Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: 79i/fQZTOWBhvQmrUdUdiGsDCYopsJ5rvPzJFy3Crio=
Subject key identifier: DC:14:C4:E1:CA:5C:EC:48:A5:6D:D8:C6:95:89:4D:74:C0:1D:2F:7E
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 01968B134EC3B532E2611DE85CB9A633E712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 0255
Signing time: Thu 01 May 2025 09:00:20 +0000
Manifest this update: Thu 01 May 2025 09:00:20 +0000
Manifest next update: Fri 02 May 2025 09:00:20 +0000
Files and hashes: 1: HeJAD4YHm_sJaYZYcU9XbBvO2ZQ.roa (hash: X87UHvfB+nlPvI0ZCTJdcn/R8oWH+T+ddbzxZs7Ye8A=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: e6NvnlvRqdF1JJNSVhtiwTl6qRLdpm7nOdPzbymPp5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:4e:c3:b5:32:e2:61:1d:e8:5c:b9:a6:33:e7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: May 1 09:00:20 2025 GMT
Not After : May 2 09:00:20 2025 GMT
Subject: CN=dc14c4e1ca5cec48a56dd8c695894d74c01d2f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:10:40:de:a0:93:ea:93:e6:57:18:86:1d:
81:39:d9:a5:e2:de:cc:f6:02:e2:6c:00:de:7e:1d:
57:ba:ad:1c:a2:41:52:cb:84:ea:09:29:a1:be:a7:
42:82:67:5a:c8:bf:24:48:57:ed:ca:10:7c:d5:30:
65:01:8f:00:3f:c6:67:5a:41:93:68:c4:cb:67:2a:
4c:26:65:e8:9d:af:13:6c:9d:77:c2:22:40:39:6e:
a3:d9:22:31:bf:2e:b9:87:25:b6:d8:bb:9f:97:93:
15:69:3e:9b:c6:84:e8:5d:43:09:9f:ae:22:3d:bc:
8f:d6:55:99:df:13:00:ba:9e:b6:4f:fb:e3:05:d7:
ee:45:b6:3f:fa:4e:73:bf:ea:77:9d:06:7a:cc:0a:
eb:a0:90:da:15:ff:84:1e:d2:64:dc:34:c7:8f:1f:
a0:32:c0:96:f2:bd:09:10:1b:a8:ad:a8:60:78:01:
13:00:8d:b9:36:b5:91:13:09:4b:ba:45:ac:89:d7:
c4:d7:a0:c8:18:11:d0:22:66:e3:6f:f8:e2:76:43:
1c:0e:36:1e:67:53:8c:7b:f8:75:56:32:ac:7c:92:
b7:d6:42:fc:24:7b:92:f2:1a:1c:ea:b8:f1:a3:3b:
98:9a:1b:97:8d:3b:0e:77:00:3e:3a:4b:1f:98:8b:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:14:C4:E1:CA:5C:EC:48:A5:6D:D8:C6:95:89:4D:74:C0:1D:2F:7E
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:20:c3:8d:3f:4c:5b:d2:01:06:3a:d5:ca:06:59:c5:21:82:
10:42:16:37:77:6c:07:f7:3a:d9:6f:7f:1e:db:06:fa:ef:2a:
2d:7c:1d:ae:3f:73:08:4a:50:d2:e2:31:16:e5:c5:04:12:f2:
c3:9e:c4:ff:4a:bb:9b:89:37:7c:8b:9a:79:7a:19:37:dc:6c:
f4:76:cf:89:17:1b:83:cd:98:40:2f:98:81:d4:a3:50:74:aa:
2c:90:36:c8:3a:14:85:af:1f:24:fc:90:cb:d0:69:2d:ae:b6:
61:16:5b:30:83:59:10:62:7f:de:7b:77:67:f7:6f:72:03:13:
97:49:a0:e4:15:18:e8:ee:3f:03:85:50:95:0d:7e:f0:82:9c:
6a:29:e0:7c:98:bf:10:61:72:8b:b7:d7:e9:68:de:42:19:de:
3a:d7:da:96:6b:f5:8b:65:44:f7:15:0f:74:d3:3e:7f:cd:5b:
6e:54:1a:12:c0:3b:f9:e1:fa:69:f4:ea:91:b1:16:58:1f:f7:
61:eb:9f:01:e4:38:f6:83:b6:1f:1d:e0:ad:dc:a7:4c:de:18:
c4:51:64:b4:3d:1d:da:ea:7e:b4:3a:8f:5c:62:71:c6:1d:d9:
ea:84:16:6f:10:74:c4:e5:7f:52:27:20:72:26:7c:2c:54:17:
87:ad:62:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:38 2025 by rpki-client