Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: aAsebAf/cZ26xc0SFDxr0FUsbWGwMmbp/hnvSTmnO9E=
Subject key identifier: EA:D7:E8:5A:68:AB:75:A1:DC:81:73:BF:24:C7:1C:F4:B1:DF:4B:DB
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 0196789F3B17510841A260C44F6335640398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 0426
Signing time: Sun 27 Apr 2025 19:00:23 +0000
Manifest this update: Sun 27 Apr 2025 19:00:23 +0000
Manifest next update: Mon 28 Apr 2025 19:00:23 +0000
Files and hashes: 1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: lv0oQSknFp9V9dr8uqrE6yELIlOuX9v1/eQg5EMIMKM=)
3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:3b:17:51:08:41:a2:60:c4:4f:63:35:64:03:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Apr 27 19:00:23 2025 GMT
Not After : Apr 28 19:00:23 2025 GMT
Subject: CN=ead7e85a68ab75a1dc8173bf24c71cf4b1df4bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:cc:15:4c:29:49:9b:a0:93:51:a4:21:4d:
e4:3a:1d:95:f7:12:32:3c:b0:16:43:bb:31:08:42:
ce:0e:14:f6:2b:24:82:61:92:a3:6f:69:a5:22:2e:
d8:62:f5:09:15:32:48:73:f3:18:27:12:be:5b:05:
c3:ea:cf:39:30:db:84:03:3b:e6:23:9f:c9:b4:70:
87:1f:88:bc:f5:aa:99:a0:f9:11:67:10:cc:38:77:
9d:18:0b:63:51:91:b5:14:b3:71:92:34:d7:ad:20:
29:07:09:e8:7a:21:59:1a:1d:96:50:55:0e:a5:b5:
3e:c6:e6:86:76:08:e5:01:76:6e:fe:bb:b8:43:71:
c9:15:e5:85:1a:75:7b:29:d8:b3:ed:19:98:b5:ce:
af:72:ee:8c:49:86:78:bd:1f:1f:0f:6a:06:84:f9:
64:fd:d1:ed:f3:95:28:41:c6:20:cc:ed:d9:5a:9b:
3a:f8:46:1a:73:e4:28:e7:e9:9a:e9:a4:1f:22:2f:
0e:3b:68:56:70:67:e6:5f:55:52:9c:fc:57:d2:13:
ef:85:ed:db:04:30:ac:12:80:2c:57:bd:be:7a:bb:
2a:16:44:95:3c:fd:1f:99:8b:71:1a:6a:85:f9:97:
de:50:15:30:1f:15:98:df:59:55:43:4e:7a:0c:6f:
46:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D7:E8:5A:68:AB:75:A1:DC:81:73:BF:24:C7:1C:F4:B1:DF:4B:DB
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5a:3c:df:bf:f6:99:94:1f:dc:0b:b8:74:cc:df:aa:8c:fd:
4e:de:18:b3:dc:1d:b5:5a:69:6e:aa:d9:1d:cc:27:b0:7b:6e:
7c:86:f6:44:89:cf:e0:e6:85:24:f2:ef:cf:65:9d:64:d4:a2:
a0:03:ad:b6:3f:b2:5a:92:e6:84:aa:8b:75:38:6a:85:88:fe:
b1:78:e8:62:f7:d5:f6:55:48:6d:b5:7a:5d:33:41:55:76:bc:
94:fa:bb:99:0c:ab:16:2f:9e:c7:e6:aa:3a:63:98:be:4a:23:
82:6a:74:e1:57:78:08:80:f8:f7:19:9c:b9:6a:c7:a3:44:6b:
b7:e7:53:f7:24:7a:b0:de:4b:bc:ed:69:bf:21:fe:e6:03:97:
ee:34:2d:e7:d0:49:9e:81:bb:96:db:6e:ca:5c:7d:2e:d3:85:
8f:e7:be:95:16:21:2d:8c:6b:57:d9:cb:bf:bc:f0:9a:e7:1e:
37:f2:c3:f6:b5:8f:0b:7a:eb:22:60:3b:84:91:b2:55:a8:51:
7a:e1:de:55:b9:81:85:3a:d1:1e:ec:6f:44:c1:0f:ef:d0:f0:
29:22:a0:4c:29:dc:b2:48:75:b4:da:67:7a:66:a4:81:b1:3f:
4a:74:51:44:0b:91:82:a8:ec:bc:b4:4e:11:de:df:86:c9:7c:
80:1b:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:53 2025 by rpki-client