c1:c5:7b:3d:
5f:b1:e6:06:b1:c0:da:0b:f9:69:07:d3:8f:16:9a:
8e:09:63:23:86:b6:48:a0:0c:87:32:a0:8e:2a:cc:
cb:dd:b5:77:49:69:b4:f0:70:71:b6:c9:7a:72:41:
8c:7f:0d:d0:76:8a:7b:1a:bb:7e:90:7f:20:96:71:
36:49:86:f3:f2:3c:fa:d6:05:18:7c:d0:59:64:de:
ff:77:76:c4:04:19:c4:b4:0b:9e:bc:af:0f:19:97:
12:98:03:6a:95:a9:b0:ed:84:c7:a7:45:18:03:3a:
e5:d7:93:5d:72:79:8f:04:f1:cf:6b:7d:d3:5c:3a:
bf:54:de:0d:76:df:44:87:46:63:22:d0:b8:a6:af:
d0:4f:d9:0e:fd:f6:82:d7:e2:a3:bf:4e:03:7c:c1:
45:43:24:85:72:e4:1a:29:8e:42:89:25:97:35:7b:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0A:AA:27:FE:8C:F0:73:A1:3A:91:FE:DF:2C:E3:DE:77:2A:25:7D
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:de:c6:9d:b4:0f:a2:df:e2:5d:5c:3f:1d:11:e1:67:f3:67:
cb:c1:c6:2d:1a:fb:78:42:95:56:4c:78:ce:1e:81:8c:14:98:
b5:60:f9:07:a5:0a:c3:fb:7e:3a:a5:13:12:d8:f8:18:c5:d4:
c0:6e:45:48:c0:b0:d8:91:8f:fc:bb:7f:c8:77:6c:19:c0:c0:
d8:ab:2a:b7:d4:4f:60:cc:25:6c:16:5c:9d:18:3f:c3:cb:01:
a8:4a:0c:6d:88:29:9d:e5:ac:59:70:24:02:8f:83:c8:c3:51:
e1:95:e4:21:33:46:53:e3:ee:80:a0:7c:c5:65:ca:9a:8f:eb:
bb:17:77:f7:01:eb:5f:53:42:5f:82:20:93:4c:58:dc:36:12:
75:61:65:b0:2d:24:a8:a3:69:06:69:2d:b0:6a:3e:c1:7c:20:
1b:ed:c7:d7:43:3b:93:f4:08:a9:95:21:70:57:78:95:3c:e8:
c2:07:ae:9f:61:44:29:4c:c7:cb:4a:de:28:be:c2:02:cb:f8:
e7:55:13:47:2f:78:61:ec:e5:7a:32:3c:fa:8b:d7:c0:4c:2c:
49:e8:07:2b:4f:69:2a:72:03:d3:f7:15:66:fc:75:d8:35:50:
5d:b7:71:23:28:dc:72:c1:55:f3:25:e3:a5:65:5f:bf:e2:a4:
d3:fa:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:34:22 2025 by rpki-client