Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File: egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier: MTSsNPLxNrZYVGur5cqt0WUXALqIVerOHOnhtGNOKj8=
Subject key identifier: DA:1B:FE:22:67:9D:65:22:0E:6E:A4:8A:F8:72:B5:5A:15:0D:EC:45
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer: /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial: 0196816B9C1148825D4DA2C29FAA4FD80F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 12:00:35 +0000
Manifest this update: Tue 29 Apr 2025 12:00:35 +0000
Manifest next update: Wed 30 Apr 2025 12:00:35 +0000
Files and hashes: 1: RHlWpFi-cDo-cyvs-sRaiXiZbg8.roa (hash: 1PWadJWZ+l1enHDdWPnllLiQPr55+3WUCTN9xqnYDuA=)
2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: d2n5AfIfF+7jwVFJJKYKYHKD4DFOUJxBTXxo608K/+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:9c:11:48:82:5d:4d:a2:c2:9f:aa:4f:d8:0f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Validity
Not Before: Apr 29 12:00:35 2025 GMT
Not After : Apr 30 12:00:35 2025 GMT
Subject: CN=da1bfe22679d65220e6ea48af872b55a150dec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:da:cb:77:49:27:2f:01:7f:4a:10:8d:98:
bf:b8:f5:65:2c:e1:39:26:6e:7c:2b:ae:e4:db:45:
ff:71:8b:b1:bc:9d:c8:54:ad:2f:a9:00:27:3d:df:
9f:57:9d:6d:60:25:f2:4b:e0:f7:33:5c:d7:fb:86:
d4:a4:29:4c:ae:e7:93:87:f6:4c:85:b7:13:44:d0:
d0:17:40:fa:41:6a:89:95:c0:d1:ad:b5:19:7a:14:
31:05:9b:30:0a:a0:3d:9b:52:a6:7e:2a:eb:9e:0e:
db:9b:22:9b:10:8e:4f:ee:4a:37:12:86:93:55:0c:
2c:9d:cc:ff:ae:9c:48:11:2c:03:2d:f1:0a:38:b6:
ac:fe:3c:f5:f9:ce:a2:91:85:40:d1:46:40:16:ca:
da:68:ac:7b:21:09:d7:43:dc:ed:76:88:cd:83:9b:
fa:5b:d5:f5:85:1f:90:1a:82:8d:e5:ad:e8:0e:aa:
89:77:7a:72:17:f0:c2:5b:49:2b:05:e0:e1:e0:0b:
7f:86:87:55:7b:a4:18:a6:a3:45:01:a0:72:19:ec:
bd:b6:31:7a:93:a6:94:2f:d1:f2:70:ca:1e:49:0c:
ba:0c:13:60:4d:11:c2:0b:62:76:97:f3:db:62:e3:
02:df:4f:94:cc:31:65:10:39:40:04:5b:9c:6f:e3:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1B:FE:22:67:9D:65:22:0E:6E:A4:8A:F8:72:B5:5A:15:0D:EC:45
X509v3 Authority Key Identifier:
keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:38:7d:3d:59:56:b8:1b:3e:af:7e:3f:ca:33:b8:f2:17:b7:
52:51:14:89:88:75:03:00:67:45:60:c0:5d:4d:e9:68:62:33:
47:30:a1:eb:2d:7d:59:75:f1:d1:47:6a:ff:69:ae:3e:e0:43:
ca:18:21:d9:47:e1:37:b9:49:d7:6e:c4:07:30:6a:49:35:35:
d6:6e:8d:d9:e1:a3:51:6e:16:63:62:93:d6:4d:6a:e9:8e:8b:
70:e8:e1:62:b4:8c:e6:a5:d9:fd:d3:38:6b:0c:7f:8c:43:8f:
78:12:ad:1a:20:82:fd:6f:d8:58:12:fb:97:8e:d9:8f:33:8c:
3b:89:80:89:a3:93:b9:b4:a4:c9:e7:c4:4e:f5:d8:ec:6c:0c:
9c:69:34:e4:c7:f7:d8:4e:05:ef:62:51:66:1c:9b:45:7f:d2:
94:e1:46:bf:55:fd:3e:ee:19:1d:f5:00:96:16:27:9f:8a:37:
d4:ba:2e:8d:71:f9:e7:2b:7e:4a:61:52:2b:54:29:92:29:45:
bc:33:cd:27:5f:dc:54:8b:b4:67:ee:4b:32:99:ab:12:08:4b:
ad:08:93:4b:b2:7c:0e:bc:df:8c:63:a0:f1:e9:3c:27:3e:b4:
f7:94:4a:45:32:ce:89:9a:f8:36:0b:44:47:8b:2f:17:d3:c1:
c8:3f:2d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:20:10 2025 by rpki-client