Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File: 0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier: B3vkAdoUz62G4HZw9SK9YG+SFmp3cl8L30VoLt8fitA=
Subject key identifier: 4E:A7:F5:B3:A8:B8:FF:BD:52:2D:6A:66:93:2D:C3:A1:BE:63:54:7E
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial: 0196C872063EF5A6853E4A8AC19CF9198A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number: 0999
Signing time: Tue 13 May 2025 07:00:37 +0000
Manifest this update: Tue 13 May 2025 07:00:37 +0000
Manifest next update: Wed 14 May 2025 07:00:37 +0000
Files and hashes: 1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: hZzmpq0WKL98TObuHHGH58d1ATpdkdZEAaRZT/1Z1xc=)
2: r2i6LbAhlbTcgRsB8rSZkcrF6lU.roa (hash: PJ1IbFsa6xc/CmUBVF12AqCmg0La+qLnFRg5In031II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:06:3e:f5:a6:85:3e:4a:8a:c1:9c:f9:19:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Validity
Not Before: May 13 07:00:37 2025 GMT
Not After : May 14 07:00:37 2025 GMT
Subject: CN=4ea7f5b3a8b8ffbd522d6a66932dc3a1be63547e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:fa:ef:23:ca:92:f1:54:18:14:e6:67:15:
f5:70:87:e7:fa:57:c3:17:55:cb:a9:9e:4e:14:e0:
4d:0b:b1:dd:3e:f2:6d:4b:99:10:a5:b5:e1:f8:68:
70:6f:1f:ac:11:a6:0d:d8:e9:af:f2:0a:42:bb:0e:
18:39:cf:60:2b:1c:07:14:62:70:ba:35:bd:3a:d5:
cc:9f:5e:e2:12:5e:c2:d0:01:8b:4f:98:4c:61:dd:
91:1e:9c:4f:a0:29:c3:23:9b:b9:ba:7f:d2:c5:85:
a7:9f:94:fe:56:f5:cc:fe:db:b2:b6:4d:00:c2:40:
93:d2:17:b3:3e:e3:ce:b8:d6:52:a9:0d:2c:3d:d7:
d7:89:8a:ed:67:17:09:af:ad:d9:05:da:ef:3e:83:
ed:36:54:f2:6d:f0:e8:a9:38:48:94:3a:68:a0:f7:
67:ea:06:1b:fd:88:a8:31:b8:e4:21:15:9d:72:88:
30:6c:5f:71:1a:16:e8:a5:18:65:0a:22:d2:58:dc:
f9:17:db:49:d0:d7:52:54:04:d0:a8:41:c4:cb:8f:
24:22:2e:19:00:63:a4:02:03:59:74:87:65:91:21:
6a:fa:93:1e:82:d6:1d:12:e1:7d:0d:6e:ff:02:27:
fa:81:6c:c5:9a:a6:b7:79:7f:87:ed:c6:05:6f:39:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A7:F5:B3:A8:B8:FF:BD:52:2D:6A:66:93:2D:C3:A1:BE:63:54:7E
X509v3 Authority Key Identifier:
keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cf:53:9f:9a:4d:5d:2d:c2:68:12:95:90:91:22:ba:5c:9a:
8e:9b:3f:0b:8d:be:2d:63:93:e2:ee:38:e4:9d:8b:dc:90:f1:
15:a3:24:bd:a3:dc:19:fa:ca:45:7d:a5:fd:1c:ca:5d:5c:61:
09:fb:8c:1b:70:e5:e8:1c:db:bb:13:73:51:b4:18:ac:4c:f3:
bb:04:c8:64:7f:55:c1:3a:20:90:2c:c4:de:67:66:c9:5a:c0:
d8:e4:c8:ef:41:ef:6b:47:81:c5:94:4e:ed:f0:71:a1:30:c7:
09:9a:0f:e6:d5:5e:92:bf:ff:d3:e8:ed:bb:89:b4:a0:30:10:
61:cd:7a:7f:8f:27:1a:15:62:bf:a7:02:43:a6:cf:fa:6f:93:
cb:89:c2:b6:90:1e:90:df:15:87:04:86:47:54:6e:18:f2:40:
20:d1:df:7c:d5:14:d0:ef:5b:17:93:24:83:36:05:5c:63:08:
82:b5:39:fc:b0:f0:63:92:61:a2:bd:e9:a6:d2:dc:04:01:2b:
a9:1e:4a:7a:04:a6:52:99:86:44:dc:31:81:50:67:0b:ff:8f:
63:d7:8e:01:0d:76:03:00:c3:4d:fd:f3:d0:73:e4:26:8b:87:
b5:f1:ce:12:b1:03:38:d4:87:dc:e2:ef:8f:df:00:77:87:39:
a3:84:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:06:44 2025 by rpki-client