Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File: ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier: +FzXFjOPi7b3wD72AaJYhYjX3A2UXsyIq1uVjTrj/jk=
Subject key identifier: 85:A8:62:D3:E6:B7:4A:7C:02:73:A7:FC:BF:2E:21:FD:BB:CE:26:C8
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 01968B8196F335F2E3582B2BC7D0213E3271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 11:00:47 +0000
Manifest this update: Thu 01 May 2025 11:00:47 +0000
Manifest next update: Fri 02 May 2025 11:00:47 +0000
Files and hashes: 1: 2JjyX_-1ihqsSblonAIGQ2WI8zE.roa (hash: zFek1n9vUOT2IuGKFpGhKS8yEEOPqAUeFGqimhy7H3I=)
2: 2zv-bqUF4ie6dLoJOvbHg-Khzrk.roa (hash: SuQwzPeSaf/HqGV5aFne0AqsUIDLEGL4BEqdCUksZzA=)
3: 90IBFTm1n0EdouWYts1bm2C2AV0.roa (hash: ERgPNr6bXt5OGFwKPUno3LLiwFJjlAJ5vniWmV4rL9o=)
4: IPDWq2JXklmZilVzAW_qJFHve_M.roa (hash: 8qLID3yci9mCWiyOl1eMby2l1Aaax7OKoB39T8J6xu0=)
5: Qhk5DeOzxRoTsaRY5UPu50xo2Q4.roa (hash: SAnzykFF7+yaqNzuYwleeCNNDy8d940iOSnUgG5s+iM=)
6: Zu3SmHOhZpwuSSti9wdImp6Ga-Q.roa (hash: 5ZnrCuNHa1wjQpFfQY/Zj6DgGr5ywhEPGA9N3saHG2U=)
7: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: 2N2OaM4ktC25ePhGKxo44NfiDkEOflrWQujtE2Cuwe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:81:96:f3:35:f2:e3:58:2b:2b:c7:d0:21:3e:32:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: May 1 11:00:47 2025 GMT
Not After : May 2 11:00:47 2025 GMT
Subject: CN=85a862d3e6b74a7c0273a7fcbf2e21fdbbce26c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:4b:04:16:ee:a8:ce:75:6b:89:d4:a3:e1:
51:fb:0c:d2:1a:09:3b:8e:4b:dd:ae:f3:45:ce:97:
61:59:62:1b:f3:45:91:ed:25:cc:ce:fb:8a:79:e4:
d5:7a:d4:0f:0c:7c:c0:19:55:15:ca:c9:1b:bb:1f:
86:8c:31:5f:cc:5a:70:22:69:2e:64:06:5b:aa:09:
c9:56:c0:57:30:21:6a:dd:e1:9b:7e:31:01:e8:7c:
0c:7c:ac:3b:de:51:7b:15:e9:bc:05:df:53:4b:bc:
9c:4d:a7:7b:0d:ea:b3:61:8a:e6:d0:c0:e8:b1:b7:
17:55:b8:18:0b:13:24:07:12:2d:5a:36:36:5c:b8:
22:ae:7e:8a:20:7c:96:74:db:dd:8b:c0:a9:aa:6d:
cd:9c:cf:d1:47:c8:1f:54:77:f7:25:52:27:85:7d:
1a:67:b1:1a:fa:37:e0:3d:16:7e:e7:a0:2f:5f:bd:
6a:32:a4:21:09:b4:68:33:bc:13:b7:ca:20:7c:1e:
10:2d:c1:db:1f:29:36:0c:a8:6d:cb:12:2d:fa:ef:
6c:05:8e:eb:e1:0d:63:af:7c:2f:78:a5:2d:e0:40:
49:27:b9:8d:e2:44:4f:18:78:59:12:4c:c4:45:d0:
03:66:64:a9:11:28:5c:ab:47:91:ae:23:4d:bf:13:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A8:62:D3:E6:B7:4A:7C:02:73:A7:FC:BF:2E:21:FD:BB:CE:26:C8
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5e:a8:31:55:2d:bd:8e:a8:de:ef:7b:99:6a:71:df:71:b8:
37:cc:63:fa:4a:fc:87:73:82:cf:b7:21:65:3d:0e:0e:5d:6a:
13:7b:a9:70:ea:20:ea:b3:59:07:90:9a:9e:bf:72:98:3c:89:
53:6a:72:e0:b3:20:e8:ea:d2:b4:dd:b2:34:18:cc:ea:f8:03:
90:4a:a7:47:f7:46:2f:02:37:f9:13:f5:a2:da:bc:3e:31:94:
cf:48:11:89:03:8c:98:36:4f:31:8c:d9:e8:27:21:2b:05:60:
ac:c9:b9:18:63:10:6c:7a:0e:81:d2:71:f3:3d:d5:f9:52:7b:
51:0c:8f:8b:e3:49:da:09:34:8d:be:74:38:42:67:01:75:b8:
5e:84:3a:97:b9:cb:62:3c:36:f5:a4:c1:bd:a4:b6:9e:38:a5:
dd:84:4f:50:3e:1e:bc:9b:01:1d:a3:79:22:b7:17:33:c6:05:
8f:24:17:7c:37:36:0a:20:3e:33:d8:a0:b0:14:ae:a4:d9:6d:
6e:de:ee:15:0a:81:d9:f8:02:b2:6a:98:8c:2f:0a:7e:30:f0:
a3:1c:ee:9b:97:31:bf:41:ce:e3:cc:66:c1:05:19:e3:b3:79:
e0:60:37:66:23:72:dd:ef:23:7b:7f:c2:08:d3:fc:84:79:20:
c2:6f:46:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:21:26 2025 by rpki-client