Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: 4RGA2IV6j+J1UZXrrNu7H41X5oR8Y4FWmTvQpbdG3KI=
Subject key identifier: F4:9E:E9:F6:45:42:62:CF:89:2D:EB:A1:36:E1:4C:4E:0E:C3:66:59
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 019676434010F17D2AED91D710621F2A63EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 08:00:40 +0000
Manifest this update: Sun 27 Apr 2025 08:00:40 +0000
Manifest next update: Mon 28 Apr 2025 08:00:40 +0000
Files and hashes: 1: HCkGRctLJ1ePeWXWFjnQs-P5BH0.roa (hash: tw5rYUuFpBr4QpbNuBNtp2/1hdw23rZNSzLDyhsXnAY=)
2: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (hash: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=)
3: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: f9Fy2DD0HsWPKukxodw/gxCFisjXtwA+/Hb4CjxWNf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:40:10:f1:7d:2a:ed:91:d7:10:62:1f:2a:63:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Apr 27 08:00:40 2025 GMT
Not After : Apr 28 08:00:40 2025 GMT
Subject: CN=f49ee9f6454262cf892deba136e14c4e0ec36659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:a2:ef:3e:09:14:66:47:0d:76:9d:e5:b2:
a5:f1:2b:48:f0:59:09:3f:c5:ff:07:52:a1:6e:55:
d1:93:c8:8b:46:f5:ba:61:c6:87:83:02:d7:ad:71:
c4:90:c3:74:82:00:f0:e2:0b:6a:78:d5:51:a8:f6:
3b:f1:6d:8c:bd:7c:6b:9e:8d:69:da:1a:42:b9:ca:
2d:d2:0a:f1:65:fa:2b:3d:7e:01:ae:19:4d:b1:f8:
4f:d1:15:e2:4f:14:79:e3:4b:be:26:e1:9d:3e:9c:
b8:14:81:2f:23:c9:a2:97:55:c8:e4:d9:72:cb:70:
a5:df:f8:75:fd:6e:84:f8:6e:d6:38:65:aa:d4:b3:
84:72:3a:4a:29:37:db:23:14:87:cd:6c:9e:20:d3:
89:58:46:b1:a7:b3:3d:63:fa:12:0c:e0:32:1e:50:
8b:cd:c5:8d:43:91:0d:a4:b6:4a:69:b6:c0:6c:c2:
43:03:07:e4:2e:09:c5:1e:04:43:3d:81:85:98:b3:
94:cf:b9:11:9a:20:8d:c3:77:66:42:cc:d6:0d:44:
0d:60:85:fc:f0:2e:6c:84:2f:01:08:dd:17:b1:3e:
29:65:3d:aa:72:96:31:90:ef:f2:91:07:0f:24:ac:
59:30:63:aa:a5:2a:5a:65:d5:5c:64:bc:f3:48:07:
56:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9E:E9:F6:45:42:62:CF:89:2D:EB:A1:36:E1:4C:4E:0E:C3:66:59
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ba:e2:79:71:4f:b2:59:b8:95:a3:58:7c:9f:a6:fe:94:27:
c1:dc:bc:e7:50:84:68:15:af:2a:02:91:9d:6c:77:54:aa:44:
4b:cf:50:bd:4c:a4:dd:65:36:7a:a1:49:45:ef:7b:e8:a5:34:
18:2c:cb:fc:53:25:4b:25:50:bc:46:58:42:cc:15:b6:34:a3:
7b:f2:25:da:86:6f:b0:00:e1:65:28:61:ed:e8:1a:16:d0:02:
ea:27:f8:4f:72:11:81:c8:6a:5a:21:0e:58:76:b3:95:7f:33:
12:20:86:e1:03:c5:66:99:5e:ca:c3:85:45:5a:fb:23:ef:09:
12:47:79:9b:f7:db:92:fb:68:95:74:a2:37:83:d9:cf:8e:79:
02:48:92:48:c1:b5:a0:1a:71:3c:69:8f:f0:7e:44:19:79:22:
19:98:8f:bd:80:31:10:da:35:2d:fb:19:44:11:a3:f0:34:c0:
ed:f2:e9:95:34:52:0a:b5:ca:b6:51:2b:8f:f2:f5:2b:1e:39:
c0:05:24:b4:8c:47:26:4b:61:cf:b8:bf:86:48:b5:37:91:8c:
05:37:25:7d:2e:95:32:6c:b0:a6:c6:74:ba:5e:7b:d1:87:77:
d5:d4:0d:0d:22:8f:21:c8:b7:b0:2d:a4:af:fd:4d:ca:d8:08:
96:52:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:00 2025 by rpki-client