Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft
File: e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft (raw, json)
Hash identifier: YoHzR7Il/Qi/fG15aP/xNUyRMVXjCBxkXUMG/jg31uc=
Subject key identifier: 98:C1:1F:E6:E9:08:70:EA:6F:CC:49:87:D7:47:1D:E9:AE:70:60:ED
Authority key identifier: 7B:94:37:7F:71:A2:87:99:16:9E:E5:F2:81:0D:9F:87:CC:6A:D1:B2
Certificate issuer: /CN=7b94377f71a28799169ee5f2810d9f87cc6ad1b2
Certificate serial: 01967A8DC677A78C82E22170845F647D0FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft
Manifest number: 0BA6
Signing time: Mon 28 Apr 2025 04:00:33 +0000
Manifest this update: Mon 28 Apr 2025 04:00:33 +0000
Manifest next update: Tue 29 Apr 2025 04:00:33 +0000
Files and hashes: 1: KbeB8RTbaet4HHqwjOfNfUS28EE.roa (hash: d76CFldFLmQtulEDPmcbaaGlJnvQhfpf5WrajAE48IM=)
2: e5Q3f3Gih5kWnuXygQ2fh8xq0bI.crl (hash: 8PKfWXkReBzDbShdPskU2fIteizHD2MmGtuaxb+n0g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:c6:77:a7:8c:82:e2:21:70:84:5f:64:7d:0f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b94377f71a28799169ee5f2810d9f87cc6ad1b2
Validity
Not Before: Apr 28 04:00:33 2025 GMT
Not After : Apr 29 04:00:33 2025 GMT
Subject: CN=98c11fe6e90870ea6fcc4987d7471de9ae7060ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:99:f7:41:52:22:67:f1:38:ce:7c:41:a4:
ca:de:5f:77:42:76:87:fb:2c:ee:1a:09:51:d7:56:
0a:a3:f8:01:7d:70:f3:b4:45:93:6d:63:c1:5a:38:
8a:3e:cc:d7:51:ac:b0:51:ac:76:28:27:d4:f9:fd:
12:39:51:5e:c3:f4:ca:d7:60:55:20:e6:c6:ff:db:
a9:0d:b0:9e:5e:0a:55:28:5e:0e:1d:f3:73:96:eb:
c1:db:b5:dc:69:75:c4:0f:a5:90:22:30:30:fb:51:
90:d5:2e:5a:96:9d:2a:2e:40:4c:6b:70:e1:53:82:
7a:fb:4e:a7:de:0d:91:3b:6c:2f:f9:8b:98:0e:bd:
49:a7:5e:55:95:50:1e:c5:ec:73:cf:04:69:0f:cb:
3e:c3:8e:fa:f0:1f:b6:ba:9d:83:39:26:01:61:76:
8f:1b:4c:dd:3b:ce:3d:ab:80:b8:b8:4a:9f:0b:b9:
18:03:61:87:2a:28:5a:d9:e0:b3:de:73:84:48:e7:
a9:d8:b0:83:e2:44:27:8a:99:7b:ec:60:88:8c:36:
fa:08:c7:11:13:4b:48:fa:3d:f4:e8:6e:99:74:cd:
de:d4:fb:be:86:7e:90:ad:d6:eb:34:e4:f1:58:70:
9a:d1:d1:bc:6b:0f:f3:e2:41:4c:67:25:79:84:e4:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C1:1F:E6:E9:08:70:EA:6F:CC:49:87:D7:47:1D:E9:AE:70:60:ED
X509v3 Authority Key Identifier:
keyid:7B:94:37:7F:71:A2:87:99:16:9E:E5:F2:81:0D:9F:87:CC:6A:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f2:e3:33:fe:8f:21:0a:8a:55:17:3e:d2:c3:45:e1:82:b9:
e7:93:2f:21:59:e3:26:5d:9b:cc:61:4c:43:71:68:ec:75:53:
e5:b5:ab:ce:92:0f:c6:cf:fd:ce:8e:ce:3e:2d:19:d2:b0:45:
02:4c:63:b2:0a:a1:0b:ef:f4:e2:ca:9a:a5:66:03:f2:33:2b:
57:c2:ab:c1:3b:e7:65:ed:bf:37:24:37:b3:c7:62:0c:60:cb:
7d:6b:5a:9a:a4:46:2e:c6:dc:b9:ee:6d:77:10:b3:7d:b6:a2:
e8:8b:76:cf:6e:90:aa:0e:99:c2:d1:51:cc:e9:39:53:41:c3:
4b:25:d6:5a:ac:fc:49:1c:0b:4f:27:5c:87:30:08:70:6b:c7:
11:1d:73:6e:8a:27:19:9f:4d:86:fe:a2:e2:e8:2a:41:73:11:
3b:ec:3a:bd:c1:b6:f4:63:c4:17:6f:86:40:43:80:4f:dc:dc:
7e:f4:14:10:02:ce:d2:e4:05:54:0b:ab:29:55:41:ab:a0:1b:
c5:45:c1:97:f5:05:63:05:aa:69:db:79:e5:c8:99:3c:20:fa:
86:c8:89:5b:5c:71:c2:ae:e8:52:94:1d:45:6a:39:2b:de:56:
df:1d:9f:f8:f4:a7:69:27:f9:47:13:94:2b:5b:39:4e:c2:f6:
74:e9:d5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:27:41 2025 by rpki-client