Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
File: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft (raw, json)
Hash identifier: z6VmM+whf0qjUbQNRSukbyyLCTLe7Msrrmf6psGNKog=
Subject key identifier: B2:4A:45:9F:7B:94:8D:FB:6A:41:7C:CB:6C:2C:5A:C7:3E:A0:C3:77
Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8
Certificate serial: 0196A98BC633206CF95AEB15B789DC57ADC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
Manifest number: 0E16
Signing time: Wed 07 May 2025 07:00:31 +0000
Manifest this update: Wed 07 May 2025 07:00:31 +0000
Manifest next update: Thu 08 May 2025 07:00:31 +0000
Files and hashes: 1: 7zyHfGLCt61eCife6uW0qcGV8aQ.roa (hash: Obf5nHalQ5b5PGXQ7xcaKDODktDmBaiUg7460b0pjaA=)
2: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl (hash: isJr/QIdGXTC9Mhdn7FXM/8SI67cG88MG1yNvN3V8/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:c6:33:20:6c:f9:5a:eb:15:b7:89:dc:57:ad:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8
Validity
Not Before: May 7 07:00:31 2025 GMT
Not After : May 8 07:00:31 2025 GMT
Subject: CN=b24a459f7b948dfb6a417ccb6c2c5ac73ea0c377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:13:db:46:bd:bf:0b:59:90:77:e4:03:1a:
b4:4a:2c:a4:fc:5d:2c:bf:39:e6:85:a6:d8:57:0f:
16:8e:62:2b:ab:ec:3f:36:c6:1d:7e:00:d3:c7:21:
f0:79:36:f0:a7:c5:5f:a5:78:a8:58:bd:89:e6:74:
f4:b9:24:d1:7d:ff:ab:6d:c2:5f:f0:bc:58:4c:d4:
68:5a:10:94:72:18:3b:1d:0b:33:b1:8c:65:d4:b9:
fe:35:9c:8f:ac:a8:27:b9:1b:75:d8:a6:81:7a:95:
4b:4e:7a:82:a7:8f:c9:a9:9c:4b:79:79:a5:41:bc:
d2:ec:d2:35:e1:8b:d4:1b:f4:be:88:00:85:14:36:
9e:f3:a5:c8:a7:9c:97:a4:4d:45:96:9a:fe:3e:af:
ab:00:8b:7a:08:6f:68:9f:e5:d4:d5:14:d6:77:ed:
86:13:04:00:c1:87:08:be:2c:6a:53:a4:2c:58:c7:
c1:af:02:e8:0d:36:30:50:b4:68:b0:29:da:1f:14:
cb:27:6a:e2:dd:6e:ee:78:27:88:19:e9:bf:e2:5e:
72:ae:15:82:f1:a5:e4:be:76:44:d2:47:6a:f1:55:
45:8d:7d:b8:65:98:91:94:55:bd:29:83:a4:c0:8f:
6e:47:d3:23:ff:64:f5:5f:c1:47:44:fb:c2:99:ed:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4A:45:9F:7B:94:8D:FB:6A:41:7C:CB:6C:2C:5A:C7:3E:A0:C3:77
X509v3 Authority Key Identifier:
keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5e:d3:cf:2a:bc:e1:a6:30:af:75:58:9b:34:8b:57:bf:17:
db:0a:25:b2:30:91:b5:8e:75:14:d3:16:11:c6:cd:41:14:ea:
11:2c:cd:94:ea:a8:fd:1d:81:53:2b:12:f6:a7:37:31:c8:c9:
67:a0:62:b7:fc:5e:cf:a7:9a:d6:b8:49:71:9a:d2:10:2d:34:
81:b4:b9:d0:12:de:29:0e:0c:a5:8a:cf:fa:8b:06:1e:94:58:
db:3f:43:8c:9c:92:1b:15:eb:86:81:df:1f:cb:df:d0:c2:72:
40:5e:0e:7a:6b:4b:35:27:f1:9c:5b:a3:d7:2c:14:dd:2f:19:
27:9d:ed:65:93:5f:ec:6f:51:e9:1a:51:91:87:03:50:b2:ac:
39:92:3e:5c:94:af:a4:81:80:58:75:48:ab:f3:1a:10:fc:8f:
ae:c8:9f:16:1e:92:8b:f0:70:0e:f0:f9:da:c3:69:6f:f1:81:
59:27:ec:cc:97:8e:e2:19:e8:f7:65:a3:04:d3:8f:83:dd:50:
3f:c0:53:a3:b2:6e:2b:2b:44:ca:7e:cb:da:b0:5f:a9:da:5f:
e1:b9:44:c5:39:9e:df:23:16:e5:80:f5:8c:c9:64:39:28:13:
61:89:e4:d5:05:dc:7c:24:c8:b8:51:63:eb:c1:0d:b3:80:86:
53:8b:fd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:31:44 2025 by rpki-client