Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: eNupk+UStcDBhRhV82WkSUPykJn5J6Sl5UrNBhu6bWk=
Subject key identifier: 68:2B:5F:14:AD:1A:75:8B:A4:C0:AB:C0:AA:B7:2A:CE:0C:D0:34:AF
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 01967B32A69273154B5140E4C81592DB8AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 1519
Signing time: Mon 28 Apr 2025 07:00:39 +0000
Manifest this update: Mon 28 Apr 2025 07:00:39 +0000
Manifest next update: Tue 29 Apr 2025 07:00:39 +0000
Files and hashes: 1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: DnsMk64mM928G5O2usHP2IfE0uHJKen+RC6MuEFSa10=)
6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=)
8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:a6:92:73:15:4b:51:40:e4:c8:15:92:db:8a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Apr 28 07:00:39 2025 GMT
Not After : Apr 29 07:00:39 2025 GMT
Subject: CN=682b5f14ad1a758ba4c0abc0aab72ace0cd034af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:d3:e2:dd:85:25:ae:c4:61:3d:10:72:c7:
bf:72:34:2f:d9:10:f9:ff:af:66:57:4a:70:12:0c:
5f:fc:b9:00:cb:8d:65:1c:01:ab:8b:06:a3:87:06:
b9:4b:1d:1d:67:71:f0:a8:a4:cc:91:db:ee:e3:76:
21:8f:d0:39:8a:18:a4:03:a7:04:d4:27:cb:bb:6c:
3f:29:20:50:e5:ac:1a:dc:1c:b6:33:73:8e:0e:1b:
bb:f7:9c:4a:33:90:7b:08:be:16:e3:6b:7e:e0:d1:
12:5f:88:cb:13:1f:53:bf:ee:63:9b:70:e1:5e:74:
6b:0e:be:a7:b6:0e:8c:67:5c:70:29:6d:e4:43:69:
b1:00:95:14:77:14:2f:2e:84:46:f4:93:54:66:73:
ac:5f:7f:e4:dc:e2:68:90:1e:38:db:db:07:21:b5:
ee:10:13:da:28:46:0a:6c:be:bd:b2:00:12:85:35:
7d:4b:c8:cd:3f:b5:8b:53:a6:27:53:09:d0:99:97:
17:60:17:ea:f8:f5:80:92:34:e1:07:f6:3e:ed:7e:
70:bb:9c:b9:55:0e:e9:ba:2a:9c:ed:7c:d6:60:8b:
5e:af:44:1a:c1:c4:6d:0f:81:cc:70:70:f7:69:56:
22:83:83:ff:cc:c7:2d:f8:77:39:a4:55:b9:01:de:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2B:5F:14:AD:1A:75:8B:A4:C0:AB:C0:AA:B7:2A:CE:0C:D0:34:AF
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:73:fe:a4:7d:4a:29:d0:7a:59:99:61:57:65:e4:ec:ac:52:
01:e9:85:59:a6:59:7e:3a:88:37:a4:4b:eb:ef:df:bc:a7:a0:
fb:6e:49:52:ca:96:cc:6f:73:02:92:1a:21:a2:b0:2d:d8:c1:
0f:44:9b:8c:8a:5c:71:7d:16:b4:ce:3e:38:30:94:bd:e2:80:
f7:ab:e3:92:f8:15:d6:64:57:65:f8:e0:06:9f:81:f3:44:44:
18:f3:7e:fc:5d:a1:fc:ec:1e:cf:b3:d0:94:cc:a6:3d:bc:6c:
2d:34:e2:46:38:b8:22:70:ac:53:13:6d:1b:fc:65:2d:b2:1f:
cb:dc:11:6e:c9:7c:58:7c:a3:6f:8f:e3:da:4d:53:c1:dd:3c:
8c:3b:42:ff:4e:76:af:b1:cb:e2:15:54:6e:84:73:50:7b:3e:
44:da:78:df:22:b4:bf:90:79:20:01:6d:16:dd:dc:4d:67:bc:
c0:7a:62:22:df:93:ad:10:06:ad:13:22:0c:7d:ea:fb:9e:00:
e0:0f:31:f4:c0:f9:b6:72:88:e7:bb:75:5e:a3:f1:27:75:57:
ea:04:3f:5b:b5:d5:27:30:18:01:e3:d8:3b:f7:68:f1:18:1c:
ac:e1:a2:a5:6e:76:4e:72:7b:73:eb:de:32:ad:f3:87:3b:4d:
be:09:66:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:35:50 2025 by rpki-client