Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: vyEHnO5PfS4I0nm4kPABvqB28OrxScqAzAnD4oCodn8=
Subject key identifier: 0A:15:DC:06:95:9C:E5:BC:BD:96:B7:70:0B:53:3D:05:34:32:15:04
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 0196C1943C4CAE3B1CA4F809B29A7FEF33D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 23:00:39 +0000
Manifest this update: Sun 11 May 2025 23:00:39 +0000
Manifest next update: Mon 12 May 2025 23:00:39 +0000
Files and hashes: 1: HCkGRctLJ1ePeWXWFjnQs-P5BH0.roa (hash: tw5rYUuFpBr4QpbNuBNtp2/1hdw23rZNSzLDyhsXnAY=)
2: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (hash: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=)
3: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: pU1OVW9BYKuhWZEyQP9i4kdURIKy8ikKM3qDwA97yjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:3c:4c:ae:3b:1c:a4:f8:09:b2:9a:7f:ef:33:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: May 11 23:00:39 2025 GMT
Not After : May 12 23:00:39 2025 GMT
Subject: CN=0a15dc06959ce5bcbd96b7700b533d0534321504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:09:09:bb:cb:bf:54:89:37:af:ec:ef:b9:
b1:40:6d:3e:ea:5c:77:0a:73:f9:96:0d:83:5b:46:
85:b1:41:2e:37:ff:26:38:13:ba:00:e5:fb:e2:55:
10:38:cc:5b:e3:0c:72:56:51:dc:fd:a2:1f:c9:db:
6b:c7:04:e3:48:ea:56:58:da:0e:da:6a:69:cf:77:
d1:79:a3:b9:6f:9f:cb:01:3f:43:c0:aa:1b:36:b2:
8f:9e:53:cc:81:a7:37:cd:5d:cc:7f:d4:cf:ce:bf:
e8:d0:8a:5a:72:ac:3e:6b:e1:bf:5a:40:36:9f:ea:
2f:bc:2d:d4:b6:5f:f9:aa:1c:0f:6e:e8:6c:4f:9b:
5d:46:53:19:46:b3:6e:f7:19:5c:86:4c:8a:a9:32:
5e:9a:75:6e:2b:db:09:8d:7a:0b:63:fa:2e:67:68:
d6:bb:e8:7a:f8:f5:71:ea:80:33:db:d6:97:64:e2:
0f:dc:cb:34:28:c1:bd:0c:be:70:aa:59:32:60:e5:
4b:34:88:21:3f:55:0d:a2:28:25:73:71:3b:4f:67:
94:a9:82:64:68:31:98:5d:0e:e9:77:b3:e3:3a:5c:
89:5c:86:fa:a7:42:a7:d9:71:f3:74:b7:72:95:cd:
b8:1e:01:e8:6a:8a:e7:ef:59:0f:ce:c7:11:96:52:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:DC:06:95:9C:E5:BC:BD:96:B7:70:0B:53:3D:05:34:32:15:04
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a3:a7:5c:96:2e:b9:09:98:f4:f6:05:c8:aa:69:4f:37:b2:
6a:c7:fd:02:e2:33:4a:05:9e:ce:59:11:04:b3:7b:bd:3e:c9:
ae:03:53:f8:53:fa:66:d2:d8:39:35:d1:40:ab:55:cc:ee:38:
d8:f9:09:c6:46:0d:b3:12:b2:11:f0:e4:f1:f8:3b:5e:3c:02:
53:5f:a5:b8:88:55:7c:99:51:bf:33:48:1d:72:83:57:72:e0:
ea:82:fa:fa:a8:88:26:80:60:71:aa:01:fa:58:99:0b:37:93:
9d:a8:8f:ea:dc:8a:c2:d0:6e:4a:82:3c:1b:67:56:88:83:97:
82:60:30:28:c8:c1:6f:37:5a:0b:c0:3f:ee:2f:aa:39:96:6e:
a7:93:c8:0f:ad:2d:91:88:d1:e0:64:9a:f0:36:56:9f:92:b6:
43:c7:5d:3a:9c:2f:66:64:c0:e0:c6:28:9d:e9:ce:f3:43:cb:
c0:d1:36:c4:40:3b:b5:38:c1:e0:36:c0:dd:9e:96:0e:5b:50:
4f:43:51:3c:80:72:70:be:7c:e0:b2:d9:bb:89:c2:23:59:59:
c3:da:f2:ec:8f:82:a4:71:61:2d:fd:02:c1:c0:07:68:5c:e2:
a0:5e:75:40:e8:31:39:48:00:23:7b:d7:09:cb:61:fa:c6:87:
e1:6c:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:53:30 2025 by rpki-client