Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File: eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier: o1XKQxkDtEPVz/+X1kzRDB6L80vLu2fzXnOj7yXyshw=
Subject key identifier: 5F:2E:F9:E9:0C:11:52:A9:B7:B8:D5:EE:4D:B1:78:CA:46:8D:65:D0
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial: 01968B81776866C6DDE2C45227689D503C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number: 1044
Signing time: Thu 01 May 2025 11:00:39 +0000
Manifest this update: Thu 01 May 2025 11:00:39 +0000
Manifest next update: Fri 02 May 2025 11:00:39 +0000
Files and hashes: 1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: 8MKykgywSgXqdu+cFKUWwmGWkWoy4kUT7xmyKjKzyuM=)
2: rCglPn4knwgWeE7oLxm6sX7WFlI.roa (hash: wKFZrWQvHUIDP0fnVkeuzqCpYiJl4+aOfjYBOGOYUoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:81:77:68:66:c6:dd:e2:c4:52:27:68:9d:50:3c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Validity
Not Before: May 1 11:00:39 2025 GMT
Not After : May 2 11:00:39 2025 GMT
Subject: CN=5f2ef9e90c1152a9b7b8d5ee4db178ca468d65d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:10:f9:2a:9d:76:12:0f:75:b1:89:52:1b:
b9:bb:82:52:6f:01:d9:c5:39:77:2e:a9:d8:76:49:
43:d2:f3:2d:aa:9e:bb:dd:8b:b4:2e:fe:aa:11:d6:
86:cd:fd:1b:23:68:0e:9b:38:de:cd:9f:af:ac:e6:
ad:a3:67:71:b9:3e:a2:ca:25:b0:17:60:ee:98:64:
d2:9f:59:dc:3d:be:73:e9:0e:f8:54:d8:8c:e1:84:
e6:3c:24:8a:24:9d:0d:71:98:a0:5d:d3:43:43:62:
f6:7d:2a:d9:9b:f1:eb:9c:07:06:24:37:7e:bc:bf:
fc:4c:65:1e:68:3b:d7:87:b3:40:63:ce:e2:82:b2:
1d:53:9e:7d:14:49:73:27:1c:15:ab:02:24:1a:e4:
52:3a:3f:50:d9:98:db:e6:71:0c:62:91:74:dd:b8:
81:4b:bb:a9:c4:da:45:51:25:1f:e1:a9:a5:7b:43:
65:5d:ff:3e:aa:d0:37:90:bc:69:06:65:6c:e7:9d:
6a:d0:43:06:94:7d:50:de:ca:58:52:69:61:51:7d:
97:8e:cd:2a:f5:90:a6:7f:d2:85:57:bb:d2:75:6a:
02:ad:cc:1a:1c:e1:df:81:5f:6d:ed:1f:d8:c8:02:
f3:52:e2:17:de:1f:b5:59:1e:07:e8:14:3b:f8:ef:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2E:F9:E9:0C:11:52:A9:B7:B8:D5:EE:4D:B1:78:CA:46:8D:65:D0
X509v3 Authority Key Identifier:
keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:ac:b7:80:4b:cb:69:2f:84:55:1d:36:de:2c:94:35:9d:f6:
95:50:b0:38:17:ea:42:8f:7f:f9:72:0f:07:a2:55:97:aa:80:
12:7a:9e:11:11:e8:4b:ac:c7:db:ba:01:94:da:7a:ae:cd:57:
26:f2:47:9f:71:c1:40:d6:69:0f:78:2d:c6:a0:1b:44:05:fb:
76:77:cc:4e:52:f3:fa:6b:72:39:55:49:a2:99:48:18:ea:8e:
d2:cc:90:ad:3e:ee:e5:dd:c9:42:da:20:69:74:e5:57:c4:f9:
58:c0:f9:5e:3d:f4:7d:85:e1:c3:ca:ce:1c:6f:bc:35:54:a4:
45:a6:67:d7:76:28:31:86:88:34:67:da:15:87:56:7c:81:b4:
48:b1:d4:a3:7d:4a:87:3d:8f:79:59:cb:b0:a1:f9:df:92:b0:
71:b4:51:2e:18:a3:34:e8:5a:dc:e4:6b:1e:42:a4:ad:13:ca:
20:cb:e2:c0:a9:d4:b8:03:9a:b6:07:c3:22:f8:64:fd:70:8f:
2a:cb:88:4f:d1:32:30:98:c1:3e:8f:be:df:55:c2:96:85:f7:
83:ee:ca:bb:06:9b:d7:7c:fc:09:96:0d:03:22:8b:c3:40:79:
3d:98:e4:43:16:b9:07:0e:e6:c1:04:f8:06:9b:34:3b:90:4c:
8c:77:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:27:40 2025 by rpki-client