Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File: eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier: 1SHZjxcNw6hqlJ5AF6due/o+EjDNMI6VrfGNUHy7f0E=
Subject key identifier: C1:15:10:3A:FE:C2:57:40:53:4F:08:D4:B1:27:F1:09:4C:49:A4:86
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial: 019685B667B89766B0975EA12602151251F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number: 1161
Signing time: Wed 30 Apr 2025 08:00:45 +0000
Manifest this update: Wed 30 Apr 2025 08:00:45 +0000
Manifest next update: Thu 01 May 2025 08:00:45 +0000
Files and hashes: 1: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: ZqBIYdKvL9Jk8K0ByqCWI//lKhkdrSh4nEVsBOAglLo=)
2: yuuro4DZVKBcq4qfaMzuK_H9btI.roa (hash: vk4eiNew6fQF6RCXYVJFZr4P4ma9BlPB3UnJJEu4bKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:67:b8:97:66:b0:97:5e:a1:26:02:15:12:51:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Validity
Not Before: Apr 30 08:00:45 2025 GMT
Not After : May 1 08:00:45 2025 GMT
Subject: CN=c115103afec25740534f08d4b127f1094c49a486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:3a:80:47:60:20:2b:c8:70:2d:8f:31:94:
09:7f:92:a8:ca:fa:ba:e5:d9:71:80:2e:8e:0c:be:
c8:fc:09:d9:02:70:dd:20:2d:fc:cf:39:d8:fc:1c:
97:67:bf:d6:1d:24:8f:f1:6c:42:48:c3:88:28:54:
82:d2:7e:c4:4c:9f:72:b2:61:59:34:76:d4:57:b7:
64:2e:8e:ae:8c:5e:fa:37:a8:09:25:b4:45:9d:f4:
5e:27:e1:69:e7:c7:78:8b:b9:2a:ed:60:10:49:f7:
b6:9b:30:2d:5b:1c:9b:07:da:ec:e8:7b:ed:6d:cb:
9f:35:5f:b8:ab:ec:03:a9:09:a5:f6:be:6d:76:33:
c3:24:56:dc:f6:f7:92:95:f9:79:43:6c:a4:46:97:
71:ec:df:f7:57:44:fc:de:9b:98:d8:99:ef:b6:68:
15:16:b8:2e:96:2f:9d:9d:0b:7a:e0:38:20:b4:16:
77:df:7f:49:ad:77:d3:69:6a:68:d5:ed:8c:5f:94:
31:9c:ae:a6:ac:f3:6f:3d:6e:35:8c:e0:0d:89:b3:
e8:98:5b:8c:00:23:fa:1c:77:05:4f:3f:d6:2f:9f:
a0:45:1b:b1:42:0e:a5:95:a9:3c:c2:37:ab:30:15:
a0:93:e6:0c:fe:e1:11:f1:da:0c:9a:66:d4:72:00:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:15:10:3A:FE:C2:57:40:53:4F:08:D4:B1:27:F1:09:4C:49:A4:86
X509v3 Authority Key Identifier:
keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7c:40:41:17:80:41:7a:a2:e2:c8:5f:c9:61:24:89:db:37:
d3:83:04:dd:67:2d:eb:bd:a9:a0:d6:2c:f3:94:c4:fa:25:ba:
b2:93:77:61:0b:27:41:28:a0:72:38:53:4d:97:da:f7:23:c0:
21:9c:77:a9:1d:da:d0:d3:c6:8f:85:03:57:d0:ae:0b:dd:56:
c9:78:17:d5:d4:78:e7:b8:2a:1b:3e:04:36:8d:85:6c:9f:9c:
c1:18:da:de:0a:2c:d1:a2:bc:c9:9b:8c:3b:e8:38:09:73:6c:
57:8b:9d:6f:3a:f1:5e:36:40:96:bf:0c:a0:76:ae:39:c9:6b:
0b:43:47:d2:e1:f6:2a:3f:60:1e:83:16:c2:67:61:cb:df:dd:
66:48:0f:84:e3:05:fa:bf:69:c5:61:31:3f:7d:3c:a1:7a:96:
f4:f3:3e:4d:7d:db:73:e2:e9:3d:07:e3:6f:6e:ad:07:38:53:
a4:ed:a8:a8:70:b6:95:99:57:ca:cb:16:3c:5d:cd:98:70:ca:
79:1d:a2:f6:8c:03:94:ae:ee:74:bf:36:54:72:a2:79:8b:72:
75:4f:af:a6:7d:03:ae:4c:64:5e:7f:0a:38:11:b6:1a:26:77:
09:39:a7:60:e8:41:e6:ed:ad:52:c9:2e:41:95:89:23:b9:4f:
41:e7:56:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:49:17 2025 by rpki-client