Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File: oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier: py91xdnT1gAF7X4IcZTbvKaf/yZ/00t7lgJ02E4VfEg=
Subject key identifier: EA:9F:7F:81:74:92:B6:47:8C:0F:CE:51:F0:D9:40:D8:1C:C7:35:4A
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 01968CCAFB5DCC1F0EA9B34C43704121E6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number: 11E6
Signing time: Thu 01 May 2025 17:00:34 +0000
Manifest this update: Thu 01 May 2025 17:00:34 +0000
Manifest next update: Fri 02 May 2025 17:00:34 +0000
Files and hashes: 1: ZsbPyFKfDnHSbXB5Rdfyon4nTbQ.roa (hash: f+ETlYVDvmS9d48p0ZYmqykWIOKGSt0JzwDEXRuMaVs=)
2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: z32IpYsD3gU2vog0KkohKMrsy8lAgfL0RkMYoVh/uWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:ca:fb:5d:cc:1f:0e:a9:b3:4c:43:70:41:21:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: May 1 17:00:34 2025 GMT
Not After : May 2 17:00:34 2025 GMT
Subject: CN=ea9f7f817492b6478c0fce51f0d940d81cc7354a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:02:49:a1:c5:a0:58:3c:38:1e:f7:d3:f3:
cd:61:44:e5:6c:db:20:9a:ec:6d:97:09:de:cc:d5:
1b:11:e0:5e:56:b0:01:05:96:39:39:98:c3:22:36:
8f:b1:83:3e:ac:67:c8:dc:77:4d:8a:79:3d:89:d0:
20:d9:28:3c:75:c9:84:20:96:23:88:f8:4e:56:38:
80:b8:6b:8c:ba:f6:ca:5e:b8:7e:25:dc:c9:ae:da:
c1:15:be:d3:1b:e0:1c:ae:cd:43:26:16:7b:65:d1:
b1:6e:60:14:e2:a2:d9:6e:88:f8:66:0e:db:da:67:
17:7f:a9:f3:81:e1:9c:69:b7:e1:36:a3:93:1a:67:
a3:7a:0e:d0:cd:66:86:01:9e:d1:ee:f3:01:56:0b:
33:be:fa:f3:83:e1:c2:03:8e:60:bf:ae:c9:06:6d:
2b:e5:c1:b8:c3:d6:70:ad:c5:a4:0c:06:81:0a:53:
70:ac:6d:a0:47:c5:c4:3e:55:b7:ea:e6:f1:d1:a6:
f0:28:1b:f4:3a:e4:a5:1b:bf:76:8e:73:71:c5:b4:
32:8b:e2:78:6c:c6:5f:8d:67:14:a8:57:10:37:8b:
55:cf:c1:5c:af:6c:5e:55:ae:b5:a8:cb:07:d1:24:
a2:0f:04:fb:53:74:b4:93:4a:2f:2f:61:6a:c0:f8:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9F:7F:81:74:92:B6:47:8C:0F:CE:51:F0:D9:40:D8:1C:C7:35:4A
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bd:5e:4f:9e:96:8d:44:e0:71:83:e0:36:53:2c:f3:d3:eb:
e9:b9:7a:2e:b8:2f:b1:cf:dd:14:6b:65:72:93:d4:c5:b6:87:
84:a0:d3:e8:95:37:c5:11:22:4a:a8:2b:ff:28:82:89:72:72:
ad:b8:86:a3:e6:5c:7a:fa:98:54:73:f6:5e:a5:69:54:60:44:
f1:fe:af:4a:1d:11:e1:66:34:a8:9c:df:cd:19:78:4f:f7:e3:
ae:01:62:ce:36:a3:89:41:fc:09:d8:6d:da:e6:38:5f:96:f6:
1c:76:a2:3c:b3:fd:97:b7:15:2b:9f:6f:81:2f:98:79:9f:69:
c9:e6:93:f8:79:42:f1:19:73:71:de:80:6a:98:a8:46:37:c7:
a2:22:86:a2:8c:68:b7:36:94:b8:70:11:31:83:12:e8:01:8b:
2e:97:2c:ab:05:47:8a:72:dd:fd:94:fc:f6:82:e8:45:85:29:
23:f2:05:96:91:e0:67:30:59:5f:a2:db:41:88:90:a8:e2:b2:
35:39:8c:d8:85:51:cd:d3:50:ae:f8:61:d9:84:af:18:2f:7a:
b4:b0:4c:53:db:c7:9f:40:a0:d4:d2:1f:00:6e:8e:19:a2:17:
97:6d:cd:3c:8c:3d:37:32:51:8f:cc:7d:a3:55:2e:1b:58:b5:
fd:c9:1d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:08:18 2025 by rpki-client