Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
File: eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json)
Hash identifier: nqzjqOl0HZiFtB1FuEggNixHmU1H7YlBgXwjsZMKkHo=
Subject key identifier: C7:6B:87:F7:C2:AF:93:9A:5A:44:49:90:EF:4F:32:C0:23:68:D3:3D
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Certificate issuer: /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial: 01969AF46881801524EC3338CB5F3D617F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
Manifest number: 11BF
Signing time: Sun 04 May 2025 11:00:30 +0000
Manifest this update: Sun 04 May 2025 11:00:30 +0000
Manifest next update: Mon 05 May 2025 11:00:30 +0000
Files and hashes: 1: PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa (hash: Zn4dyGMYJbfaJjvxLWrM7du9HmyBjKhPRokK9xNb0s0=)
2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: UmziI4dHjYAH1xHpuj83GItb5H+4MYrfTFOFPEDoCsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:f4:68:81:80:15:24:ec:33:38:cb:5f:3d:61:7f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
Validity
Not Before: May 4 11:00:30 2025 GMT
Not After : May 5 11:00:30 2025 GMT
Subject: CN=c76b87f7c2af939a5a444990ef4f32c02368d33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bc:ce:c9:fc:56:b2:14:00:a5:45:81:0b:cf:
55:04:11:a5:81:fd:b8:8d:24:89:43:4b:0e:c7:98:
27:c3:c2:5d:af:38:9d:9b:18:f7:17:16:de:0a:21:
08:68:63:55:db:b2:57:c8:f9:2d:ad:ab:d1:fc:e0:
88:03:7a:ea:4d:d8:13:a7:e3:8e:64:a6:1a:38:8a:
00:90:f1:9b:5c:63:79:3d:59:ff:f9:63:c2:46:26:
2e:cd:8d:35:5d:c9:97:5c:1c:2f:17:35:c7:7c:f1:
fb:e9:45:76:49:53:74:b0:d9:f1:c2:2d:74:22:a2:
04:c8:3d:26:b6:ae:15:aa:28:02:09:77:ac:ab:19:
32:d8:3f:c7:f9:8a:49:41:4f:33:f2:29:ce:45:ff:
70:2c:09:c1:db:ff:b3:04:2f:44:45:05:49:cf:f3:
66:7c:40:9e:35:cb:9e:ea:73:fc:4a:4d:6c:27:ed:
9a:fc:e9:7a:ec:2e:2c:40:c6:8c:c0:e7:76:36:79:
c5:2b:31:26:42:bb:5e:75:bc:28:11:0c:36:00:09:
2c:4f:52:d8:68:f7:66:cc:5b:ff:23:58:c4:a2:65:
81:50:78:29:bf:d4:85:a7:d7:5b:1b:30:fc:70:6e:
55:f4:10:0c:5e:07:04:fb:a7:8e:d8:75:44:6d:ed:
2f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6B:87:F7:C2:AF:93:9A:5A:44:49:90:EF:4F:32:C0:23:68:D3:3D
X509v3 Authority Key Identifier:
keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e2:47:f5:0f:db:ac:87:41:cd:95:bb:12:ba:6f:de:5f:9b:
e2:2c:61:71:fc:0e:55:a1:62:c5:bd:ad:ad:21:f4:c5:b5:fb:
68:0c:8a:29:5b:fc:5a:a0:0b:df:93:b6:67:11:07:2b:16:3a:
ef:21:af:ad:99:38:72:c5:2c:d5:aa:6c:3d:dc:f3:ed:8f:e8:
0f:9b:6b:4e:ca:c5:21:89:fa:d8:19:da:e9:e5:4f:71:4b:46:
18:55:c4:86:88:c3:2f:95:34:ea:ce:e2:b9:53:a0:09:33:f2:
68:c7:79:d4:a1:69:19:b5:26:07:2f:4c:03:cf:ae:f4:f9:70:
60:1d:02:2c:9a:da:63:fb:84:0e:81:bc:1d:19:7b:e7:fc:5f:
dd:6b:18:ac:65:17:d0:63:df:7a:59:9c:8c:1d:a7:42:9a:1f:
e7:f6:f3:2e:89:06:7b:b9:4e:07:45:18:42:0f:c3:e8:be:0e:
2d:6e:f1:bf:91:0d:a2:b9:0e:04:0b:bc:d4:69:9e:9d:a2:bd:
07:56:a3:c8:bc:cd:6c:86:51:72:b8:df:41:28:71:e1:33:da:
8b:9d:13:72:2d:9b:2b:a0:e1:79:fa:02:bd:86:a7:cc:05:dc:
38:34:04:9c:dc:a6:6d:1d:79:6e:a1:68:63:0f:25:13:a4:81:
66:fd:26:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 21:59:05 2025 by rpki-client