Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier: duizrbEp7LBCImXsC6ms3yIFh9GMgZckcO3S0JqNcnM=
Subject key identifier: 89:6E:0D:EA:EF:87:03:85:34:CB:47:ED:A3:6F:28:7A:DF:0A:AC:49
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 0196CDCFD81CE2B82E147137E33625AE0FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 08:01:12 +0000
Manifest this update: Wed 14 May 2025 08:01:12 +0000
Manifest next update: Thu 15 May 2025 08:01:12 +0000
Files and hashes: 1: PLgTSJDM8uR1juxDHza74Z8KK_I.roa (hash: /HOZXmmTK+cwdAQ1MraVBMBWJRzaxZ+R5OdqeyYD36Q=)
2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: l/8EIjqTYb758UmJqiT81b8J337m4fHkqLzPTZkvjuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:d8:1c:e2:b8:2e:14:71:37:e3:36:25:ae:0f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: May 14 08:01:12 2025 GMT
Not After : May 15 08:01:12 2025 GMT
Subject: CN=896e0deaef87038534cb47eda36f287adf0aac49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:81:15:02:20:95:90:55:1c:b3:e7:9f:3b:
9c:9c:40:fb:20:8f:b8:ba:7b:92:a9:82:a1:d9:2a:
79:6a:21:9c:cc:4a:28:76:19:17:00:9c:55:bc:a9:
5e:05:90:d7:d2:59:e8:d7:71:4d:b4:02:ae:4c:f1:
50:0d:45:b3:b5:21:e2:08:54:89:ee:58:b2:99:f1:
96:04:49:73:3b:be:1c:d0:87:94:a7:47:eb:13:8d:
ff:b5:ce:ee:ce:19:7a:20:d4:59:fc:19:73:fa:92:
0b:cb:c3:dd:24:26:1b:5e:6f:30:db:c5:bc:9c:54:
b1:de:d3:c5:c7:7a:26:36:0e:3d:91:bf:5e:21:b8:
f9:f6:c1:e0:df:66:27:aa:7f:e7:f7:26:90:27:ea:
33:db:47:02:e7:d5:ac:68:3c:25:8b:78:3d:13:7e:
66:c3:2f:79:69:26:8c:b8:dd:91:b8:4b:95:b4:81:
ac:bc:b0:a9:e3:a1:29:73:62:49:ac:c4:2a:8b:d0:
74:db:d4:d5:08:57:a9:54:f6:02:8c:44:36:97:4f:
86:90:70:74:b3:2a:f3:e9:8f:58:b7:8c:9c:71:f5:
b3:1b:e3:c2:2c:d6:3a:a4:40:bd:15:1a:b6:d8:20:
41:35:ce:d4:9b:54:ec:a5:6a:5e:eb:ff:28:fa:31:
37:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6E:0D:EA:EF:87:03:85:34:CB:47:ED:A3:6F:28:7A:DF:0A:AC:49
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:74:79:91:7b:6d:11:22:3a:7a:bb:29:a6:47:51:f7:20:48:
50:7d:3f:32:2c:6c:a4:03:7c:bd:3e:47:43:02:fb:02:52:c5:
e0:f9:a4:4a:d5:08:83:6d:c6:d7:4e:7c:f5:29:43:82:e3:8c:
01:29:c4:cc:51:6c:ea:6c:92:37:a1:43:4f:1f:f4:27:b1:cd:
50:03:ba:eb:1f:88:6a:20:fa:fb:31:e6:10:11:9e:47:fb:af:
92:31:ef:1e:a7:c3:0e:55:2e:32:32:bd:08:cf:16:6e:ca:fe:
fd:3b:cb:18:64:dc:db:7f:2e:3b:17:96:ca:a6:be:a1:8e:8c:
ae:70:fe:95:a4:8f:8a:39:57:c3:71:93:7d:40:ac:57:f1:40:
9c:aa:8f:a3:27:04:5b:f4:74:96:5d:ed:3b:2e:09:b1:0a:08:
2b:5f:15:74:53:3a:ef:8a:84:fd:0c:bf:c6:d0:d0:d5:e4:41:
15:95:fb:30:94:77:e9:b2:92:75:82:f6:9e:79:bc:1e:51:78:
aa:47:92:d7:fb:1e:79:8f:11:02:62:66:c3:10:a8:17:96:4d:
0b:a5:79:19:e1:5c:f5:b2:b7:10:a4:fb:a1:f8:59:d2:54:ea:
04:a4:2d:30:50:16:ac:24:3a:de:a5:a2:14:1d:01:87:56:06:
68:58:ea:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:49:10 2025 by rpki-client