Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File: eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier: 7iMH2/tEBrGJESihsBBIq4FHDDnIMswzyTWsHlHKz9Q=
Subject key identifier: A3:5F:3D:97:51:D4:45:DC:F2:3D:80:B7:C1:45:81:E5:8B:7C:90:87
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer: /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial: 01967E334634CD6C34DD8BFB71B77C7F7836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number: 09BD
Signing time: Mon 28 Apr 2025 21:00:11 +0000
Manifest this update: Mon 28 Apr 2025 21:00:11 +0000
Manifest next update: Tue 29 Apr 2025 21:00:11 +0000
Files and hashes: 1: 5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa (hash: voEtz6mEruRpxmdJ50z2YHPNPHZIPj+18ktBBGi8uuc=)
2: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: joK1zmRACaPZ9ZRIYTcath7tKUOWZGELJDOUkM/On6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:46:34:cd:6c:34:dd:8b:fb:71:b7:7c:7f:78:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Validity
Not Before: Apr 28 21:00:11 2025 GMT
Not After : Apr 29 21:00:11 2025 GMT
Subject: CN=a35f3d9751d445dcf23d80b7c14581e58b7c9087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:07:4d:a4:ff:63:1e:f8:6b:57:bb:03:1c:
91:c8:6e:cf:40:56:ac:80:dc:86:98:47:b0:51:c7:
9f:f5:88:79:96:38:80:45:25:52:06:6d:0a:17:60:
e3:9e:29:49:c5:28:d5:ba:f5:a6:bf:60:84:f2:92:
33:2a:70:c8:94:76:da:80:d8:cf:59:bd:ef:0c:9d:
d1:ef:eb:f2:87:cc:d6:9f:f7:95:f0:be:44:08:ca:
22:4e:ae:c3:25:9a:e6:c4:bc:4a:57:c9:9d:a4:37:
b7:a5:4b:d3:95:08:39:84:f6:aa:42:f8:cc:fb:39:
e6:65:3a:14:43:9b:2c:35:b3:52:56:6e:f8:e1:72:
8b:2c:b2:fc:88:2a:77:88:94:20:c7:bd:2d:37:34:
34:49:8f:81:b7:f4:42:a1:5a:70:7f:5c:fd:1e:ea:
2d:37:c1:3b:d3:22:9e:02:86:9d:8e:d5:5a:0b:17:
a5:5d:5e:7d:c8:5c:01:d4:4f:76:95:94:67:84:6f:
ec:38:d1:56:0f:c9:11:7d:7b:54:cb:08:78:8b:10:
31:18:43:f8:5f:f6:61:ef:85:8d:f9:e0:9f:b5:4a:
12:d7:53:c5:7f:9a:c5:2e:ae:74:1e:0e:8e:d8:a7:
68:d7:fc:c3:61:03:41:33:39:c7:92:f9:8d:49:e0:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5F:3D:97:51:D4:45:DC:F2:3D:80:B7:C1:45:81:E5:8B:7C:90:87
X509v3 Authority Key Identifier:
keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2b:5b:fb:05:24:86:fd:2d:ea:59:82:da:22:9e:e3:d3:24:
17:ff:20:19:11:cd:62:40:c3:75:c8:a7:f3:02:f2:12:dc:ef:
48:69:b5:69:bd:4f:f5:9c:f5:e2:8c:cf:a9:24:0a:09:e8:92:
35:a4:c7:fd:a8:35:cf:9b:a3:5d:63:1e:b4:f1:53:e2:8e:06:
c2:1d:6c:1d:40:65:80:cd:2d:d4:16:08:de:ae:75:c3:8d:42:
a9:95:4a:2a:7e:85:4a:b4:22:bf:71:89:f1:7f:93:0b:c3:ed:
c6:9f:c3:25:b8:c2:e7:3f:27:61:ec:5b:41:8d:a6:4d:00:b4:
53:40:0d:da:7d:06:80:7f:43:12:7c:8a:1b:b0:c8:5f:6a:95:
67:74:c6:da:2e:04:27:2c:d8:17:85:6e:47:5a:5a:8e:f3:bb:
e2:9f:18:64:b7:b4:c9:9c:80:b8:93:3c:cf:0c:ad:24:fc:a5:
76:8b:32:0b:de:af:2a:bd:50:da:b6:06:e7:ff:e2:3d:a9:0c:
52:40:7d:af:cf:26:bb:20:57:c9:87:61:1a:b3:ba:05:29:7e:
6e:8a:39:c7:cc:5c:a4:13:ba:b4:ca:69:3c:3f:49:71:9a:b6:
83:68:6b:48:dc:4f:86:c8:49:60:03:f0:70:bf:45:3f:b0:d5:
d5:c2:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:02:05 2025 by rpki-client