Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File: EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier: W161INL0HUcgvWZheCt1wnAYJOafLvqvUzJXnyxmkPs=
Subject key identifier: 5D:96:B6:E0:C4:DC:CD:E8:3C:CD:CA:B8:8D:C9:44:9D:5B:47:26:C4
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 01969071250E9CC007EE10F865B465891D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number: 1522
Signing time: Fri 02 May 2025 10:00:56 +0000
Manifest this update: Fri 02 May 2025 10:00:56 +0000
Manifest next update: Sat 03 May 2025 10:00:56 +0000
Files and hashes: 1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: PV8CCGnwgE2lCgglvnnFk9GbjKC7K/igHdfgjVqb/Ec=)
4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:71:25:0e:9c:c0:07:ee:10:f8:65:b4:65:89:1d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: May 2 10:00:56 2025 GMT
Not After : May 3 10:00:56 2025 GMT
Subject: CN=5d96b6e0c4dccde83ccdcab88dc9449d5b4726c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:ee:32:9a:8d:8e:bb:ce:a9:10:80:d0:a4:
95:ef:60:dd:4e:73:86:c7:b7:15:98:fc:9b:f7:74:
e3:2a:66:05:9d:63:3b:a8:d4:a2:29:f2:44:3c:02:
cd:fd:44:e3:9d:0d:bd:41:c4:79:a8:23:e0:5c:f8:
e3:88:81:7c:71:f8:4d:fd:3a:60:ee:68:55:44:a9:
03:96:63:cf:2e:38:98:a3:c2:9b:c2:0d:0d:7d:55:
a2:ff:99:b6:06:c6:d3:65:cc:1b:87:35:9a:a4:ff:
a9:8f:27:bb:97:2a:1b:04:47:ae:1f:b4:f5:4e:14:
68:69:af:90:02:c6:1e:bb:c5:03:cd:55:c3:44:96:
d2:ed:bc:91:77:d9:07:5c:17:a3:0e:51:78:06:21:
ae:32:43:c8:bd:67:3d:0d:0e:4f:b9:ba:93:95:7e:
72:d7:65:9b:bd:fa:47:d0:02:12:10:ed:96:0e:12:
a7:b2:2c:f0:1c:1b:f4:a4:a4:0a:c9:94:0f:6c:82:
01:d4:47:5e:f0:1f:a9:27:5d:dd:95:2e:84:24:70:
14:30:c7:12:e4:de:51:6b:35:7b:2c:4d:83:14:da:
3d:6f:4b:13:b8:de:43:b7:ad:35:3c:6c:f0:86:a6:
0f:e1:7a:47:e1:d0:77:9e:b4:a7:09:ba:49:7a:d8:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:96:B6:E0:C4:DC:CD:E8:3C:CD:CA:B8:8D:C9:44:9D:5B:47:26:C4
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:33:90:9d:e3:d5:cf:b9:75:7f:32:3a:47:5b:fc:97:5e:4f:
ba:9f:21:11:73:53:44:f7:b0:94:f8:1c:f2:9f:3b:ac:eb:67:
0d:39:b5:4a:8c:8b:3c:45:59:48:12:cc:67:92:08:e1:26:7b:
39:cb:8f:30:46:ca:5d:0a:8c:47:ed:67:c7:14:77:ed:4f:94:
12:2e:99:f7:76:32:37:a4:90:db:07:2d:92:18:ac:fb:f9:74:
d2:b5:f2:93:04:3e:54:3f:38:98:d5:4d:06:44:31:60:48:6e:
cb:3c:b3:c9:5c:24:52:42:73:f5:e6:53:6c:92:4e:9d:a8:52:
36:ba:8e:d0:14:03:ef:df:92:df:12:a9:5e:e3:89:d7:4b:74:
dc:a6:aa:7c:5a:c7:d0:9e:86:a0:45:ff:69:cb:44:d0:40:7d:
81:09:08:c4:e2:13:ed:3c:c4:0a:a7:48:6b:61:35:dd:5e:75:
71:04:63:1d:18:86:f7:15:7b:0e:21:f7:90:9d:84:c6:fc:31:
e2:14:a2:af:b6:db:4e:0f:3c:14:0c:30:b9:da:80:72:96:32:
6f:f7:3b:63:bd:45:ca:b5:11:7e:1e:96:90:4f:61:f5:a2:df:
8b:29:c8:94:ae:05:26:bf:a1:34:0c:a7:f8:53:6c:0c:31:89:
fe:de:3a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:41:44 2025 by rpki-client