Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: Gs2fZp1QOV1aVHNV2/oqq50nwihSGa4Af5ve0fVTa3M=
Subject key identifier: 09:5B:95:85:B0:E6:7C:D4:61:69:B8:C4:8B:66:EB:F1:8F:25:9B:69
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 0196C238ECF8A1E4DC1432150037240B3D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 058E
Signing time: Mon 12 May 2025 02:00:32 +0000
Manifest this update: Mon 12 May 2025 02:00:32 +0000
Manifest next update: Tue 13 May 2025 02:00:32 +0000
Files and hashes: 1: TGEoQxRmlQ38EiYNIatYTvTH93M.roa (hash: QWHoHKjGgLkuoWxfCEDNTogSFC/uyVtmYm1jupJjvhQ=)
2: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: EdgxWOhwXYornxeGQ3gtLVOlBYLmlhv0VFNeJAw7/1E=)
3: iHMXX39pKFTmpCSIkM3KYruFykM.roa (hash: KD8CGVAAX5SZe35sI/CYcgZ0uCRVoDZr5Q7avFwAmN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:ec:f8:a1:e4:dc:14:32:15:00:37:24:0b:3d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: May 12 02:00:32 2025 GMT
Not After : May 13 02:00:32 2025 GMT
Subject: CN=095b9585b0e67cd46169b8c48b66ebf18f259b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:3a:bf:37:d2:cc:1d:b6:45:23:8a:06:06:
58:96:0e:a1:34:0a:84:75:f2:7c:8f:92:f3:6b:0b:
71:69:b0:10:f7:a4:fb:33:32:57:2a:4d:41:37:33:
b8:0e:3a:de:64:c2:3f:bb:75:7f:e1:a1:0c:ea:a0:
72:c8:3f:97:8d:d5:b2:10:15:b5:a9:27:ed:5d:57:
86:e9:5a:db:16:dc:e1:f5:0a:09:83:c2:32:88:c2:
e5:08:62:a9:a7:83:9b:f9:6f:0c:89:0f:da:cb:43:
b5:1e:89:bc:72:3b:02:a4:81:0b:7f:ad:6b:9b:c4:
83:f3:4c:fe:d7:46:dd:14:8c:12:6e:af:35:84:68:
2e:bc:f6:98:01:0e:c9:de:e9:43:24:41:78:5f:f2:
16:22:85:ca:92:53:e4:44:7b:01:ab:c7:7f:6d:9c:
9e:c3:e5:7b:14:0e:35:73:5c:cb:f9:77:1b:e6:3d:
45:57:84:34:1b:0b:ce:d1:bf:c7:3c:0d:8a:f2:24:
2e:a3:60:af:04:9c:aa:45:08:39:61:84:f5:31:b8:
e1:91:4b:cc:10:41:4e:53:99:2b:37:98:f6:a6:f2:
9b:0d:e3:e6:95:16:23:d8:6f:95:21:e9:cf:5c:df:
bb:1a:b0:28:8b:00:45:83:f7:74:9a:8b:d9:8e:9c:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5B:95:85:B0:E6:7C:D4:61:69:B8:C4:8B:66:EB:F1:8F:25:9B:69
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:83:cc:98:bf:41:12:d4:e2:5d:72:4e:8e:eb:b1:8f:6e:88:
d8:38:68:76:20:18:1d:77:43:5d:73:28:3e:f0:9a:d8:d0:e1:
66:48:c4:6a:d5:9b:56:05:0f:4a:e7:a2:f3:86:27:c6:12:3f:
82:5e:b6:f9:0e:88:52:f5:a6:e4:e8:ff:e7:dd:de:52:7d:4a:
d6:90:75:1a:23:f9:45:3e:b4:b8:9a:2a:36:b9:21:de:dc:c5:
38:20:66:41:fd:de:db:74:13:c0:e8:bf:7b:c3:aa:3d:3f:5f:
f1:56:73:4d:fe:40:6a:15:79:2b:13:34:5c:54:99:81:a6:5c:
0b:34:ad:8c:51:ea:63:ea:d4:96:ed:d8:29:f1:0a:a8:c6:10:
78:45:a1:93:22:ad:0e:14:76:71:9a:4c:54:d8:d2:c3:74:87:
62:37:a3:56:17:28:44:46:e0:38:89:51:ed:10:76:f9:92:db:
31:63:b2:14:4a:58:3f:da:80:9b:85:35:dc:5a:6b:d5:7d:c7:
75:43:26:cb:1d:ef:e8:c0:de:65:31:2f:a1:f6:92:7c:32:ff:
d8:31:49:16:c9:93:59:f7:43:26:d3:8e:9a:9f:74:41:11:0c:
2d:18:89:c7:cc:68:36:c2:24:85:6a:92:70:02:bb:7f:49:69:
4c:37:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:42:04 2025 by rpki-client