Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
File: ECgK10HnIygIXV-leXqEUfX7Ajg.mft (raw, json)
Hash identifier: bAhsZncThPcPP/aED8i3Q1PtUPmx2VtXoAK28YDcK6Y=
Subject key identifier: B4:89:AF:C7:AE:27:53:6C:0B:C6:93:7C:05:E4:C0:AF:EF:B8:55:96
Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
Certificate issuer: /CN=10280ad741e72328085d5fa5797a8451f5fb0238
Certificate serial: 0196778D22ED01E4036418FE74D7E379FCDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
Manifest number: 0504
Signing time: Sun 27 Apr 2025 14:01:00 +0000
Manifest this update: Sun 27 Apr 2025 14:01:00 +0000
Manifest next update: Mon 28 Apr 2025 14:01:00 +0000
Files and hashes: 1: 0WB7Bx7_enfl066TmQSfosTy_eE.roa (hash: 3RwaEA2cdgjXvhrk9+eNZlduveecPdwtMIhFIo5EmUE=)
2: ECgK10HnIygIXV-leXqEUfX7Ajg.crl (hash: oi1fjeJk6TVlOX0klTi01gdtVpxIktN3lhiE2gzso9k=)
3: fATKMXoOGJ2KbtRcWiMp0a19gZ8.roa (hash: dQx3XShBA2ggohUWFd8E2u2bLxwMwVqrXUUReX+nyv0=)
4: oJELLABa0xvOzeDJ8-0ROcoGDzU.roa (hash: eMpca3L46CdM/yY9Tb5GPWOeeCVHM7SNfiUzaVfbfTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:22:ed:01:e4:03:64:18:fe:74:d7:e3:79:fc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238
Validity
Not Before: Apr 27 14:01:00 2025 GMT
Not After : Apr 28 14:01:00 2025 GMT
Subject: CN=b489afc7ae27536c0bc6937c05e4c0afefb85596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:b4:30:06:54:57:2b:3e:fe:79:d3:70:67:
0f:a7:53:6f:f5:b3:55:f1:c4:5c:58:ec:48:d6:08:
69:d2:51:49:5e:80:e3:a3:c5:db:49:35:92:79:2a:
71:aa:04:a0:20:35:9f:55:27:3d:64:4c:01:26:e5:
c4:1f:b9:fe:36:c2:3f:fb:4f:d7:b8:e5:95:5a:2c:
90:a6:11:fc:98:4f:81:8c:a9:d5:bc:be:55:22:b6:
b6:b5:fa:5a:e8:42:f1:40:90:01:aa:50:33:41:70:
74:6b:ea:7e:d8:c3:f6:d5:a8:e6:97:9d:16:5f:5d:
ac:c1:ee:bd:9e:e5:cc:1c:70:95:a5:ac:8a:20:d6:
15:83:53:fd:30:ce:d3:6b:bc:79:ed:1e:7a:75:7b:
27:7b:3e:e4:b4:1b:9b:b4:80:cb:6b:0b:92:5e:4c:
6e:bc:60:89:f4:b0:b3:36:31:53:30:b9:52:ae:b6:
5c:12:4f:43:d0:81:68:c7:26:e3:55:d9:96:73:a3:
cd:0a:14:89:e1:d6:9d:49:5b:83:f3:6b:88:8b:6d:
68:1d:9c:d7:39:64:0c:4c:af:c0:8b:4b:04:83:0d:
cf:b5:ae:3c:82:f0:d6:1f:fa:c5:52:81:10:0f:62:
ad:58:b7:d3:c0:d9:b6:25:69:c3:d3:db:b0:e9:c6:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:89:AF:C7:AE:27:53:6C:0B:C6:93:7C:05:E4:C0:AF:EF:B8:55:96
X509v3 Authority Key Identifier:
keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:78:b9:c1:4e:68:1d:42:6a:4c:2b:0d:ed:50:06:25:36:5d:
65:82:40:e1:60:db:17:62:b3:e8:5b:3a:17:95:e9:b2:7c:66:
e5:d9:84:bb:5f:ca:75:90:05:8e:cd:60:b8:9b:92:5a:a3:27:
d3:c0:0e:c8:26:56:d8:b5:18:20:5d:e5:ff:d0:09:b5:e6:57:
49:84:7f:e1:3a:13:b2:39:7d:f0:ef:da:42:c1:83:33:0d:ee:
9f:41:94:2c:7d:f5:ca:ad:75:24:a1:07:9a:56:5a:f3:b3:c4:
b5:0c:ed:99:9d:80:20:19:f6:fe:44:48:e4:97:82:a0:29:a8:
6f:a7:95:4c:d3:2e:cc:f0:68:71:23:9e:17:00:26:65:27:a7:
5a:ce:bd:7a:28:6e:c9:bd:ee:dc:6e:a5:d6:88:77:51:a7:f8:
ef:57:61:3c:c5:6f:9b:34:47:9c:78:7c:e2:5a:0b:b7:00:3c:
63:4a:27:77:1a:aa:6d:77:b4:45:41:7e:90:72:83:34:08:5d:
4c:31:76:2e:c4:97:7a:9e:e9:ea:fe:c9:24:fe:1f:f7:34:3c:
99:5e:cc:d0:3b:c3:c7:ab:92:4a:16:cd:5e:b3:e0:67:17:4b:
45:73:1e:57:45:36:8a:17:37:23:54:a4:df:f9:02:16:20:fb:
5a:c9:68:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:44 2025 by rpki-client