Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
File: ESCgzgE-LVKm_zVKJwiUu5mORUc.mft (raw, json)
Hash identifier: nGktcJQDsHDJgV3d+yjbKns+KMcbDK7+a5yIt6n4S84=
Subject key identifier: DF:EF:2D:7A:4F:68:7D:6F:27:D6:38:42:26:B8:FA:18:D2:A8:3F:8B
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial: 0196C80408C36F9EC68C14F1B41BDB2B7C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 05:00:29 +0000
Manifest this update: Tue 13 May 2025 05:00:29 +0000
Manifest next update: Wed 14 May 2025 05:00:29 +0000
Files and hashes: 1: 4kEhevkpP_AXSHtDbQt_y5XXD_U.roa (hash: Utfr4kFbDvk1+qjjuuuYnoLkGoHhJpPo3BK4RGIg74g=)
2: ESCgzgE-LVKm_zVKJwiUu5mORUc.crl (hash: QOOFI3c+yVOdycbtQ2kpN2DBGWmD4+It1LHQj4Q7YtQ=)
3: VFGtTmctOrCjqkuRTfIPjlhNsbU.roa (hash: Kx2OzOjQfSX7IzHAKC1pKf9P1rkGaVbawrDwIeTytCo=)
4: hPKrgzhYrZ1-hIZdPIo3sHpuSd4.roa (hash: E3NJlfBqIWJ89UYs9nMw+LOY3dmFw01LCnketh8FRY0=)
5: jx1FgPOkBbayLbn8i9fFX-3vhJI.roa (hash: du1QA1Pa5BxqPJI19sJCDEas0RaG543HI6Un8BqtN7g=)
6: lauLTK6HRr7436pAd14mrAaE3vU.roa (hash: ahn5yKzybexoFBgNe3W5HKkjK7F19TopqaCzFWkZQgs=)
7: xVwjRhSfq67xc9Qi_wrSVn11vY0.roa (hash: iJyeTnFvoMMSPwtJkLmVhK7+FVvlX6Jx0lnFlM/s3fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:08:c3:6f:9e:c6:8c:14:f1:b4:1b:db:2b:7c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Validity
Not Before: May 13 05:00:29 2025 GMT
Not After : May 14 05:00:29 2025 GMT
Subject: CN=dfef2d7a4f687d6f27d6384226b8fa18d2a83f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:6b:3c:f0:40:74:fc:a9:af:35:c7:7e:37:
24:9d:20:f3:89:1a:db:6e:fb:08:2e:eb:19:aa:2d:
5f:48:13:aa:64:05:c1:29:05:01:80:bc:f5:09:50:
00:21:b8:7b:40:2e:d0:07:45:3e:b1:e2:a0:d4:9e:
af:98:7c:26:b8:2b:7f:7a:88:ac:ed:b1:d9:27:49:
47:6c:3e:46:84:f1:93:3e:bf:a9:16:b2:19:88:55:
f8:c3:00:7b:94:72:7a:71:99:c9:bf:7b:e4:7a:57:
9f:09:75:12:69:39:5c:f7:b4:35:e2:84:6e:41:e7:
7f:e2:25:cf:6c:98:d2:c0:c8:62:2a:45:ab:b9:50:
20:b1:f6:a8:d4:c4:3e:a1:d1:d5:f2:df:e2:72:41:
50:34:27:3b:7e:54:1d:d0:f0:ac:35:02:11:67:d8:
39:52:f5:2d:33:5e:4f:57:16:2e:cb:a0:96:b9:81:
d6:96:2d:e4:e5:57:13:50:56:71:c3:ee:fe:7f:b7:
d4:8e:89:74:71:1e:72:ed:fe:52:80:8f:ec:b8:63:
96:72:3a:dc:11:b2:43:9a:f9:e6:e3:97:2a:e5:e2:
58:56:3d:62:62:62:a6:fc:e3:89:65:8a:24:76:dc:
21:b1:43:16:5a:27:dc:0d:f6:42:e6:31:60:20:10:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EF:2D:7A:4F:68:7D:6F:27:D6:38:42:26:B8:FA:18:D2:A8:3F:8B
X509v3 Authority Key Identifier:
keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b1:7e:ea:c0:3e:27:e1:92:88:e7:0f:cc:e9:94:21:47:0d:
69:c9:33:0d:45:c1:09:9c:b8:e3:1e:d0:38:5f:17:fe:22:25:
fb:3b:c9:bf:dd:ed:f8:f0:b4:74:cd:2c:a0:f8:64:fc:83:a1:
1c:75:92:47:f4:0b:13:b2:2e:6f:36:a7:36:e5:d5:8d:58:22:
7c:aa:ca:e4:8b:e2:a1:21:5a:6e:5e:77:02:96:31:d2:2e:ad:
97:66:fe:88:06:56:11:4d:b4:8b:9b:41:9f:91:e1:d4:5e:87:
bc:62:66:78:ad:f3:35:7a:24:c8:12:72:da:53:84:bf:70:3e:
5e:20:09:6c:9f:b1:6d:f8:be:c8:bf:7d:0c:2e:63:2f:48:df:
df:2e:44:b0:8a:39:60:38:8d:a3:ab:c5:43:a5:84:43:87:6c:
1a:e6:a5:46:bf:51:a8:ad:32:54:ee:29:0f:a2:ad:6c:e3:b8:
aa:5d:6c:2d:bc:cd:65:5a:b9:c6:42:4a:a7:2f:d1:02:6d:52:
71:d5:41:5f:1f:68:e1:d3:ce:11:b6:cc:a9:df:57:07:d0:01:
04:3f:4d:dd:57:22:f5:2e:5a:06:66:73:6e:24:e5:47:d1:f1:
7f:b9:37:94:31:21:ed:95:19:48:1b:99:3a:b3:ef:3a:f5:ae:
57:59:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:36:30 2025 by rpki-client