Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: mG/6ZaNWdhgix3TvR9FNHqjB0LiG+bU0rPKUrcYlkf0=
Subject key identifier: BB:3C:24:5D:83:56:44:39:28:8F:76:1A:02:06:32:16:6B:85:F4:D4
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 019640307F782EBDA172C16DE947B5CDF1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 1059
Signing time: Wed 16 Apr 2025 20:00:42 +0000
Manifest this update: Wed 16 Apr 2025 20:00:42 +0000
Manifest next update: Thu 17 Apr 2025 20:00:42 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: jwsRs+auiJHix0Y7NNycoH4c54+CLLhjKz0/aF54J6I=)
2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:7f:78:2e:bd:a1:72:c1:6d:e9:47:b5:cd:f1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Apr 16 20:00:42 2025 GMT
Not After : Apr 17 20:00:42 2025 GMT
Subject: CN=bb3c245d83564439288f761a020632166b85f4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:41:6d:d8:7a:3f:29:bd:71:53:f5:06:ac:
10:f2:79:f4:45:36:b1:32:91:81:98:fe:fd:3c:38:
ef:f8:d7:d7:31:11:c9:8e:f3:dc:d5:0c:bf:bb:89:
04:28:db:1d:cb:13:17:a4:94:f1:77:dd:00:ab:e9:
d0:a6:a0:e8:3a:12:68:f1:ae:f4:d3:f2:54:9d:d5:
b1:2b:80:8d:5d:ef:56:43:a1:a7:2a:74:e7:b0:b7:
6f:8e:ef:3a:2d:d8:b4:46:8b:93:08:bc:ca:f4:dd:
5d:f0:7c:28:10:8d:dd:c6:36:96:cb:5b:26:03:a1:
d3:aa:f9:77:91:05:f4:7b:08:ec:97:f9:16:5b:98:
14:be:f9:c5:68:d7:d8:47:5d:5a:d8:7e:eb:c2:8d:
c5:af:d0:88:17:e1:9c:95:f8:60:c2:fd:9d:d7:f5:
58:00:ae:37:4e:dd:31:7b:a7:cc:e4:3d:87:9d:7e:
de:7c:82:aa:c4:24:20:b5:6d:c2:be:5b:86:dd:75:
dd:d9:1a:c1:61:74:08:02:cd:3d:7b:5e:71:5a:e6:
5d:9c:3e:5f:f5:55:d3:53:1d:39:54:c5:a9:b3:e5:
5d:71:0a:47:11:81:ff:bf:ca:f9:23:f0:e4:8b:2f:
e9:92:8a:c5:dc:4c:12:a5:1b:93:d6:9f:df:1c:90:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3C:24:5D:83:56:44:39:28:8F:76:1A:02:06:32:16:6B:85:F4:D4
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c6:c9:70:ac:7c:59:fd:4a:b4:4c:25:78:ef:f2:40:60:69:
7d:86:0d:67:b9:82:8f:0c:2d:46:28:c1:e0:12:29:21:90:d8:
fb:fe:6e:ed:8b:98:f6:ac:d6:a8:95:63:cb:db:1b:0b:93:a7:
9e:3c:6b:e1:82:45:c5:41:91:ab:c3:29:92:18:bc:ac:95:f4:
ad:d2:de:06:9a:2c:ab:1e:ba:ff:57:17:e3:af:9d:11:d1:db:
ab:bd:86:96:d7:10:6b:34:b4:59:69:09:f6:72:3b:49:7a:bd:
4a:4d:88:74:a6:0c:a0:1d:d1:ce:91:ef:cf:14:a8:6c:da:e2:
0f:42:ff:06:6b:9f:82:05:b5:17:a5:e3:f5:37:96:1a:be:51:
93:71:d3:d4:6b:a3:66:92:41:57:06:38:bc:e6:ec:66:53:72:
f5:ef:76:3a:1d:84:15:0e:ad:7a:e4:35:3b:c8:54:1f:36:4f:
86:fd:ee:b5:2a:c9:f8:68:f8:c3:74:50:2a:ae:12:8a:96:db:
fb:14:4d:ce:19:98:19:f5:7e:cd:09:f3:d8:45:7a:76:b5:60:
a3:9c:b9:ef:59:bb:50:22:cd:9e:d8:ca:06:2d:da:3e:c1:84:
46:27:59:83:13:76:98:e5:fe:2e:58:08:2c:90:3b:5d:9c:d4:
97:b8:d6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:57:28 2025 by rpki-client