Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier: BnhBzFc5ZMeCVRjJdR8UO/7y80PbGAXr463tkjbQkkk=
Subject key identifier: 2D:56:3B:E4:54:29:89:CD:75:41:A4:AE:83:CF:E2:86:B6:47:AC:31
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial: 0196AB0C1702BCDDBD741674411C1E32A788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number: 080A
Signing time: Wed 07 May 2025 14:00:18 +0000
Manifest this update: Wed 07 May 2025 14:00:18 +0000
Manifest next update: Thu 08 May 2025 14:00:18 +0000
Files and hashes: 1: 1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa (hash: WaCyd+8XHtQ9NQJZXiDHgOg3ILGjfZThoYeSrYEPMP4=)
2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: Cq7PcqTlIklTcaLmkayzVUaPCQot8n6mlfCe0HLyJ9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:17:02:bc:dd:bd:74:16:74:41:1c:1e:32:a7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Validity
Not Before: May 7 14:00:18 2025 GMT
Not After : May 8 14:00:18 2025 GMT
Subject: CN=2d563be4542989cd7541a4ae83cfe286b647ac31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:77:2b:c2:2d:3a:3c:8c:64:eb:6b:ca:42:a9:
2e:95:11:d8:cc:2d:54:a0:27:7f:3d:9b:c0:a5:e0:
4f:a9:c3:e0:cc:1e:86:a0:e4:93:b3:13:c8:ff:aa:
72:14:c4:2f:28:4f:80:13:b5:4e:57:21:3a:6f:fa:
e1:38:9f:8e:43:26:8c:de:a2:ef:4d:26:10:64:7b:
29:8d:31:e5:d0:36:32:8d:49:60:90:b2:dd:a4:13:
c1:c1:e8:e1:84:33:5f:8d:2a:81:ea:43:7f:6c:ee:
02:1a:c5:30:c3:ab:8c:7f:1b:54:aa:6f:cb:04:bf:
c1:95:71:0c:a1:ae:9c:d4:02:09:ea:e0:28:61:65:
28:7b:e1:eb:e2:46:cb:bb:95:a2:17:4d:33:d6:b3:
b9:db:fe:b1:55:47:cc:3c:99:81:59:d6:82:8d:a6:
e2:cb:17:1f:20:f4:ac:2a:aa:b8:ea:d2:c0:4b:9d:
ba:b6:b8:56:70:61:8f:95:f2:96:3d:a1:42:5e:b5:
79:d2:4d:55:3d:96:3d:4a:df:2d:eb:59:5a:97:dd:
31:a8:40:8e:ce:45:1f:d2:d0:6e:80:df:a7:ff:de:
02:7e:58:59:51:10:16:7b:b3:ce:e2:b6:b3:d8:3c:
57:d6:d3:0a:2b:3c:9a:3e:45:64:05:99:87:55:44:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:56:3B:E4:54:29:89:CD:75:41:A4:AE:83:CF:E2:86:B6:47:AC:31
X509v3 Authority Key Identifier:
keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:69:29:05:8b:ee:a2:b8:69:42:de:11:37:d3:41:65:06:80:
b8:d3:70:d4:e2:4a:2e:91:95:30:4d:48:3d:62:ca:2b:26:78:
a3:91:4e:2f:3c:fd:5d:67:d2:48:ea:0c:fc:28:5c:85:2d:ad:
d9:7b:4c:c7:f8:a6:73:71:7c:ef:04:53:da:61:53:91:32:31:
25:fd:20:a2:a3:35:a7:8d:3b:91:e6:d3:4a:0d:36:7d:f6:43:
87:8a:09:71:95:7e:ab:b1:ee:67:b4:4a:81:bf:7b:39:a7:21:
fc:1e:03:4f:b2:41:03:3f:bd:91:2a:b6:0e:7a:e2:40:60:e6:
43:1e:52:db:83:01:f9:f2:1d:2a:37:fb:5a:e9:aa:5a:bb:31:
48:06:df:d7:a3:23:b0:d3:31:4b:33:6f:57:91:78:b6:ef:84:
62:52:22:96:ba:b9:6f:7f:1f:91:21:bc:70:9a:d4:3a:a0:59:
6d:af:ef:72:99:af:93:c1:23:10:b3:40:10:a6:70:06:65:b2:
a4:75:26:ef:d3:1d:d8:d8:29:19:5c:36:66:36:cc:35:b2:16:
5c:56:a8:fc:e9:3a:0b:10:f1:5c:a8:52:24:b2:b0:44:74:37:
75:de:b5:6e:c4:78:91:10:89:0a:42:89:b9:64:bd:32:af:e8:
f3:7c:aa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:23:23 2025 by rpki-client