Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
File: egoGVk08cX0tbaoegzxJWXawuto.mft (raw, json)
Hash identifier: uQX/dTM/2CBdnnz4bWqFd1jDYPLefemvppR3pVunOhE=
Subject key identifier: EA:28:1D:52:21:35:6D:30:55:E0:18:6B:1F:6E:BC:7E:B7:2F:5F:7D
Authority key identifier: 7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
Certificate issuer: /CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Certificate serial: 019684DAA25681E6E28C2095946DF5E86B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
Manifest number: 13B6
Signing time: Wed 30 Apr 2025 04:00:43 +0000
Manifest this update: Wed 30 Apr 2025 04:00:43 +0000
Manifest next update: Thu 01 May 2025 04:00:43 +0000
Files and hashes: 1: 2bWZH-siKv9yamXLxhMW4gBTBXs.roa (hash: xWCLh4hIiubp753R08bjE0GaWYotTbdn6hf3WZPct+A=)
2: 7IdkztL4D2rd1OWu-Fwdy4TrVLU.roa (hash: dbyo4ZfaUk/gfa7oD7KrfiLAvIhYyozL2QxpQuJXGrE=)
3: egoGVk08cX0tbaoegzxJWXawuto.crl (hash: fxay870bN4aoJ612MKmJ6Eq9VkfAsNF2syNKQmlIpHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:a2:56:81:e6:e2:8c:20:95:94:6d:f5:e8:6b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Validity
Not Before: Apr 30 04:00:43 2025 GMT
Not After : May 1 04:00:43 2025 GMT
Subject: CN=ea281d5221356d3055e0186b1f6ebc7eb72f5f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:34:e6:ac:1c:9c:03:54:99:27:ef:b7:fe:
f9:cb:5e:2f:fe:c3:6d:8d:43:53:cf:09:51:cc:4b:
c3:dc:2d:e1:3c:8d:c8:e9:63:57:62:41:a4:b2:15:
1d:5d:f6:ae:3c:d0:88:ff:dc:d9:9a:0b:68:29:69:
22:81:89:31:80:82:cf:89:92:6b:88:a0:f4:90:73:
b1:5a:bf:ff:18:cd:d4:af:6e:90:4f:a5:53:af:ef:
81:f3:a0:38:ec:de:53:d4:cb:87:cf:6c:f8:23:f2:
e7:fb:0f:69:f3:f3:d1:71:84:39:ef:16:eb:29:b7:
7e:bd:99:c9:f8:07:2a:be:90:91:ea:8c:d9:74:43:
5b:83:bb:90:d8:e8:19:bf:57:c1:37:4c:29:70:9c:
24:62:d1:f3:de:cd:27:14:b5:26:6b:6b:ab:cf:49:
c5:38:32:d7:72:c0:16:9f:af:8b:1c:ef:7a:03:14:
a6:49:57:ba:ff:b3:eb:77:2b:eb:d8:32:06:08:8c:
91:5d:e3:8f:23:02:2b:42:f2:b3:36:72:48:5f:1f:
5c:55:e0:ea:47:3a:f2:b5:af:78:aa:47:28:c4:ad:
76:3a:8b:bb:ac:26:1b:78:9f:b7:d4:8a:87:bf:0b:
69:99:cc:ba:c4:b1:ed:fd:c6:24:45:26:2a:fd:8a:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:1D:52:21:35:6D:30:55:E0:18:6B:1F:6E:BC:7E:B7:2F:5F:7D
X509v3 Authority Key Identifier:
keyid:7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f3:7d:75:bb:5e:c5:35:17:1f:72:df:09:b3:97:19:b6:ab:
