Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
File: eLBPuvqja3H8027KULX-DojdNVE.mft (raw, json)
Hash identifier: XY+oqR1PT8VDIA//eApX2/cejVptLPIlAIS2pBR70Mg=
Subject key identifier: 06:80:7A:EF:7B:E8:28:01:CA:3F:8F:75:17:3F:DD:1C:7B:1F:2F:26
Authority key identifier: 78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
Certificate issuer: /CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Certificate serial: 0196AD6858CCA2CE6DEB7A614942347AA56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 01:00:18 +0000
Manifest this update: Thu 08 May 2025 01:00:18 +0000
Manifest next update: Fri 09 May 2025 01:00:18 +0000
Files and hashes: 1: _bd1uUXdWfimJKjSRLsLwjuEcR8.roa (hash: uctm/cSaahCT9GH/ghFykbr6OfbIpXkqwxi32eXN9Ao=)
2: bqoiPzwRe4PUMqiK_-uqiOSrT8g.roa (hash: zxBqKx04g5nB2wdjrM/3iI8Vlwm/BGdUl98rn328O3U=)
3: eLBPuvqja3H8027KULX-DojdNVE.crl (hash: d3ygkYtIx9/YCa8ycbKRIp/RBT3CKNx59MEWUM9xvu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:68:58:cc:a2:ce:6d:eb:7a:61:49:42:34:7a:a5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Validity
Not Before: May 8 01:00:18 2025 GMT
Not After : May 9 01:00:18 2025 GMT
Subject: CN=06807aef7be82801ca3f8f75173fdd1c7b1f2f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:15:49:48:1a:d9:db:86:a4:3a:1a:28:4b:
2e:72:26:19:1a:9f:2d:e2:02:11:e4:bd:26:e9:d5:
9a:c8:26:ed:03:dd:11:80:96:1b:8a:6f:87:2c:c0:
b2:ea:67:a5:d8:8c:fc:fb:e9:70:0e:02:7f:54:47:
8a:b5:6a:82:74:11:30:bf:02:39:6c:79:78:c9:3a:
23:8f:b1:e8:e4:6e:24:e3:48:80:27:15:76:3a:5d:
50:6b:7b:c2:2a:7c:d7:c8:d4:38:61:2d:a1:4e:f3:
53:7a:08:4c:e1:13:db:35:95:19:5e:16:53:f1:91:
87:4b:7f:f7:91:44:56:47:64:ee:ce:27:d8:68:ee:
f6:e1:0f:44:e6:92:68:6c:5a:9d:4b:f3:46:89:8f:
a2:52:6c:21:7a:9e:82:8d:e6:72:08:7b:ef:af:a2:
ae:50:2b:de:d9:5f:f3:cb:b8:aa:d0:d3:4b:c4:a9:
d6:0f:e5:d3:da:6a:0d:f9:0a:c8:4a:47:1c:23:b9:
51:0c:29:74:85:8d:d8:94:c6:79:b3:42:db:62:f5:
ac:fc:d4:da:1f:ae:11:89:64:d0:6e:89:95:49:3f:
a1:6e:fb:a4:27:8d:9c:ba:3d:e9:a0:c2:05:cc:9d:
94:28:5a:ec:93:dc:cb:69:05:bd:7b:cc:6b:34:10:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:7A:EF:7B:E8:28:01:CA:3F:8F:75:17:3F:DD:1C:7B:1F:2F:26
X509v3 Authority Key Identifier:
keyid:78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:01:da:c3:a0:ae:a7:c6:e4:5f:ef:4b:0a:ab:09:f7:c1:ab:
2f:00:41:99:14:4b:d6:b1:ab:8d:8a:63:2a:5d:a2:60:79:90:
eb:c0:51:16:3a:30:ee:ef:87:c8:84:b5:ae:55:e7:b3:96:65:
d5:5c:0f:7c:73:8d:19:82:70:bc:28:b7:47:80:a9:56:df:da:
72:2a:7c:db:e7:85:00:93:1b:c5:fb:56:ec:7d:41:45:17:ba:
6a:23:7d:17:67:01:88:bd:24:3c:6a:13:2f:f8:89:5a:1a:71:
16:f1:9b:06:88:cd:68:90:a6:ae:99:2a:01:46:72:ca:dc:7e:
60:39:fa:bf:62:41:83:11:be:36:6b:13:ba:d5:6d:13:81:04:
1c:bd:f3:0a:88:6a:17:a7:c0:ba:49:e3:b5:f5:fc:52:db:54:
e5:e8:d8:50:71:16:af:1e:1d:1b:fb:cc:4c:7d:f2:c5:c5:23:
f1:56:b6:12:5b:1d:0f:19:85:33:f0:3d:65:1b:78:ef:6d:97:
d1:4d:26:06:39:1f:45:e2:ba:ca:60:4b:25:6b:2e:58:1c:97:
d4:af:42:98:15:87:63:b7:b7:df:47:8b:70:08:74:57:70:fe:
82:dd:2b:c6:8a:c6:12:b9:25:9d:08:f7:62:02:77:b4:d8:70:
ca:b9:f2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:49:11 2025 by rpki-client