Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
File: ESunl1d-pgpWGvmkWYxFBg47cIg.mft (raw, json)
Hash identifier: abS6IKNaUmzEVbNoQ486+rIC4KbRAG15NkHq1vfkH+M=
Subject key identifier: 79:91:C1:75:89:AC:E0:B6:02:F0:87:C5:9D:64:B4:67:4C:93:4D:E8
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Certificate issuer: /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial: 0196A98BFF1D7F2868741176CF1B3D06143F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
Manifest number: 1532
Signing time: Wed 07 May 2025 07:00:46 +0000
Manifest this update: Wed 07 May 2025 07:00:46 +0000
Manifest next update: Thu 08 May 2025 07:00:46 +0000
Files and hashes: 1: 0mKnnBxNDPUWW0TdKD82TEOVdS4.roa (hash: Lo4k+eo1K7P5fia7s3jKfkvAW4fzukEV2ibTeSf86Xg=)
2: ESunl1d-pgpWGvmkWYxFBg47cIg.crl (hash: vomjOhg/4Wxp7Roiq1DG6TgkCbL36wi9uaov9mfdn04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:ff:1d:7f:28:68:74:11:76:cf:1b:3d:06:14:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
Validity
Not Before: May 7 07:00:46 2025 GMT
Not After : May 8 07:00:46 2025 GMT
Subject: CN=7991c17589ace0b602f087c59d64b4674c934de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:eb:bf:8e:c6:74:cc:4a:7e:54:85:4f:9e:
53:ff:19:83:80:c2:a0:27:19:fa:df:29:e5:2b:92:
e7:8c:f2:05:3d:ac:60:da:38:01:3b:0d:08:97:1a:
24:10:fe:a7:d3:53:50:8e:f6:e7:3e:61:6c:8f:8e:
75:9d:1e:4a:e1:6e:d1:30:59:c6:4e:f3:cb:eb:98:
72:c6:97:b7:e5:7f:e0:7e:11:d8:1b:73:07:3e:05:
f7:6c:f7:d5:65:b1:9a:32:80:83:6a:ca:97:92:b9:
15:b9:b7:ca:4a:1b:2b:4b:4b:65:48:13:d5:4f:9a:
64:4b:80:b4:0f:81:cc:c2:29:3a:08:a9:43:c4:b2:
c3:a8:7e:e4:44:e6:e0:39:36:14:99:f8:10:33:06:
22:ab:11:cc:a3:de:a0:e2:80:31:c8:d7:89:cb:7d:
f7:3b:34:96:fd:ae:f9:a4:f6:ec:fd:93:01:9e:46:
fb:13:ff:32:8b:36:94:bb:01:9a:6f:49:da:86:18:
60:d2:f1:cd:52:bf:9b:71:1d:79:34:3c:c1:af:3a:
e1:6b:d3:c1:19:c5:00:e8:eb:97:8e:94:8f:29:80:
b2:4d:a7:8a:a5:46:18:17:e3:a2:df:6d:18:a9:08:
32:68:10:bd:bb:5c:68:49:34:e7:ae:32:c8:df:8f:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:91:C1:75:89:AC:E0:B6:02:F0:87:C5:9D:64:B4:67:4C:93:4D:E8
X509v3 Authority Key Identifier:
keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:14:d2:63:57:df:bd:30:f5:f5:40:02:08:8f:5d:66:e5:f7:
d3:45:3f:91:7c:f1:29:cc:9f:69:2f:da:c3:86:8a:88:29:12:
68:bf:4a:93:96:55:93:af:9c:69:c5:1a:90:78:ac:42:e6:ce:
64:82:06:ab:23:d7:2b:28:72:f3:c9:51:87:84:a1:25:dc:11:
a5:95:3f:0a:38:5c:08:83:bc:50:c4:8f:d5:e6:77:fd:bc:b7:
78:d5:ff:ab:c4:4b:79:7b:82:d7:c2:62:06:94:19:a8:6a:96:
cc:79:17:4c:e2:cd:66:04:ca:0f:b8:4f:34:df:ed:ae:b7:4e:
f3:07:19:b9:78:f4:d6:c0:ad:4c:b8:36:7f:b2:32:6f:6a:b9:
19:72:51:69:ff:73:8f:06:4e:cc:e9:7a:84:9f:2a:c5:a7:0b:
8e:6a:98:6c:38:ca:9a:a7:e2:88:96:fb:7e:c9:52:99:8a:ff:
6c:44:f8:f4:1d:87:a3:18:ab:e1:ba:cc:e7:b6:ae:6e:a6:ad:
c7:31:be:4a:55:dd:a2:36:99:ba:eb:ef:0d:d7:8c:df:9a:ad:
52:61:bf:fc:8a:d4:ed:63:0a:a2:ed:b9:b3:04:df:21:00:8b:
b5:60:12:04:d4:d0:f9:b5:01:13:54:8c:ed:c6:58:a4:65:a9:
3a:14:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:01:44 2025 by rpki-client