Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: yf6WX7mYOBrX2EnM4L5SOIGZNgrbbVwMswXb1Np51ws=
Subject key identifier: 4D:57:6B:2B:AF:CF:64:3B:A5:0B:7D:76:B6:9B:9E:4F:3A:56:56:39
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 01967AC502943AC79235CF1A516585987C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 0569
Signing time: Mon 28 Apr 2025 05:00:53 +0000
Manifest this update: Mon 28 Apr 2025 05:00:53 +0000
Manifest next update: Tue 29 Apr 2025 05:00:53 +0000
Files and hashes: 1: TGEoQxRmlQ38EiYNIatYTvTH93M.roa (hash: QWHoHKjGgLkuoWxfCEDNTogSFC/uyVtmYm1jupJjvhQ=)
2: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: bHxG8KMzSMPouHldzldcSq/glNAxye98XqkN+qYHOMw=)
3: iHMXX39pKFTmpCSIkM3KYruFykM.roa (hash: KD8CGVAAX5SZe35sI/CYcgZ0uCRVoDZr5Q7avFwAmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:02:94:3a:c7:92:35:cf:1a:51:65:85:98:7c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Apr 28 05:00:53 2025 GMT
Not After : Apr 29 05:00:53 2025 GMT
Subject: CN=4d576b2bafcf643ba50b7d76b69b9e4f3a565639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:22:3e:4d:8e:ca:8c:b5:a6:42:8a:4c:f3:
8a:85:10:c2:b3:89:d6:cf:35:62:9d:35:7e:ae:79:
3c:67:24:e4:ea:11:bd:fa:4e:c7:54:a5:1c:fa:32:
66:46:7a:ab:8b:da:e7:56:05:8f:88:92:cd:c8:09:
37:e3:d5:e9:74:55:17:4e:2a:15:c8:67:19:55:e6:
dc:5b:51:a1:1b:45:25:96:07:5a:9d:33:6f:3f:1f:
a6:57:77:d3:b4:69:b6:0c:c8:17:0a:c3:c3:d8:60:
fb:b3:65:c9:27:a2:e3:ac:6b:18:46:c9:77:2a:44:
e3:e7:d2:2f:f2:04:f7:da:b1:9c:92:a0:73:ce:d2:
a7:31:34:8b:dd:ee:18:25:79:99:0b:6c:64:ef:b6:
5b:9b:a0:e2:fe:35:55:e2:f1:94:c8:92:b3:ff:53:
06:60:57:7c:64:a1:16:d5:ed:7c:2b:cf:8c:6a:2d:
fe:97:7e:f5:f6:ce:e2:7d:4b:35:49:4a:43:93:88:
72:18:a6:8e:95:69:2c:26:ac:ce:82:0f:d9:e0:d1:
5b:27:ee:f8:86:4c:fa:f5:a7:ec:9c:91:f6:f2:21:
db:b1:a1:7a:24:b1:50:15:68:bf:13:1f:34:de:0e:
a0:1b:8b:d6:fe:52:b8:67:49:33:68:d4:5d:1d:a6:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:57:6B:2B:AF:CF:64:3B:A5:0B:7D:76:B6:9B:9E:4F:3A:56:56:39
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:96:e1:89:b1:e2:9e:ca:fa:7d:78:f4:48:46:aa:2f:07:12:
33:1e:97:4b:da:6d:06:64:2b:a7:0f:75:12:e4:80:55:fc:31:
cb:a9:c6:43:08:56:d1:c6:fd:86:e7:d3:23:6b:ca:43:8a:25:
d1:43:ac:09:06:92:4e:25:5a:25:db:86:73:72:b4:74:a8:60:
73:44:41:b7:ed:f8:bc:02:66:32:07:f5:25:e2:98:01:1b:8d:
7b:d8:79:f2:c5:49:81:4f:dd:56:50:6a:ff:71:14:a6:b9:39:
58:8c:f8:fb:2d:ff:b1:63:ff:f1:38:e9:41:40:8b:9c:d9:82:
91:ed:cd:44:26:81:58:df:83:3e:b2:23:70:52:5b:69:f4:20:
01:fc:c0:65:f4:08:f9:3e:81:6d:23:5d:23:a3:35:ee:49:77:
6b:e6:86:f0:3f:b9:27:94:ce:0f:42:1a:51:3c:24:cf:bf:67:
82:37:1a:a9:f7:83:b8:53:a2:c9:25:3e:d6:a1:09:6e:97:6f:
51:8f:c5:fd:ea:b7:db:68:fd:00:13:fb:0b:ce:8e:cb:cc:f3:
e5:61:6f:cd:c3:6f:22:93:43:ab:9a:32:4f:0a:d1:a0:d6:89:
7c:0e:fd:c9:d8:25:0e:71:a2:e2:c9:b2:89:21:84:fe:12:ad:
1d:b1:e2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:09 2025 by rpki-client