Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: ddEBzaFexk26xZlPBH4mzu6+bsTl2B5pG4HdpEqykoU=
Subject key identifier: C3:AC:F6:0D:2E:9D:DB:44:9F:E0:21:C5:C4:1F:39:02:C8:A6:26:1E
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 01967EA1AFBDCBE7769B3BFE1F880EB9C470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 23:00:47 +0000
Manifest this update: Mon 28 Apr 2025 23:00:47 +0000
Manifest next update: Tue 29 Apr 2025 23:00:47 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: RD1h9dfIl1Q+A4w1vzmuFtO5luvcZvKTJAnhtFCRmss=)
2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=)
3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:af:bd:cb:e7:76:9b:3b:fe:1f:88:0e:b9:c4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Apr 28 23:00:47 2025 GMT
Not After : Apr 29 23:00:47 2025 GMT
Subject: CN=c3acf60d2e9ddb449fe021c5c41f3902c8a6261e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:49:bc:05:20:b2:d1:2a:53:a4:c1:a2:ab:
7d:0a:89:cb:ca:e9:2e:40:4b:26:1e:e2:66:c1:c3:
7f:b6:fb:64:44:a7:84:51:20:e1:a9:06:ea:51:43:
ee:4d:9c:65:d3:70:bc:59:2e:a5:2d:f5:d6:3a:a7:
d4:bb:c5:85:fd:21:e7:db:55:fa:11:e4:a6:fc:1a:
fb:18:2d:2c:5d:32:47:6b:26:86:fb:59:e5:42:ed:
65:9f:e7:f0:90:6d:03:ad:2a:57:cc:85:2a:f7:90:
39:34:25:19:f6:8d:e4:de:67:4c:25:80:54:5c:55:
ea:fe:77:66:61:71:17:f6:ed:7e:39:fe:dc:91:f6:
a6:eb:0c:25:4c:b0:54:80:48:0a:e4:af:3b:ac:73:
5c:2c:e6:a4:10:d4:62:88:f0:60:02:66:6e:01:0e:
ec:db:bb:fe:d2:be:f8:64:57:83:7c:7d:0c:51:3a:
c7:42:d4:19:27:7f:9c:ca:f1:40:56:49:f6:04:53:
72:30:e5:97:56:b6:a5:a0:e7:44:4d:04:44:9a:ec:
89:b4:94:68:b0:d6:5f:36:9b:62:22:39:bd:0d:d6:
91:58:62:b7:5c:34:50:30:1c:3b:5e:14:d2:2c:2f:
23:9d:a3:ac:de:4f:85:b3:60:49:99:5f:c0:bd:37:
94:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AC:F6:0D:2E:9D:DB:44:9F:E0:21:C5:C4:1F:39:02:C8:A6:26:1E
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9c:c7:da:06:00:89:4c:89:b6:2e:b0:b1:94:fa:90:6e:12:
78:db:81:af:0a:f8:cc:3d:86:7c:50:44:71:d8:8b:dd:78:71:
52:56:73:4c:bc:0c:69:61:3c:97:10:b6:a2:9e:9e:fb:dc:4f:
1b:cc:3e:cf:0d:4d:1e:20:d8:b8:16:60:7d:ee:3e:4f:f4:be:
9e:4d:1e:69:db:39:ad:7a:db:f1:84:5f:e1:72:a0:b9:1d:c8:
e5:a1:19:b5:49:16:05:76:ea:bb:4d:bd:d2:18:0e:29:19:1b:
e4:f4:95:59:e9:f7:25:23:0e:c3:23:f2:65:3d:cb:9a:32:98:
6a:6a:3f:55:f5:1d:d2:ea:3d:89:94:20:dc:d5:35:a5:29:23:
35:0c:d0:7a:db:1b:26:8f:54:32:45:07:b5:e9:2b:1a:a1:54:
3e:a0:a3:02:23:72:3a:1d:9f:ae:79:b6:45:f3:ab:6f:57:ab:
39:e7:5b:5c:4d:3e:65:59:b8:d9:23:10:e9:25:e8:1a:71:38:
a9:a7:6c:60:1d:a1:13:ee:12:67:2a:c3:27:3e:cc:c4:d7:7b:
27:96:7f:4a:1c:2c:b6:42:39:e3:df:11:51:59:b5:9c:fc:2f:
8c:84:b5:cf:e6:5f:1e:8d:f6:bf:67:35:90:a2:f7:d3:ca:21:
77:37:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:08:08 2025 by rpki-client