Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier: qcfu0+6stJAE5yOlaODJxt0FNMBTYganCKIZw1Y7JQ8=
Subject key identifier: 18:5C:56:6B:83:35:F2:D5:28:1F:DB:52:CE:74:59:22:99:F2:2D:8C
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial: 019676E825B5C5F1C9B7F1E2019AEBEBF3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number: 07EF
Signing time: Sun 27 Apr 2025 11:00:47 +0000
Manifest this update: Sun 27 Apr 2025 11:00:47 +0000
Manifest next update: Mon 28 Apr 2025 11:00:47 +0000
Files and hashes: 1: 1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa (hash: WaCyd+8XHtQ9NQJZXiDHgOg3ILGjfZThoYeSrYEPMP4=)
2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: jcMTKPGROa1uFN6lK9DtsgsS5mjGFL74ka6AGKMfTzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:25:b5:c5:f1:c9:b7:f1:e2:01:9a:eb:eb:f3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Validity
Not Before: Apr 27 11:00:47 2025 GMT
Not After : Apr 28 11:00:47 2025 GMT
Subject: CN=185c566b8335f2d5281fdb52ce74592299f22d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ee:bb:a2:02:30:63:3f:db:3a:d3:99:db:d2:
30:bc:b1:7f:67:33:55:d4:d1:4a:60:9e:16:22:2e:
7e:59:04:64:b3:22:61:a2:2e:3c:50:f8:6f:23:c7:
04:8e:51:1e:a4:f2:d5:2d:3e:2b:c1:6b:73:8b:ca:
29:2f:a8:c6:50:f9:e1:03:15:9c:7c:81:8b:9d:49:
5f:6a:38:18:9e:8f:03:57:33:ba:ef:26:cd:40:03:
e0:a0:42:e1:1a:c9:13:91:a1:0a:6d:6b:7d:2e:08:
17:4d:f2:73:38:a2:8b:9a:75:3a:bb:4e:29:f6:58:
aa:80:e8:c8:b0:f6:89:57:ae:bb:fe:51:61:de:c4:
f8:2c:b4:d6:94:de:5a:b7:d7:d6:ec:e5:75:d7:b6:
40:2e:8b:0b:8f:91:87:cd:40:6b:dc:08:36:80:a5:
b7:db:7b:14:9e:fc:bd:a3:b1:05:3e:09:9a:88:63:
9d:19:d4:20:7d:85:d9:39:d2:8b:19:66:08:17:5b:
b1:c7:75:51:78:b4:39:70:bc:3d:2f:ae:ed:8f:1f:
9c:34:14:ca:19:4f:1e:ad:85:7a:6d:be:e7:4f:fc:
44:a9:79:bc:21:a2:04:80:6c:43:ef:f6:8a:00:77:
03:52:d4:0c:1e:25:2b:57:d9:92:c1:9a:17:26:bb:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5C:56:6B:83:35:F2:D5:28:1F:DB:52:CE:74:59:22:99:F2:2D:8C
X509v3 Authority Key Identifier:
keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:96:45:4a:c8:21:80:d4:12:d8:f0:af:bb:58:b7:f0:2e:e6:
27:06:32:62:d2:08:1c:55:2c:ee:8a:c8:29:6a:66:52:c6:15:
e5:4c:de:a9:1f:0c:32:69:59:29:b5:26:06:37:d1:fe:85:79:
71:cb:e0:65:43:a4:be:92:d6:81:9a:d8:a6:20:5f:eb:68:c9:
4f:5f:f1:5a:6e:eb:11:43:2a:c7:f2:a6:cb:ec:90:87:5d:86:
16:ab:e6:f8:a8:bd:0e:d3:3f:ee:65:0d:1c:7b:e8:03:5b:d9:
63:b9:01:80:af:76:65:8c:f2:24:a7:eb:d5:17:fa:d6:69:4a:
0d:aa:94:b6:e9:63:2c:72:51:d8:50:44:21:2e:f8:43:16:a4:
20:de:32:4c:d1:f4:41:99:2e:fc:2d:52:90:09:bb:79:b7:99:
46:cc:d6:92:90:3f:bc:ce:df:ab:bc:50:65:73:28:be:43:35:
97:56:f7:15:af:0b:83:ec:e6:d9:94:25:4f:f3:2a:cd:26:1f:
44:0c:68:db:74:e0:5a:8e:12:02:d0:bc:3a:2b:e3:7c:ad:71:
7f:ab:50:01:d4:df:81:c8:15:c0:05:8e:4e:36:93:1f:db:ec:
a7:a8:33:cc:f1:3f:d2:44:99:28:33:9a:ae:69:e9:4b:60:7c:
a3:00:52:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:38 2025 by rpki-client