Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: /gLAv1hoF7UyMLO+Ug7aoMW9FeBy3zNkiSg+oWepcDM=
Subject key identifier: E0:E7:D7:DD:A0:DB:88:7F:68:15:4C:A0:88:73:8B:67:B0:D4:9B:07
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 01967831612B3CE86618E6618FCE3EA88EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 1136
Signing time: Sun 27 Apr 2025 17:00:23 +0000
Manifest this update: Sun 27 Apr 2025 17:00:23 +0000
Manifest next update: Mon 28 Apr 2025 17:00:23 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: Mi7SFsekEpkeYD89DKD8T9blJzCPVBKOoSxD+VGxNZw=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:61:2b:3c:e8:66:18:e6:61:8f:ce:3e:a8:8e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Apr 27 17:00:23 2025 GMT
Not After : Apr 28 17:00:23 2025 GMT
Subject: CN=e0e7d7dda0db887f68154ca088738b67b0d49b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:95:51:3a:68:c5:7e:e9:e7:73:0a:12:3f:
13:dc:42:9a:ad:1d:e5:6a:9e:24:5b:ee:43:3f:88:
8f:3d:5f:82:0b:c7:d0:8d:bc:c7:2f:f8:19:53:b1:
b6:ae:01:c2:40:df:c3:72:2a:11:95:3f:19:20:71:
85:8e:10:74:91:91:d8:32:e1:47:7f:75:23:bc:86:
d6:ed:17:75:bf:a5:52:a8:b2:74:58:80:2c:5d:d7:
58:dd:1a:0a:64:1c:26:bc:37:1b:c9:b7:58:84:27:
a4:91:7e:52:d9:18:6f:62:63:4f:8e:22:fb:4f:f3:
14:db:43:16:bc:d5:5c:e1:b2:7b:48:d0:97:fa:52:
2e:08:b9:44:15:d1:cf:d0:4f:11:8a:9e:66:1a:6f:
58:2b:61:66:29:a6:09:08:a1:98:69:79:a7:3a:e8:
c1:da:cf:06:68:74:4e:0c:b2:19:f1:9a:ae:7e:0f:
6c:11:a8:45:86:63:87:75:9c:17:52:eb:25:f9:76:
a3:53:b6:b3:73:ed:6e:2b:a9:ce:ec:df:f1:81:06:
06:c2:09:6c:20:00:42:5e:4c:0b:a8:77:bc:1d:a2:
a7:ba:98:a9:cc:19:2a:bd:0b:5f:19:0a:83:f1:ab:
d6:ca:e5:f6:b6:7e:30:f8:4a:d4:6b:30:a0:dd:1c:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E7:D7:DD:A0:DB:88:7F:68:15:4C:A0:88:73:8B:67:B0:D4:9B:07
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:13:35:a3:d1:f6:7a:78:b2:b5:da:12:5d:4b:af:e3:ca:0c:
05:e8:a7:64:3e:35:7c:4d:82:3c:66:b2:a4:d4:56:3a:09:ba:
eb:dd:b8:16:9f:1a:d9:22:48:8c:4d:79:19:b4:74:2a:c3:69:
bd:f2:c7:f2:b9:2d:2d:ab:87:3b:d2:ed:33:6e:77:45:76:80:
06:bf:d7:cd:3f:ab:bc:96:29:f4:6c:a7:6c:5c:76:05:15:b9:
e3:da:be:36:00:0f:6b:a5:a8:1d:7f:03:fd:a4:d2:80:e0:f5:
86:e3:7a:f7:00:cc:f2:00:10:dc:75:82:4f:9c:47:2a:3c:c2:
a6:00:a3:2d:63:17:29:8d:77:2c:f9:5b:22:77:c2:f1:43:d3:
32:5c:ba:c6:e6:3b:83:e5:3e:6b:f4:cb:e8:aa:93:f5:34:b4:
6d:7c:e4:10:02:53:11:f8:a2:15:ed:05:50:d8:a0:ad:c1:f9:
90:4a:d4:93:2f:bd:4d:08:37:7f:5a:53:99:82:a2:d4:50:7c:
70:e3:fc:32:8e:13:4c:e1:19:94:2a:0c:b8:9d:b1:f5:67:ed:
b9:f2:2b:f5:50:b1:d5:c2:4e:a6:a4:77:28:b4:ec:e4:87:4b:
04:5f:82:0a:ab:e6:2c:0f:4b:97:ae:4f:e9:69:af:07:52:bf:
4d:67:13:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:02:08 2025 by rpki-client