Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: +Aq1K+JcOm7lwJTWtBmQz3PxeXLWiRPILhaM8SDLv18=
Subject key identifier: CC:EC:69:7E:D4:D0:56:E5:2E:96:2D:80:1C:52:FB:D9:68:04:52:22
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 01968DA6C79F43259866A7A7116CB79F92C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 14AE
Signing time: Thu 01 May 2025 21:00:39 +0000
Manifest this update: Thu 01 May 2025 21:00:39 +0000
Manifest next update: Fri 02 May 2025 21:00:39 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: RqwhOiQT/KkFEVMMvlp8obT+Iwr45cxuW6YUHa5xj0o=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a6:c7:9f:43:25:98:66:a7:a7:11:6c:b7:9f:92:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: May 1 21:00:39 2025 GMT
Not After : May 2 21:00:39 2025 GMT
Subject: CN=ccec697ed4d056e52e962d801c52fbd968045222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:b8:a5:75:d2:a1:e5:79:5e:a3:78:3d:08:
4d:dd:f0:de:5f:84:cb:8d:6b:ad:ab:57:cc:b5:91:
ad:c0:65:fa:45:12:ff:aa:3a:8e:2b:c6:4e:a8:b8:
31:71:b8:ca:00:1a:42:88:60:b0:b6:61:f7:22:de:
6c:04:75:33:5c:cb:5d:8e:81:02:ae:c6:6c:37:83:
57:95:93:da:bf:3f:ef:43:1a:84:2d:46:f7:03:2f:
65:55:9a:f0:e5:4f:f7:b2:00:99:47:ff:ac:03:16:
93:35:11:d8:03:64:58:b3:61:d7:fd:0c:b4:b9:c8:
9a:8d:c5:ac:1c:64:41:b7:2f:06:4a:37:4f:2a:79:
ea:d5:b1:c5:57:2d:69:a1:d4:4c:78:6a:52:5b:3f:
2d:61:bf:a2:cb:57:f9:a2:8a:fc:a6:1d:df:01:6a:
db:9d:2c:cd:34:bc:d9:86:9a:29:f3:7b:9d:e7:3b:
79:37:f1:5b:ba:ac:8f:9a:dc:31:09:e7:69:da:d2:
75:9a:4d:9e:13:41:f1:b6:d1:22:96:4f:04:49:81:
44:21:5a:5d:15:4b:e2:57:8a:70:e5:ac:81:b9:e6:
4b:81:97:ae:24:f9:cb:0e:8a:5a:67:81:1d:4f:6b:
72:1f:33:a8:37:ec:18:00:5a:f9:23:98:07:74:b5:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EC:69:7E:D4:D0:56:E5:2E:96:2D:80:1C:52:FB:D9:68:04:52:22
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:30:7a:99:aa:ea:73:73:4d:a7:01:2e:ab:a5:28:99:48:21:
63:06:05:b8:74:5f:05:49:e2:c6:1a:67:3a:f0:97:17:83:b5:
5d:9f:39:8f:c4:2c:44:bf:f3:b2:a0:e3:27:3b:cf:25:0e:2f:
54:5d:a3:71:2a:1a:e4:f2:d1:3f:6a:ec:cc:36:c3:9e:b5:65:
c3:9f:6e:4b:e4:c1:f5:35:0a:b9:70:7e:2d:52:6a:58:46:12:
59:11:75:33:71:de:93:f6:cf:a3:28:73:7a:59:85:25:ca:34:
47:64:9c:e0:25:ed:96:70:23:89:72:31:ac:74:10:3c:40:8b:
aa:5d:e4:3b:6b:86:75:78:67:90:4a:67:12:0b:80:ea:c5:61:
69:8f:77:5e:16:cf:a4:79:39:69:6f:d8:db:31:c7:f1:0f:d1:
37:47:7a:18:95:27:fe:d2:57:01:32:41:93:55:bf:53:12:99:
54:28:04:b2:a7:60:9b:1a:c5:d5:64:7f:40:4d:e2:d8:5d:b6:
e1:c0:b5:ba:e0:ca:f2:e6:13:1a:a5:12:e0:3c:23:47:45:d3:
81:5c:1f:a9:e2:58:96:d1:58:5d:0d:f8:72:6a:7c:4d:9c:12:
d7:28:78:99:26:10:c3:8b:f1:22:3e:22:1c:62:99:5e:1b:6e:
bc:23:04:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:19:30 2025 by rpki-client