Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
File: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft (raw, json)
Hash identifier: qHtFUvutafAnuWkmU289394ps4KREbhXy0LUk9lr7Hg=
Subject key identifier: 65:B7:0F:1E:64:0A:C8:08:44:AA:A9:75:65:48:DC:58:6C:FA:5C:BF
Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Certificate issuer: /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Certificate serial: 01969296313A4456A2CBC431E335367451EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
Manifest number: 1523
Signing time: Fri 02 May 2025 20:00:38 +0000
Manifest this update: Fri 02 May 2025 20:00:38 +0000
Manifest next update: Sat 03 May 2025 20:00:38 +0000
Files and hashes: 1: 1XOKZ2XklGPcq5QMqMVrBtsz3DI.roa (hash: uOLEsbZmCJPEZSYbgL/3UoBOworDcneFhX8ZOrNbRIs=)
2: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl (hash: OofKIYw0BZDVRSjlD92/pPBjzQc5RG/YcCSFfG1SOxo=)
3: gRdA1lvZDwZ4CbwZHHGYk6zWOaI.roa (hash: WIrKKySjlipgbBStUixKdW9xZvtWQuX2bcDWYj9rmX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:96:31:3a:44:56:a2:cb:c4:31:e3:35:36:74:51:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Validity
Not Before: May 2 20:00:38 2025 GMT
Not After : May 3 20:00:38 2025 GMT
Subject: CN=65b70f1e640ac80844aaa9756548dc586cfa5cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:fa:90:88:51:52:74:57:a2:c5:bd:7f:3a:
c5:29:22:c0:71:b9:0a:1d:5f:bc:2e:67:25:1b:16:
d3:93:15:a7:ac:1d:69:a1:04:30:78:be:d2:00:71:
9a:a9:4c:51:5f:69:c5:c6:c1:e0:67:8d:5f:01:d0:
ae:ba:bc:18:e5:00:01:f8:63:51:86:bc:6f:8e:be:
fa:f4:70:03:b7:93:eb:23:65:68:3f:ef:1a:d0:d1:
a2:22:8f:5f:1f:c8:1d:e9:33:95:db:cb:96:54:64:
8c:69:d8:b4:4f:93:7d:8f:17:c0:f7:0d:4e:48:94:
cd:89:ff:54:a6:f0:79:d9:cb:9a:3a:a9:ce:99:a6:
37:c5:d6:9b:c2:31:75:b2:76:98:4c:b2:0b:6a:9f:
f2:1b:2c:27:09:3b:76:9a:b6:ca:dd:36:b2:7e:09:
ab:75:db:9e:d6:42:c0:12:50:05:b0:80:74:17:74:
f9:2e:55:7d:15:9f:c9:8d:e5:9b:44:73:6f:59:1a:
d6:da:e0:f6:2d:c8:8a:52:c9:c8:24:bd:42:90:30:
4f:d7:8e:ea:c9:64:68:5b:ad:92:e5:e9:b0:de:98:
b3:41:08:c6:8a:a2:e7:8a:1e:0e:63:38:d1:b1:2b:
e1:0b:c1:01:a3:29:d0:c4:0b:92:aa:04:50:82:86:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:0F:1E:64:0A:C8:08:44:AA:A9:75:65:48:DC:58:6C:FA:5C:BF
X509v3 Authority Key Identifier:
keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:35:3f:10:0e:22:4c:d1:86:41:0c:ff:fc:ee:fb:6e:f0:ad:
5f:38:cd:67:40:0d:39:70:7b:a6:ee:92:7a:ba:7d:07:29:b5:
78:d8:75:f0:9d:15:c0:04:17:89:9d:19:13:3c:9e:ee:22:75:
61:ff:3f:d6:b4:f0:9f:0e:5a:0d:e0:d0:c5:5b:15:80:40:46:
1f:46:be:06:7a:58:33:13:56:69:8a:8b:b4:b4:4c:ba:cb:77:
e1:97:00:0d:23:16:f1:7f:82:fe:f3:ae:a3:95:76:1a:7e:2e:
20:07:d0:63:15:ac:1a:65:89:22:7d:d1:31:92:d5:a3:4a:d1:
b6:12:8c:2d:37:fa:90:1e:85:b7:07:18:af:38:4d:e0:72:e1:
73:0a:81:d8:33:17:87:b3:68:5f:3f:b4:fa:fb:7a:ff:e1:eb:
14:90:b5:4d:3a:86:cf:b3:24:4c:6c:0a:8d:b8:2c:ce:a3:d5:
29:d7:fc:63:91:03:00:86:3d:86:3f:c8:da:17:0f:e1:56:bb:
67:85:ba:7a:ef:82:e0:5f:1b:48:b9:5e:1a:70:30:77:3d:75:
0a:fd:cb:32:fa:5c:bc:4d:70:14:7b:e1:9c:24:de:2a:3f:f2:
d6:ff:07:d6:79:ed:08:96:ef:1e:b5:99:e7:16:0f:c2:c1:31:
b9:65:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:18:17 2025 by rpki-client