Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File: 78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier: kQZEgt9gCAj469O32Dea+fYe6NNxFdpdN+r9me07jpM=
Subject key identifier: E9:C1:A1:73:4A:54:7B:9C:AD:8C:4D:58:90:31:76:3F:FC:78:FD:4A
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer: /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial: 0196C34C673AC4F3F70A4745D78E786AEA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number: 08A9
Signing time: Mon 12 May 2025 07:01:26 +0000
Manifest this update: Mon 12 May 2025 07:01:26 +0000
Manifest next update: Tue 13 May 2025 07:01:26 +0000
Files and hashes: 1: 33DDywxXELna01DvyBG6K4OCumY.roa (hash: EsYBtIHA+hqoobRdv5KvY0vtx5XM1QlHRSf1TKnaAQU=)
2: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: UXjsKo7Dtxzypss105Oa+yt7F+sN7fLj0IfhRLIhdAM=)
3: BtJ6S27OWJSmoj7NYzTUN0_iFUM.roa (hash: WITF2/BxKRtye2S81kXXKd8taTnYKpq4xKx/Xf8lw7Q=)
4: nO178ZXZFGT-qdK_Xds7cj8ID2A.roa (hash: R+EUO1OAijizTswHRqjO5HgUg8gwhN35ZvzlFNDGCnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:67:3a:c4:f3:f7:0a:47:45:d7:8e:78:6a:ea:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Validity
Not Before: May 12 07:01:26 2025 GMT
Not After : May 13 07:01:26 2025 GMT
Subject: CN=e9c1a1734a547b9cad8c4d589031763ffc78fd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:b7:64:f4:71:6f:d8:bd:41:91:38:5f:cf:
e2:de:b5:cf:d2:8b:39:b7:f7:9d:1a:af:63:42:e9:
d6:3f:be:a5:37:a8:b3:f7:82:19:47:12:9e:f7:38:
73:09:76:84:52:7d:2e:52:5c:c2:75:ac:bb:32:0b:
cc:3d:f0:42:73:e3:95:f4:50:36:11:5c:4b:02:72:
d5:e1:29:6b:2f:2d:86:ed:8d:f9:cd:d7:6d:40:15:
23:7f:a1:91:8c:eb:f7:4a:50:1b:63:34:a6:65:ce:
1b:c1:bf:c6:6e:a0:93:fa:8c:45:42:fb:08:2e:e4:
c6:26:b1:2e:5d:98:b3:af:51:1a:b4:7b:4c:bb:1c:
af:91:78:13:d5:1c:8d:e1:10:c0:96:ca:88:42:bf:
e1:ca:a4:90:a4:76:3b:72:64:7c:fc:78:b1:e2:0b:
5d:af:a9:39:37:43:d9:02:91:e1:b5:80:39:d3:0f:
8e:c7:cb:50:70:3f:49:55:a1:95:f9:65:0e:4c:57:
3e:1c:d0:4e:b8:a3:10:16:3c:34:42:e5:b2:46:f0:
dd:c4:b5:14:48:29:af:26:32:55:c6:b0:e5:40:06:
53:1f:e6:91:ce:20:f5:6c:8d:81:16:52:c7:c9:f0:
02:2f:22:2e:40:81:2b:2e:5c:8a:e6:5b:f0:54:da:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C1:A1:73:4A:54:7B:9C:AD:8C:4D:58:90:31:76:3F:FC:78:FD:4A
X509v3 Authority Key Identifier:
keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:51:b5:9a:9c:50:b8:74:0a:45:af:1b:59:ac:d0:c5:07:0e:
20:8a:e2:4b:94:ef:e2:64:93:ca:8e:40:8b:e6:3f:62:b3:8c:
cb:b4:65:13:43:50:07:56:69:95:a7:e6:1d:d4:88:e3:f8:b5:
69:03:17:d6:e9:ff:b6:c7:95:af:8a:e6:85:db:06:69:13:0d:
e5:51:35:36:f1:84:47:ea:14:d9:14:22:19:38:ee:97:9b:03:
bd:a7:db:c1:98:a2:5d:9a:78:59:2f:28:3f:e4:21:6c:20:7e:
8c:44:fc:ec:81:49:e5:66:cf:ef:1c:fc:21:fc:36:4b:22:df:
af:bf:db:db:65:38:28:1f:8b:51:4f:4c:ba:85:ad:00:2f:78:
f6:1a:86:db:23:82:a9:d9:8c:e5:b2:bb:4f:41:b9:12:9d:c8:
5f:15:91:85:a2:8e:fe:0a:38:5c:1f:37:cc:75:70:7d:44:02:
a8:cc:67:80:aa:7e:85:5d:f9:61:73:09:5e:0f:d3:62:27:c5:
d0:31:f7:cd:d2:4f:0d:78:70:f3:c6:40:e2:b0:d2:c2:4a:35:
04:46:d5:45:38:76:de:36:0d:dd:12:d9:aa:73:4a:01:d6:d4:
77:b4:44:d3:2a:1a:88:63:68:e6:b8:2c:ce:6e:1b:b9:80:fa:
cf:da:f7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:27:27 2025 by rpki-client