Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
File: eknuryQ0LDssYyyeSEYxON4twAs.mft (raw, json)
Hash identifier: D4jIyNtYWwMKoXXgSBdsVzC6lRbnPfEvXvPFzSAawik=
Subject key identifier: CB:AE:65:42:C2:72:B9:89:8C:A7:DF:D4:9E:79:39:C2:D8:D8:2C:53
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial: 01964C6BF05C894A4CF6F6BEB034200DD7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 05:01:04 +0000
Manifest this update: Sat 19 Apr 2025 05:01:04 +0000
Manifest next update: Sun 20 Apr 2025 05:01:04 +0000
Files and hashes: 1: eknuryQ0LDssYyyeSEYxON4twAs.crl (hash: tINT4gWCx5a/lHS1x1a/PVUPLdH2JqSVIIWY2cscqc0=)
2: kO8QB2zrXRxl2N43GaWd_Repq5M.roa (hash: IUmtRjKzI10q9uvO/9zEmrcKLU0qcJf4Uhid1F3g4yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:f0:5c:89:4a:4c:f6:f6:be:b0:34:20:0d:d7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Validity
Not Before: Apr 19 05:01:04 2025 GMT
Not After : Apr 20 05:01:04 2025 GMT
Subject: CN=cbae6542c272b9898ca7dfd49e7939c2d8d82c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e4:a7:f5:77:07:92:86:da:7e:e1:89:5f:dc:
52:24:f9:5f:38:d4:98:84:2d:e2:32:b2:01:61:20:
34:65:71:b5:c1:f4:b4:1f:5f:4e:76:86:f3:76:de:
35:81:84:da:7b:eb:f9:52:bf:43:da:93:04:de:b8:
d1:24:da:51:bd:c1:8b:38:df:46:23:23:0b:a9:78:
16:2c:ed:26:cb:ce:f7:14:d2:c7:30:47:4d:f8:25:
3c:b8:e0:0d:d1:b3:c3:39:55:01:7c:57:2a:70:68:
1b:e3:6e:60:d7:12:9c:8b:59:80:74:61:78:c1:01:
7f:5c:7e:ba:c3:f3:6a:1d:0e:8f:8c:93:10:79:15:
6f:d2:59:1a:0e:80:6c:2a:1e:43:4c:7d:e9:37:db:
b8:ff:d0:ab:00:31:50:0a:11:52:44:4e:85:94:15:
38:1f:cb:29:dd:e6:86:fa:18:c1:3d:2f:8e:f4:16:
ff:38:70:4b:d8:76:15:68:4b:25:3e:dd:cf:7a:32:
05:35:e1:a6:58:27:b4:1a:87:83:1d:e2:8c:59:f3:
c5:7d:4f:15:5a:1a:da:c5:14:bb:b3:8c:f9:d3:3a:
64:d1:30:3f:c4:31:4b:66:f4:14:a6:66:81:bd:cc:
16:d8:32:b7:cf:60:0f:d5:22:8a:ea:96:e5:e6:c2:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AE:65:42:C2:72:B9:89:8C:A7:DF:D4:9E:79:39:C2:D8:D8:2C:53
X509v3 Authority Key Identifier:
keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0d:89:36:cd:06:bf:8a:88:e4:d4:cf:10:2b:e1:c8:61:7b:
f0:7b:1d:c6:a2:67:a6:96:b2:65:dd:69:09:eb:d5:51:68:bc:
c4:66:ec:e2:73:34:c7:e3:fc:91:de:8f:e8:65:da:a7:33:0b:
cf:6f:86:5b:f6:6d:82:73:c3:83:d8:8d:1b:d4:68:6b:9e:f3:
a3:b5:47:4b:f7:8c:91:28:6d:6f:5d:59:38:2f:13:e2:f3:e6:
fe:f4:d7:9c:26:67:9f:db:7e:3d:9b:ee:ff:cb:51:0c:67:11:
b8:c8:8a:60:f9:3a:7f:b8:b5:b2:56:25:d0:1f:40:d5:c7:18:
6d:8f:2c:b7:b3:71:f4:08:93:2b:b8:f1:33:db:79:41:93:7d:
8b:a3:07:73:21:71:02:0f:9d:40:fe:03:12:c4:57:0f:7b:18:
a1:91:e0:52:56:94:95:86:87:f0:8b:68:84:f4:6b:fb:14:9d:
10:dc:fb:ca:2d:fe:5e:3b:2d:cc:41:72:c8:2f:00:53:18:f3:
59:c6:5b:d1:ee:dc:49:7d:30:55:bb:7a:f5:66:95:7f:91:c8:
65:70:7d:98:23:7a:d2:5b:03:5a:17:ae:72:f8:34:51:96:7c:
2f:91:bf:ec:08:7c:d0:d4:39:d8:81:65:cb:7d:5f:33:01:a7:
b8:88:c9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:12 2025 by rpki-client