f6:98:df:7e:63:0a:98:d1:c3:f2:64:ca:58:11:c7:a1:31:d2:
dc:b4:e3:7c:91:49:fd:92:f7:f5:f4:aa:db:6c:02:da:91:c6:
1a:f8:be:b1:75:d4:3d:b5:9a:76:5a:db:02:70:2f:3b:2e:87:
88:5e:a5:0b:06:b9:fb:6f:2d:a5:6b:e1:1d:1e:2c:fb:86:a9:
d3:e3:3d:0d:da:ec:be:76:a3:d3:22:ee:0d:cb:dd:a9:f5:91:
1a:dd:12:87:1c:2f:87:a3:8b:91:d4:1c:0c:43:86:86:a4:3f:
d5:bb:e7:7e:1d:12:a3:9b:6b:98:78:4e:b2:2c:84:37:90:b6:
be:42:21:d1:92:83:3c:37:82:90:60:60:d6:dc:df:1b:5b:8a:
91:37:b2:94:d4:88:63:e4:84:cc:16:c5:6b:fd:6a:bc:ef:5d:
09:8e:a2:90:21:37:fc:55:fd:9c:ce:40:4b:63:c5:01:86:00:
69:b2:d5:e6:96:16:7a:19:17:25:7a:a8:3a:d3:9c:b6:12:83:
76:ca:4e:4b:16:e2:04:a3:6b:ce:d7:9d:73:17:ea:52:b2:14:
5f:f0:60:92:a0:59:9d:9c:92:45:c9:4b:95:67:31:9b:1f:02:
fc:8b:1d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2qJWgebijCCVlG316GtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMGEwNjU2NGQzYzcxN2QyZDZkYWExZTgzM2M0OTU5NzZi
MGJhZGEwHhcNMjUwNDMwMDQwMDQzWhcNMjUwNTAxMDQwMDQzWjAzMTEwLwYDVQQD
EyhlYTI4MWQ1MjIxMzU2ZDMwNTVlMDE4NmIxZjZlYmM3ZWI3MmY1ZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHo05qwcnANUmSfvt/75y14v/sNt
jUNTzwlRzEvD3C3hPI3I6WNXYkGkshUdXfauPNCI/9zZmgtoKWkigYkxgILPiZJr
iKD0kHOxWr//GM3Ur26QT6VTr++B86A47N5T1MuHz2z4I/Ln+w9p8/PRcYQ57xbr
Kbd+vZnJ+AcqvpCR6ozZdENbg7uQ2OgZv1fBN0wpcJwkYtHz3s0nFLUma2urz0nF
ODLXcsAWn6+LHO96AxSmSVe6/7Prdyvr2DIGCIyRXeOPIwIrQvKzNnJIXx9cVeDq
Rzryta94qkcoxK12Oou7rCYbeJ+31IqHvwtpmcy6xLHt/cYkRSYq/YpuoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOooHVIhNW0wVeAYax9uvH63L199MB8GA1UdIwQY
MBaAFHoKBlZNPHF9LW2qHoM8SVl2sLraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWdvR1ZrMDhjWDB0YmFvZWd6eEpXWGF3dXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82ZjU5OGQtYTVjNS00Yzk5LWExZjAt
NTQ4MjYzZWI2ZmI0LzEvZWdvR1ZrMDhjWDB0YmFvZWd6eEpXWGF3dXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82ZjU5OGQtYTVjNS00Yzk5LWExZjAtNTQ4MjYzZWI2ZmI0
LzEvZWdvR1ZrMDhjWDB0YmFvZWd6eEpXWGF3dXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvN9dbte
xTUXH3LfCbOXGbar9pjffmMKmNHD8mTKWBHHoTHS3LTjfJFJ/ZL39fSq22wC2pHG
Gvi+sXXUPbWadlrbAnAvOy6HiF6lCwa5+28tpWvhHR4s+4ap0+M9Ddrsvnaj0yLu
DcvdqfWRGt0Shxwvh6OLkdQcDEOGhqQ/1bvnfh0So5trmHhOsiyEN5C2vkIh0ZKD
PDeCkGBg1tzfG1uKkTeylNSIY+SEzBbFa/1qvO9dCY6ikCE3/FX9nM5AS2PFAYYA
abLV5pYWehkXJXqoOtOcthKDdspOSxbiBKNrztedcxfqUrIUX/BgkqBZnZySRclL
lWcxmx8C/IsdWg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:33:42 2025 by rpki-client