Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: sxLoJ8t+glVSaGInpg/CbBS9TGoycuvgv2eWK/A/mTk=
Subject key identifier: C3:B8:98:EA:85:17:63:35:D0:3B:1C:04:37:A4:7E:AE:29:1D:9B:C5
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 019658023732C01A2B032779F8806C0925BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 0EC1
Signing time: Mon 21 Apr 2025 11:01:02 +0000
Manifest this update: Mon 21 Apr 2025 11:01:02 +0000
Manifest next update: Tue 22 Apr 2025 11:01:02 +0000
Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=)
2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=)
3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: U987yZrE13qlh3hm0UBOZXllvtDoGHkicWwYP6FsP4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:02:37:32:c0:1a:2b:03:27:79:f8:80:6c:09:25:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Apr 21 11:01:02 2025 GMT
Not After : Apr 22 11:01:02 2025 GMT
Subject: CN=c3b898ea85176335d03b1c0437a47eae291d9bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2b:ec:a3:8e:04:ac:ac:a0:0c:99:11:d2:50:
86:54:7f:8b:3a:e1:f9:84:3f:71:56:0d:68:8e:e7:
9c:a7:05:2a:f6:3c:e0:6d:e6:47:1a:29:3a:02:5f:
6b:0b:c8:83:02:c1:4a:65:4b:f0:a1:96:58:e7:59:
86:cb:f0:6a:27:7f:7f:06:30:d1:60:e5:0d:7b:3d:
0e:0e:ec:ae:22:b5:24:f3:fe:c6:2e:25:01:3d:d5:
15:d2:47:12:46:bd:6f:ec:a0:a9:1f:b6:fb:6b:fd:
be:f9:b0:71:49:46:21:70:d4:a4:c9:a1:bd:7e:4c:
45:ec:f6:58:bd:75:c0:3e:da:69:ee:a4:00:d3:77:
d5:88:53:f8:73:ce:81:98:4a:da:4f:76:22:9e:e9:
d4:df:7e:a9:f2:90:c8:5a:88:c9:16:06:73:6b:27:
42:45:fc:58:f1:43:8d:5c:78:37:82:86:76:d1:c4:
52:4b:ef:f7:a3:55:1e:46:6c:d9:7d:c5:ab:04:94:
e3:db:b3:ca:f4:bd:3f:0b:86:9e:ad:3e:da:00:20:
32:9f:7d:91:49:85:a1:ff:bb:97:35:3d:5e:64:56:
cd:a3:e1:50:34:8b:b0:1f:36:f2:70:4b:51:29:70:
d5:16:47:c0:f0:f3:86:61:db:23:80:37:84:e2:97:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B8:98:EA:85:17:63:35:D0:3B:1C:04:37:A4:7E:AE:29:1D:9B:C5
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5b:c8:35:01:d9:83:dc:2d:7b:89:91:5c:d7:42:b0:7a:d4:
3a:d9:6a:85:5d:29:6f:fd:85:c2:e8:d8:b8:31:55:2e:81:8b:
67:f7:e2:34:85:85:e4:e0:e1:0e:11:41:13:7c:fe:6d:e9:63:
31:ee:c1:19:9c:1c:d5:2d:82:4c:4e:c5:e5:13:0e:c0:43:a7:
8a:3e:0e:9c:6b:1c:71:c8:36:4c:ef:c0:f1:33:fe:d5:03:87:
b3:f7:fe:65:ca:14:5a:7b:2b:8b:13:79:8b:9e:56:25:3f:9c:
07:1a:d9:ab:1d:59:c1:cb:78:e2:19:2c:f0:8c:61:3f:57:39:
10:7a:3a:2f:00:52:ba:c7:69:97:4d:17:eb:5a:f2:87:0a:08:
19:7e:ae:f7:8f:5a:23:c1:31:94:8b:48:b6:7b:f7:4e:46:16:
09:39:0f:4b:c9:27:fa:84:7e:5a:75:4b:a4:fa:c3:64:e1:e7:
11:3f:f7:21:9a:75:1f:ba:0d:28:0d:0e:4b:ea:b6:1a:02:98:
46:8f:58:5f:d3:db:36:5d:89:e0:e9:27:b1:84:d0:34:34:02:
32:7f:b5:bd:27:56:30:13:b6:0f:43:ab:95:27:09:8d:2f:ca:
96:04:ef:17:bd:b5:15:86:96:06:23:8a:e7:fd:cd:fd:92:5c:
84:da:40:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:39 2025 by rpki-client