Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File: idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier: LLA+XhuAU3b3tb5/RRdPJ0VNhp7DVGaPHkpaTe30cCA=
Subject key identifier: 39:ED:17:04:83:EC:57:FB:40:24:6B:B4:3A:AC:DC:57:56:15:98:73
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 019676B0C94A03FA3BD5035D320B0C52B8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number: 153E
Signing time: Sun 27 Apr 2025 10:00:19 +0000
Manifest this update: Sun 27 Apr 2025 10:00:19 +0000
Manifest next update: Mon 28 Apr 2025 10:00:19 +0000
Files and hashes: 1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=)
2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=)
3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=)
4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=)
5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=)
6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: aAD+9bj7KIKfGiSLxLm3JqlGK1plASqxUDVNujR2xqo=)
7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:c9:4a:03:fa:3b:d5:03:5d:32:0b:0c:52:b8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Apr 27 10:00:19 2025 GMT
Not After : Apr 28 10:00:19 2025 GMT
Subject: CN=39ed170483ec57fb40246bb43aacdc5756159873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:f4:b3:13:01:29:f7:83:60:c0:40:0a:f5:
e1:9f:ff:8a:43:b1:22:9c:ba:a3:27:bd:9a:e6:9f:
19:55:a5:8d:1b:03:f3:fa:56:52:be:67:cc:06:48:
78:02:a6:8f:94:3a:91:7f:9c:c6:1c:d1:c1:3e:f1:
e0:0b:26:8c:56:50:f7:17:c7:fe:23:24:00:2a:3f:
6b:ad:30:95:99:e4:70:12:e3:5d:e7:03:8a:ea:a1:
86:d8:9d:2b:c1:96:30:88:d9:da:06:53:3b:36:ad:
c9:56:bb:d4:ef:d6:9b:0d:4b:12:24:67:8c:aa:56:
07:cd:11:46:ca:69:23:40:9f:51:fb:8d:f8:df:7c:
9b:e0:3d:46:35:8a:01:20:56:eb:f7:ae:bc:0a:93:
f9:62:6d:a7:13:a9:02:da:5a:f5:f3:5b:99:d8:25:
11:d4:1e:53:5d:65:b7:c4:e9:6e:62:e6:56:e3:41:
7a:17:bf:64:7e:2f:7b:a8:f5:47:da:fa:ae:b5:86:
85:0d:de:1a:01:0c:3f:7c:40:73:97:6a:4b:7e:cb:
bc:01:16:2e:b4:b4:cf:b2:09:d1:40:e6:d3:54:7b:
13:9a:f9:26:87:cb:4b:e9:b8:76:7a:e8:3d:c5:81:
4a:6d:bf:27:3d:42:6b:c3:e2:6a:21:8e:51:da:ee:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:ED:17:04:83:EC:57:FB:40:24:6B:B4:3A:AC:DC:57:56:15:98:73
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:19:bf:0a:4f:6c:95:6d:97:87:eb:74:b7:bb:c1:d7:f1:37:
29:10:28:cf:e9:5b:72:bc:00:ea:5a:c0:fd:af:d1:79:57:75:
19:37:6d:2a:f8:bb:5b:2e:84:ac:c9:d0:1c:ed:a2:90:f3:c3:
28:9f:a3:49:92:71:a1:5c:5c:23:f9:d1:67:19:7a:a0:b3:2a:
03:20:0b:61:38:00:15:51:c3:93:c6:02:62:08:35:0a:06:df:
20:f0:16:1d:39:3d:57:39:85:52:8c:5d:3a:78:e5:6d:b2:b9:
4f:1b:af:c7:44:43:9b:f3:ee:28:ed:2e:99:37:12:ca:55:c2:
79:db:bd:8b:eb:9b:56:cd:00:a2:f5:2b:d1:d2:77:dc:f6:a3:
bb:7c:8d:16:58:8c:a8:1a:75:60:30:6f:45:4c:43:26:8c:2e:
64:78:22:c8:8e:2d:a5:01:94:e1:ee:ea:70:b9:99:b2:9f:79:
1b:f6:4c:55:ac:f0:6d:13:03:41:bb:1d:be:be:42:8a:09:fc:
30:48:16:87:a8:9e:6c:60:a3:99:48:29:49:40:7d:1e:9f:4d:
4a:7b:0d:1e:97:0c:8e:c6:12:0d:ce:1b:a6:89:0c:89:77:be:
fb:58:db:a6:b3:27:fc:2f:b0:15:c5:24:c0:36:96:71:97:4f:
cd:c4:f3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:23:54 2025 by rpki-client