Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
File: eaMEujS2GhXjeX_9TRrowhjBx78.mft (raw, json)
Hash identifier: zOTutDYOMt+i0Vt2JHooI1DYVvQ2kCc30KFuYx0pLWk=
Subject key identifier: EB:D9:EA:86:78:84:A9:A6:23:39:3A:5A:C8:AE:06:2D:53:35:C2:38
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Certificate issuer: /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial: 019680FDCC0FD4789B63D9E3041EAC1717B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
Manifest number: 0C23
Signing time: Tue 29 Apr 2025 10:00:38 +0000
Manifest this update: Tue 29 Apr 2025 10:00:38 +0000
Manifest next update: Wed 30 Apr 2025 10:00:38 +0000
Files and hashes: 1: 1-NdTr5SG40wO4Kbvwy1COocgFrk.roa (hash: oe54LaKxNplT5wDF3qIUM33hwicykogi4I92CR9BK78=)
2: WMIHYk8xvDaFM74QNnIJJvo_0c4.roa (hash: VnzFTov/2fcaAAWs7Jv52Wdrro3t3T/GLjVSPHCgVtY=)
3: eaMEujS2GhXjeX_9TRrowhjBx78.crl (hash: DVeYw8/mLijPf0aTky5q85CYSbsspT9r2JFw7+G6ya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:cc:0f:d4:78:9b:63:d9:e3:04:1e:ac:17:17:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Validity
Not Before: Apr 29 10:00:38 2025 GMT
Not After : Apr 30 10:00:38 2025 GMT
Subject: CN=ebd9ea867884a9a623393a5ac8ae062d5335c238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:83:91:41:b7:30:4a:fa:94:b7:76:29:01:
71:17:39:8c:95:11:b4:71:98:cf:0a:d2:0e:03:3f:
e6:36:8e:50:e7:46:32:7b:e7:20:64:e4:be:07:36:
47:d5:4a:ec:14:a6:ac:4f:b3:af:74:28:73:c4:90:
06:41:b7:d6:bf:cb:08:2d:1e:a8:0b:ff:5f:d6:05:
b3:31:04:fb:e1:61:c1:ec:eb:99:af:55:e7:cf:08:
42:74:d0:9a:29:b5:d9:f5:e9:61:40:65:13:12:8c:
b1:5b:6c:ee:f9:21:0e:fc:b2:a4:92:50:56:35:49:
a9:f3:c2:f0:95:2b:c9:4e:a7:5a:84:5a:a2:3a:92:
10:a6:c6:f9:86:55:2a:04:6a:1a:0a:cf:36:65:fc:
12:ce:be:6f:08:23:32:d1:f3:59:6d:95:b9:98:13:
86:fc:b2:40:94:b4:b4:77:e7:80:f5:f0:fc:47:cb:
a3:fd:cf:48:76:fd:84:9f:d1:7b:95:fc:a4:dc:aa:
2b:e2:16:59:f8:bd:c6:70:1c:f2:cf:76:09:81:8e:
7f:09:50:eb:47:7e:27:3e:81:34:ad:02:61:1d:80:
ba:81:14:57:b2:89:8a:6e:08:a9:d1:4f:bc:e2:d6:
c7:cd:b9:23:c6:d2:a0:e9:f1:5f:0a:9a:ff:89:21:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D9:EA:86:78:84:A9:A6:23:39:3A:5A:C8:AE:06:2D:53:35:C2:38
X509v3 Authority Key Identifier:
keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6c:b2:32:0e:32:42:b1:e6:ac:6c:60:30:a2:90:8d:dd:b6:
ed:2d:d9:10:0b:dd:55:d4:13:bf:63:36:4c:1b:be:05:00:a9:
47:d8:91:50:06:53:62:88:e8:97:87:79:61:73:da:6c:da:04:
57:bf:9c:10:c7:83:a0:52:ab:17:22:b0:bd:5e:d9:36:22:ce:
1e:1c:18:78:51:9c:1c:70:72:0b:ff:81:2e:1a:03:39:ec:52:
c7:fa:fc:d0:b4:3c:d1:29:c5:bc:1f:51:9d:f0:05:17:a4:52:
b3:ca:8f:68:5f:e7:77:43:91:b2:8e:0d:31:26:bd:83:8f:2f:
8b:c0:9c:54:38:4e:8f:4d:b2:72:9c:b7:f5:f7:14:04:5d:8a:
f2:05:37:85:49:de:74:ea:cc:63:30:db:73:25:42:93:a4:36:
a8:6b:a6:09:d9:5b:26:4f:d6:1a:e7:08:87:3a:76:82:c9:fd:
29:9c:41:84:b4:ff:fe:6c:5d:8d:6a:d8:66:78:5c:40:ba:a0:
ea:3f:95:49:53:99:04:00:f1:ce:c9:af:56:4f:1b:5c:a2:eb:
c0:55:68:d6:79:e6:59:e1:2e:b7:8f:09:e8:ee:aa:ac:1b:1b:
e7:73:c4:b0:26:e6:e5:5a:d8:33:ca:0b:c6:6d:b2:f8:4f:29:
0b:fd:db:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:35:15 2025 by rpki-client