Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
File: eEOlOB3OKHe7w1GmhO_OzdYT46o.mft (raw, json)
Hash identifier: D8Pj+XkfoRImjg96WUgR5LjHHpsnMVgLRa8jP8C2g/Q=
Subject key identifier: C2:C3:37:49:35:4F:CD:AB:CB:72:88:52:CE:4B:34:D9:22:DD:A7:C8
Authority key identifier: 78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
Certificate issuer: /CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Certificate serial: 0196802232125BAAF6913598D6C8F8EA48D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
Manifest number: 1084
Signing time: Tue 29 Apr 2025 06:00:46 +0000
Manifest this update: Tue 29 Apr 2025 06:00:46 +0000
Manifest next update: Wed 30 Apr 2025 06:00:46 +0000
Files and hashes: 1: bb6nncvAhni078ZU5RtarugpVvQ.roa (hash: 6TYoEFu0AnfEraFXjdNI1tT+tX9iNJhtz1VPH2GMI28=)
2: eEOlOB3OKHe7w1GmhO_OzdYT46o.crl (hash: hZEicamn7Kxdikd3axKxGrpHJ5ViwK+3AyL9QHXoAes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:32:12:5b:aa:f6:91:35:98:d6:c8:f8:ea:48:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Validity
Not Before: Apr 29 06:00:46 2025 GMT
Not After : Apr 30 06:00:46 2025 GMT
Subject: CN=c2c33749354fcdabcb728852ce4b34d922dda7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:5c:13:97:13:81:3f:41:a0:07:5b:76:d1:
06:0a:45:97:0d:c4:25:1a:80:6e:88:89:81:39:9b:
16:62:47:39:29:1a:ff:b2:39:80:f2:79:1b:da:a8:
96:f7:a5:ab:9f:51:74:72:cb:e8:87:3f:c5:b7:8a:
64:8c:3e:a8:61:37:14:b1:15:f0:a1:09:5f:30:13:
47:fb:0a:a8:04:3b:67:74:08:07:38:7f:62:84:b3:
9b:ac:97:d4:7d:f9:50:62:c0:58:4e:c8:fe:cc:ed:
ce:e3:92:d6:ee:3e:cd:87:53:2d:51:b3:7c:6a:23:
40:bd:a8:7a:2f:43:b6:be:25:ed:e0:02:05:50:a3:
40:a9:8f:db:46:a4:5c:3f:dd:97:9d:c2:eb:3d:5a:
1b:9b:57:bc:b6:25:e2:5b:ec:09:70:32:51:01:01:
f6:55:81:7a:71:54:06:75:a7:db:4d:93:47:63:ce:
26:92:31:64:ab:1e:d6:8f:52:b9:0a:62:b9:48:78:
cf:84:00:02:81:b4:3b:68:a8:8a:26:7c:71:9e:07:
fa:15:7e:f5:f5:7e:bb:c2:d1:62:4b:ac:ac:1a:c9:
4e:93:28:3a:3a:d7:df:74:d1:5a:b6:64:d2:e5:ae:
a6:07:8a:11:80:e4:ca:c0:96:2a:15:04:e5:3b:57:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C3:37:49:35:4F:CD:AB:CB:72:88:52:CE:4B:34:D9:22:DD:A7:C8
X509v3 Authority Key Identifier:
keyid:78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e0:8d:08:53:0e:3c:97:6a:80:9d:80:5f:ce:cc:21:ce:84:
48:6d:d9:46:bc:80:18:37:8b:18:2f:a2:d5:4d:7f:c6:6b:e0:
ad:dd:b5:94:01:9b:72:f3:26:de:f8:71:a9:5f:53:d6:04:11:
bb:cd:54:7c:a2:41:2d:f2:3b:57:3c:e3:68:03:84:b5:01:81:
4d:ab:9c:2d:02:86:d8:80:81:ef:1c:7b:5c:ca:fa:fa:a7:17:
87:24:cf:c0:1b:14:ca:9e:c0:20:9b:28:4f:c0:2b:1a:6c:10:
9c:61:86:72:d2:8d:23:d7:2c:56:65:c3:13:a0:3b:12:38:e5:
88:05:86:0d:49:bf:ae:2a:08:d8:86:40:2f:09:c7:4b:c6:a5:
84:d3:3b:35:a6:d8:77:3a:77:a4:dc:b1:06:71:e0:bd:6a:64:
ef:59:6c:31:8b:76:3f:8b:76:c0:b3:85:ef:02:75:96:f4:7f:
f8:15:da:7a:f9:d3:7f:8f:fe:3e:ba:99:69:ea:d9:88:5b:db:
e9:09:5f:01:a5:59:da:3a:80:95:37:34:e7:87:77:bd:d4:18:
55:05:f8:ab:a9:a6:d7:3e:0c:af:0d:d1:02:95:8f:d8:72:02:
f2:a0:c3:ac:1f:28:45:3e:b9:81:62:de:2a:da:b7:94:6b:27:
3a:ea:ff:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:11:33 2025 by rpki-client