Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: jfOexGStFKUXTP45B9i2kGD1t0SKRYj+7VCcTbBcTqE=
Subject key identifier: 92:4F:77:79:8B:D0:EA:64:A3:84:7C:3F:3F:05:47:94:E0:1C:43:95
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 019676E85947239FCDEF2BBDF9B63F3E9E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 11:01:00 +0000
Manifest this update: Sun 27 Apr 2025 11:01:00 +0000
Manifest next update: Mon 28 Apr 2025 11:01:00 +0000
Files and hashes: 1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: zkhvNSN8G6lYHUVNj9xXndlnCy1+xH8B7rD11YvoKpI=)
3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:59:47:23:9f:cd:ef:2b:bd:f9:b6:3f:3e:9e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Apr 27 11:01:00 2025 GMT
Not After : Apr 28 11:01:00 2025 GMT
Subject: CN=924f77798bd0ea64a3847c3f3f054794e01c4395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:de:92:cf:f1:f4:9f:5f:af:68:0e:b0:bf:
65:79:ff:4d:e1:8e:8f:99:dc:06:4e:af:3f:ed:77:
08:04:54:24:7f:98:87:e8:c0:ff:b6:85:5c:91:bd:
1a:9f:26:2b:fa:38:6f:4e:b7:72:37:62:5a:84:b8:
c0:bc:2a:a5:23:7e:8b:8b:02:91:f7:f8:d7:57:f4:
4e:3b:ee:c6:45:bb:c1:0f:e8:ef:6b:44:d4:08:b3:
96:a9:5c:30:e4:81:b2:30:78:d6:c4:f8:b5:43:e7:
c8:fe:bc:92:cb:2e:cb:9a:0d:02:b0:a2:20:66:2f:
e3:f6:63:a6:55:5e:a9:a2:1c:ee:cf:47:12:0c:34:
5d:57:c0:11:e3:91:a5:13:1c:13:34:bf:d2:23:12:
d6:03:cb:5f:87:fb:ab:37:54:32:57:66:af:5a:1c:
1e:f4:da:94:c6:2c:a5:08:14:7d:8b:37:6d:e6:bc:
fc:93:e5:5a:6c:43:ac:20:54:a7:05:3a:40:ad:73:
d0:23:38:53:0a:45:b6:6c:f2:b2:8e:e0:79:5d:21:
7f:a2:07:83:0f:96:b3:f2:51:75:1c:54:17:e0:ff:
48:1c:e1:80:84:f2:ac:8c:95:06:a3:29:9f:a4:5c:
bd:a6:d7:d8:4f:28:4e:3a:1e:0c:1d:c8:4d:57:94:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4F:77:79:8B:D0:EA:64:A3:84:7C:3F:3F:05:47:94:E0:1C:43:95
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4d:06:9d:20:3a:dd:72:dc:30:83:95:3d:ec:8c:1d:73:97:
38:27:9d:06:93:eb:a7:35:4e:6e:27:a0:c7:13:70:83:fb:21:
16:cd:ae:43:f0:d1:30:5f:5c:d7:5c:5a:0c:78:df:eb:f2:8e:
a2:7c:a5:20:d9:8e:ec:49:e0:28:3f:2d:5d:ac:d8:79:ea:bf:
f5:c5:59:9a:a2:fe:1f:fb:3b:6b:cf:29:d8:ad:18:ca:e6:d0:
3b:7f:d0:a0:8f:a0:30:0a:59:41:9a:62:a8:8b:da:48:59:fc:
70:fb:69:0a:10:86:4a:07:74:b8:93:20:1b:75:ef:0a:0a:80:
01:4a:e4:45:e4:47:64:bd:a3:6d:da:7e:dc:63:36:db:71:83:
7d:ee:51:29:ff:e1:ca:9c:2d:01:83:a1:67:ba:06:9f:83:02:
b6:ae:6c:7a:5c:e2:7b:73:f0:29:3f:38:5d:a3:ac:68:95:e0:
8c:81:e6:b1:fa:bc:4b:17:85:e5:5b:96:0c:86:d8:c9:ff:a2:
f5:6a:c4:47:47:f8:b3:95:3a:59:ff:f2:40:20:14:f4:5a:79:
16:86:a2:8b:69:ed:67:da:19:e0:ab:ad:db:0e:7e:41:df:0b:
d5:87:98:b0:16:90:a1:15:27:67:6a:51:c0:cb:af:44:0d:55:
9a:84:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:21:13 2025 by rpki-client