Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
File: EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft (raw, json)
Hash identifier: TYu6ayh1vo+7gDgteNYATnCWvGyc5yFu2Jf70rIfMTg=
Subject key identifier: AA:78:5A:09:E8:A3:00:EA:F2:1C:37:EF:C8:32:14:58:D4:D8:1E:A9
Authority key identifier: 12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
Certificate issuer: /CN=122a541caf138341bd32798940de206052910341
Certificate serial: 01967D20B9EE52A5A5506AB14F7E241B9CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
Manifest number: 0B94
Signing time: Mon 28 Apr 2025 16:00:18 +0000
Manifest this update: Mon 28 Apr 2025 16:00:18 +0000
Manifest next update: Tue 29 Apr 2025 16:00:18 +0000
Files and hashes: 1: EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl (hash: 3nsMzO2Bav8utpMrYCy4Id8Hi2bk9xyqaU3LlYCi/oE=)
2: N9zcYe5ReKGYCwNwcNWVqIdGiS0.roa (hash: VpzrJQRuZQfy5BAF/SwMEyOY3wzqdR1C+GvTYF7gE24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:b9:ee:52:a5:a5:50:6a:b1:4f:7e:24:1b:9c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a541caf138341bd32798940de206052910341
Validity
Not Before: Apr 28 16:00:18 2025 GMT
Not After : Apr 29 16:00:18 2025 GMT
Subject: CN=aa785a09e8a300eaf21c37efc8321458d4d81ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:aa:2d:e4:c2:75:23:15:d4:51:1b:ea:7d:
fd:c6:55:56:d6:6c:b7:35:71:2f:97:00:7d:58:a3:
a2:df:91:60:da:df:b4:77:3d:b4:f8:62:55:cb:aa:
3e:d0:a3:a2:ad:04:a8:53:23:75:28:70:55:dc:5e:
70:90:e5:14:56:74:8a:96:e9:a2:4f:10:b3:5e:60:
2b:09:61:73:d5:69:98:f9:81:9f:2a:28:58:5a:9e:
48:8f:a1:ee:fe:1a:e5:78:a3:13:9a:9a:28:7a:1c:
4e:f0:07:3e:31:b2:fc:f7:44:9d:51:95:27:c1:46:
02:8e:52:e3:c4:b0:07:d9:22:58:0a:06:d7:75:38:
42:0c:7f:f4:f3:53:6d:d0:79:68:9a:80:cc:98:96:
57:ff:02:72:00:85:36:af:58:9d:a4:59:49:5e:7d:
7e:7c:e7:58:71:69:fe:7f:e6:9f:8c:59:a2:40:8b:
ed:4a:6d:bf:ce:84:49:e5:70:9f:94:88:66:6b:70:
45:8a:03:3e:b8:af:a7:4e:24:61:0a:c6:91:36:11:
ee:dc:52:d2:6d:b2:e2:30:bd:4f:3c:54:68:05:d4:
b0:4d:c2:75:b4:0b:a3:e8:0b:ab:b7:fe:88:ca:fe:
dd:3a:ea:7a:8b:eb:4f:4f:cf:e2:89:70:6c:6a:75:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:78:5A:09:E8:A3:00:EA:F2:1C:37:EF:C8:32:14:58:D4:D8:1E:A9
X509v3 Authority Key Identifier:
keyid:12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9a:66:bf:a7:58:e4:a8:38:d2:f6:b5:a8:00:8e:8e:c5:96:
07:31:8d:d7:ad:26:db:e7:50:ed:c3:36:9d:87:99:11:a6:50:
85:c7:4a:61:2a:72:70:95:a3:fd:8b:55:6b:22:25:79:24:ac:
7e:f5:15:35:9e:f4:4a:21:89:d8:dd:81:f7:8b:7c:72:3b:b3:
ae:32:a8:ef:83:ba:bc:e6:74:1d:77:7b:e4:3d:f3:9c:9c:d2:
1e:73:db:f4:f8:fd:fa:2d:9e:02:fe:38:16:8b:b6:2c:34:6c:
29:e0:42:b9:72:f0:98:41:23:b9:1c:99:94:69:6c:51:01:cb:
95:56:27:02:1a:90:fa:d3:b7:bd:b8:ff:0a:40:3c:5f:c3:50:
24:6a:3b:2d:7b:ed:c1:55:ba:79:f1:8d:a7:86:28:b3:fa:eb:
72:50:7e:b9:69:44:96:56:ea:b2:e2:46:8a:19:16:11:02:47:
91:1b:d9:f1:57:13:b0:13:13:cd:c4:29:e9:05:f0:4c:4c:49:
15:c6:a2:39:55:49:ee:c1:94:b8:b6:24:31:8d:54:3d:8a:00:
f6:87:c6:a4:f1:06:0a:b6:66:94:a2:06:d1:a3:22:a9:54:34:
a5:45:05:5c:f1:7e:ce:af:13:9e:d8:11:bd:a5:5f:fe:51:8e:
c6:33:e4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:04:59 2025 by rpki-client