
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File: eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier: ur2EY9N4i3ORlxWy8cKuAMIsfMfoXX08Fo9dAK7bzeo=
Subject key identifier: 94:86:2E:99:5C:99:A7:5A:17:9E:EA:0B:6E:FA:CB:64:57:D3:F4:9D
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial: 0196C5710A23C41FDCC9C375C44FEEB25228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number: 1062
Signing time: Mon 12 May 2025 17:00:41 +0000
Manifest this update: Mon 12 May 2025 17:00:41 +0000
Manifest next update: Tue 13 May 2025 17:00:41 +0000
Files and hashes: 1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: D1ok4yJQ8ilA9mfOdSNoYDf8FcIUWKVHJMiTubwMkOg=)
2: rCglPn4knwgWeE7oLxm6sX7WFlI.roa (hash: wKFZrWQvHUIDP0fnVkeuzqCpYiJl4+aOfjYBOGOYUoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:71:0a:23:c4:1f:dc:c9:c3:75:c4:4f:ee:b2:52:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Validity
Not Before: May 12 17:00:41 2025 GMT
Not After : May 13 17:00:41 2025 GMT
Subject: CN=94862e995c99a75a179eea0b6efacb6457d3f49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:63:8d:78:72:42:1a:47:06:ca:bb:92:c7:
bc:a5:57:5d:d0:d9:1e:a6:e6:37:b1:05:9c:34:98:
bc:02:10:bd:08:2d:2c:51:31:c0:c3:a9:93:9e:53:
9a:3c:27:b3:3a:5b:d9:41:d1:5f:4d:a2:87:72:e0:
dc:3d:75:72:f0:f5:fa:9d:21:97:d9:53:46:4a:94:
c7:71:b1:ec:91:bc:84:c9:74:39:10:09:10:ce:15:
5c:d0:a7:dc:13:4a:47:ea:bd:5e:c6:5f:bf:5b:82:
31:fb:f5:ff:f9:f3:1e:85:c6:43:3a:98:a1:eb:74:
92:a7:47:3b:85:1f:69:97:ff:63:a9:7b:2d:7d:be:
4d:13:bf:20:8c:93:7c:58:30:88:15:33:99:57:2b:
5e:40:c4:87:bd:09:82:38:79:2e:f6:cd:69:82:de:
93:c6:31:99:e4:8c:e9:f8:41:16:71:35:17:26:6f:
82:74:4b:2d:ce:10:61:63:04:22:3c:2c:71:eb:50:
30:e5:6a:8f:43:f8:76:b9:9c:39:d8:9d:0a:90:a5:
30:1c:46:bf:90:03:95:c2:0e:cd:7f:47:30:53:b4:
e5:4b:0f:b9:eb:8a:61:ab:3a:68:52:3c:2b:3e:0b:
a3:1b:6f:e6:98:e0:a9:4a:a7:d5:25:3d:99:e0:95:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:86:2E:99:5C:99:A7:5A:17:9E:EA:0B:6E:FA:CB:64:57:D3:F4:9D
X509v3 Authority Key Identifier:
keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:42:e9:98:9b:64:98:6c:c3:7a:a2:91:a8:54:4a:30:43:e8:
8d:e2:b5:30:f9:ed:b1:d5:8e:7a:0e:dd:c9:7c:36:71:74:4e:
f4:91:a6:68:d6:4e:bb:5a:df:36:04:c2:74:d6:df:51:83:f5:
58:cc:b8:c7:e3:13:ea:0d:a7:ea:1e:82:dd:5d:4a:f6:79:9a:
cc:97:94:d7:85:25:1b:d2:49:c3:6a:2e:6b:89:3e:15:d2:f8:
77:af:b1:61:1f:32:80:d4:da:b2:62:4b:8c:ad:6e:4c:4a:05:
c9:2e:b1:21:97:33:2c:2a:48:14:26:df:2a:2c:29:44:8b:8c:
2e:e3:a8:3d:a3:e4:24:5c:b8:1d:11:cb:39:57:ca:f3:f6:91:
e7:16:95:50:83:81:55:1a:c5:07:86:cb:e7:2a:c7:e2:7b:37:
2f:3f:e2:85:d5:94:66:79:3b:65:f9:8a:3c:bc:60:3e:c1:46:
d7:11:a9:6c:10:e8:27:76:8e:b1:fa:90:39:c1:cf:c8:37:29:
21:c4:a3:a8:e1:17:eb:09:91:14:b7:9a:21:8a:12:b8:67:4b:
71:0a:96:3c:95:b2:6c:83:93:f0:18:53:06:4f:4d:4a:7c:d5:
66:0a:f0:f9:45:4c:f5:8e:42:71:87:f0:f6:d3:11:bf:86:eb:
0e:12:1b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:00:40 2025 by rpki-client