Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
File: E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft (raw, json)
Hash identifier: HFnm/VkTVsfGI3gIadedtM5WEU+oPt9QNEQPQ7EYuXk=
Subject key identifier: FF:BE:0A:2A:85:B4:53:B3:85:2F:A8:B3:29:B4:AD:6B:25:72:FA:71
Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
Certificate issuer: /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Certificate serial: 019694BB830C1EB6ED86FE3DBEBBFCBE2842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
Manifest number: 0CA7
Signing time: Sat 03 May 2025 06:00:38 +0000
Manifest this update: Sat 03 May 2025 06:00:38 +0000
Manifest next update: Sun 04 May 2025 06:00:38 +0000
Files and hashes: 1: 8uZf_YXrnrFcX5OGm1hy0aMncrA.roa (hash: FJ+rC+vSFCLpeii+a3s75dE3+VofCsTHLoOQv8k1S8Q=)
2: E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl (hash: EIOe7tnL8E75+BxxxbC1ip4ISRa0Vsw+00cPRBFl6lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:bb:83:0c:1e:b6:ed:86:fe:3d:be:bb:fc:be:28:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Validity
Not Before: May 3 06:00:38 2025 GMT
Not After : May 4 06:00:38 2025 GMT
Subject: CN=ffbe0a2a85b453b3852fa8b329b4ad6b2572fa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:94:03:b2:a8:2b:18:07:14:67:68:1f:ab:
f1:8a:b1:c5:4a:ff:7a:fb:24:61:09:1c:44:2b:17:
c9:37:a3:96:29:ea:a7:92:0c:47:95:13:61:6c:0f:
51:1c:71:cd:3b:4e:13:11:e7:ab:8d:0c:b6:51:2a:
89:72:e4:f8:ad:06:d3:e1:f0:0a:bf:ae:70:90:32:
bc:eb:4a:64:5f:c5:56:90:4d:7e:26:48:ae:5f:15:
80:c4:92:c9:cd:0d:06:a2:a9:47:a0:3e:0a:31:7b:
74:f2:57:73:76:ff:76:75:da:e8:b7:2f:10:e2:3d:
6a:e9:87:98:c1:f5:88:c3:b5:53:ba:2a:1d:1a:11:
96:c8:cf:d3:c0:61:bb:ad:60:0a:86:35:a5:cb:8f:
22:18:09:06:5d:0b:93:c7:b0:d1:92:55:62:0b:b1:
b3:27:0d:ec:17:d4:bb:23:de:4f:61:ef:89:b6:c5:
e5:53:d2:d0:ae:38:45:e5:19:13:d9:5a:cb:1b:7a:
6c:43:a8:a4:56:3c:9c:95:7d:02:bb:0f:9d:42:b6:
8f:a1:fc:b2:4e:db:32:a5:0e:5d:62:09:e2:e4:9f:
12:56:93:bf:bf:e0:5d:7c:27:b7:0c:55:02:83:e3:
71:72:bd:5b:6f:f8:99:f1:ac:6f:45:d8:65:a8:d4:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:0A:2A:85:B4:53:B3:85:2F:A8:B3:29:B4:AD:6B:25:72:FA:71
X509v3 Authority Key Identifier:
keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:42:bc:7f:c5:5f:a1:9d:76:9d:c1:69:38:7f:31:42:c8:10:
a2:18:6c:7e:cf:04:50:7e:b1:06:15:69:fb:24:7f:46:69:1c:
89:47:54:be:30:08:0c:f5:a3:4f:0e:45:66:fa:03:d9:50:d1:
77:16:93:3d:2b:2b:a8:8f:2a:8d:84:c3:74:5b:f1:73:88:a5:
e9:5e:00:ef:a5:ce:f7:09:6d:bd:0f:78:35:b4:0e:11:3b:84:
95:2b:00:52:a4:78:f0:ee:03:bb:6c:17:86:08:1a:e4:53:3c:
3a:74:68:6d:59:3f:fa:21:7f:c7:8f:fe:20:23:cb:35:72:d2:
e3:55:eb:af:64:3e:3e:9f:24:f6:0f:b3:b4:3a:ce:77:3a:b9:
48:82:39:7e:cb:69:73:c1:85:3d:53:af:3b:7d:fb:72:d9:b8:
02:66:fe:e4:f7:a2:52:d1:5b:c2:f5:d9:31:7c:5d:bd:94:dd:
8f:72:94:37:e5:50:f3:26:d9:81:e4:77:cd:98:f7:57:d7:e1:
2f:de:03:24:2a:37:3c:17:53:7b:5b:7c:72:ce:45:21:8c:a2:
6e:5f:0d:45:40:c5:81:2e:8c:5b:7b:42:e3:ee:52:47:e9:c3:
50:7c:d0:f2:88:b4:cd:26:97:b8:b2:80:2c:da:24:90:bd:d4:
dc:a8:66:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:41:02 2025 by rpki-client