Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
File: esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json)
Hash identifier: dXPLPwWofoDGJrxfbT1zGxLHOqgWDMtXrbbJfNxoHaE=
Subject key identifier: C2:51:C9:0E:88:48:67:93:41:04:57:D4:90:DC:8B:47:59:7D:1F:68
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 019690DED4DE4631D68C8CE3DD14B28ED47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
Manifest number: 0D14
Signing time: Fri 02 May 2025 12:00:44 +0000
Manifest this update: Fri 02 May 2025 12:00:44 +0000
Manifest next update: Sat 03 May 2025 12:00:44 +0000
Files and hashes: 1: SYRnChSsh0_v6fjwXGx7ILcwh_8.roa (hash: ub+o2UwDjpsKp4KwHEYNQcFaXm52BqcyybdGRXcC+wM=)
2: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: Sf7GfKo8MkmHrQerFHQ0w1DPunNYyMUBnYy5Dav6SCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:de:d4:de:46:31:d6:8c:8c:e3:dd:14:b2:8e:d4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: May 2 12:00:44 2025 GMT
Not After : May 3 12:00:44 2025 GMT
Subject: CN=c251c90e88486793410457d490dc8b47597d1f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:b8:8e:1f:b2:2d:cb:35:12:02:c3:14:b8:
4c:19:aa:2c:10:87:e9:f3:ee:93:4a:12:08:64:cb:
50:41:9f:3f:aa:e0:f5:bb:dc:a3:6a:5b:c6:fb:6a:
22:32:bc:d9:8f:e7:64:36:d9:35:10:2c:8d:e1:39:
3b:fd:e3:14:d7:81:4e:7d:92:ef:25:31:60:69:51:
7f:45:10:2f:74:60:0a:23:bf:d5:57:b1:8c:df:3e:
fd:49:52:28:2d:f8:ad:5a:c8:d6:d7:2c:d9:2e:cd:
43:5c:0c:b6:c0:f2:1a:59:d1:f9:9b:8f:77:31:ab:
22:89:36:66:49:1b:73:77:49:ec:6a:aa:e3:8f:1b:
d7:b4:c5:95:ab:16:a5:dd:49:9b:e3:66:58:93:a9:
34:9d:54:2c:de:c4:a2:03:7a:e1:d4:3e:8c:ef:0d:
46:41:23:8e:cc:ad:c4:22:4c:0e:e0:70:37:c1:0d:
f7:4e:d9:ee:f2:ca:af:7e:93:15:13:6c:ad:c8:8f:
a8:36:90:6d:2d:14:80:58:14:be:cd:3f:cf:5c:9d:
81:44:98:31:e7:4c:f5:02:fa:72:0f:05:e2:20:7e:
30:ad:6e:6a:f6:5c:35:89:f4:be:3c:f1:83:59:a0:
bb:30:e1:0e:41:8b:6e:80:f7:f7:34:67:2f:98:07:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:51:C9:0E:88:48:67:93:41:04:57:D4:90:DC:8B:47:59:7D:1F:68
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:74:44:f2:49:17:0b:03:74:14:a2:d1:d1:af:e1:4c:9c:a6:
3a:53:b2:d3:42:2b:28:85:4e:de:3c:34:e3:87:88:b0:da:21:
42:bf:b6:eb:a1:61:70:ef:ac:a6:5e:ae:7a:e6:f0:ce:e6:98:
59:14:12:4c:8f:b7:cc:67:c0:2c:24:1e:e7:25:a6:bd:ec:de:
e3:62:5c:a5:0b:6e:24:39:5f:c1:3b:7a:d4:7f:e8:ef:2e:53:
4f:13:27:25:84:3d:4d:79:a5:62:11:ec:02:c8:9c:76:2e:a6:
a5:11:7d:3c:bc:e5:ee:e2:e7:95:3b:f9:d4:b1:a9:1c:a2:bc:
16:e3:a1:2b:47:e3:2d:3b:97:5e:b7:6d:7f:a9:6c:3f:72:aa:
6c:4c:47:c1:bc:ad:2e:e1:b6:f7:42:e5:85:1d:81:75:00:e0:
07:fb:10:8c:7b:53:af:22:b8:74:32:33:9b:11:f3:68:d2:84:
23:00:36:0e:32:92:51:bf:68:ec:e2:56:9d:9f:a2:38:29:3b:
0d:c9:5b:6c:8d:c3:c7:d2:bc:a1:b7:ad:c0:1c:2c:92:0e:cf:
39:b9:19:49:d7:f5:96:3b:c5:6b:76:67:8f:a0:af:65:8e:d5:
b0:54:11:b7:9e:f8:6d:e4:41:6b:a9:aa:ee:67:99:fa:e1:4d:
64:fb:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:38:28 2025 by rpki-client