Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File: eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier: PiZri2uXTajFoKMqDrJ+EdFzj4LcQmgoo/2XQU18EmA=
Subject key identifier: 47:60:87:D3:87:A4:91:C6:BC:2A:0A:DA:C9:89:1F:94:67:D3:B8:36
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 0196BA121A09A5BD9AF3ADF29653A8A5602D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number: 1520
Signing time: Sat 10 May 2025 12:01:10 +0000
Manifest this update: Sat 10 May 2025 12:01:10 +0000
Manifest next update: Sun 11 May 2025 12:01:10 +0000
Files and hashes: 1: WzTLOTiHe9vB3hAqlAy8pw18Doo.roa (hash: OSj0Xgv5CShMqmpg0KY2bWpFRvfkFgflayWsnGxuzf8=)
2: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: qr2/UT4pcpUkscsv6QhInIdHJuLM7M7fiHam4DdyrIY=)
3: fEhR-lCUkZVEdMm1RQIIE8pgNCo.roa (hash: o0vAsrKSY0T4tLyGeQ8NwF7vCi/bDXk5djLv/i3XQL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:12:1a:09:a5:bd:9a:f3:ad:f2:96:53:a8:a5:60:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: May 10 12:01:10 2025 GMT
Not After : May 11 12:01:10 2025 GMT
Subject: CN=476087d387a491c6bc2a0adac9891f9467d3b836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:f3:7e:bb:f0:41:57:69:fa:79:b1:95:2e:
5b:b9:99:b2:0f:b7:5f:50:b1:4b:ba:01:84:d6:4a:
f7:56:d6:f7:80:df:4c:2b:83:0a:76:03:f4:f1:13:
e3:c2:4c:53:a0:3b:cd:5f:6c:a0:71:ee:fd:61:64:
78:84:88:63:69:69:ac:19:10:43:ad:29:86:4f:a2:
82:ad:02:f6:37:ba:e3:95:78:75:b4:fd:cd:27:e7:
f3:34:b6:f5:ad:e0:80:3b:6b:1a:18:12:82:01:1e:
88:e7:f9:81:bb:e3:1b:5d:a3:b0:5a:79:d5:68:28:
32:9e:ee:9b:0c:fd:a6:eb:53:48:f2:c0:f7:b1:3e:
30:62:e0:6d:9d:53:ad:15:3e:d1:10:0e:78:aa:bd:
e4:0b:df:aa:a9:3a:75:5c:5a:bf:21:02:5a:25:aa:
af:67:73:a9:e8:96:a9:8d:9c:6b:6f:14:38:ff:6e:
7b:39:5f:fc:3b:53:68:cb:26:4f:4f:ce:41:95:26:
f4:1f:6b:63:97:6e:54:9f:70:1a:3a:3d:37:40:61:
b5:b3:00:1d:f3:23:7c:78:da:34:98:ed:1b:73:9b:
3f:cb:55:6d:c3:ef:5f:fc:20:fa:fe:34:7c:7b:07:
bb:e6:e1:4c:f7:83:af:67:0b:3a:ce:ba:7a:e2:12:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:87:D3:87:A4:91:C6:BC:2A:0A:DA:C9:89:1F:94:67:D3:B8:36
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b2:cd:d6:5f:83:34:6d:c3:19:ad:5d:3f:5f:5c:3d:c8:79:
6b:2f:1a:f9:33:13:af:d4:01:02:94:a4:c6:e8:6c:8c:f3:ac:
00:c9:33:37:d2:a6:88:35:16:e7:1d:08:4e:66:38:06:cb:a2:
07:68:cb:a5:91:df:70:11:a7:91:fc:2e:fb:54:72:e1:c3:ff:
1a:eb:ba:fb:0e:eb:9c:84:63:3e:a2:bd:ac:e4:8d:25:39:8b:
dc:6d:90:b7:52:ff:67:7b:20:5b:b8:f5:59:9e:6c:bb:f4:13:
45:78:82:d1:28:46:c2:bc:ba:07:d7:c1:90:0a:07:da:f8:00:
a4:6a:a6:7e:d8:22:95:bd:81:32:6b:70:1e:d8:d2:4e:df:39:
b8:e3:c1:d0:31:c9:2f:ca:51:27:8d:cd:95:a3:51:f4:b9:3b:
4e:79:db:47:e2:88:00:53:be:1b:70:4e:e9:62:75:0f:7d:6d:
85:c9:1a:b6:23:e7:f9:50:5a:df:c6:70:13:9d:69:ab:ba:d6:
7d:33:d9:ee:40:c1:cc:33:6b:da:e4:12:a3:96:e1:64:9a:31:
46:e8:20:59:81:98:dd:9a:7b:70:21:e1:6d:17:a9:92:b3:c2:
b5:76:7d:4d:21:f5:f0:2e:d1:94:c8:2f:bb:72:3e:15:e8:41:
1c:4f:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:08:34 2025 by rpki-client