Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
File: eN7biYi8i7Gl-eVfQXJrZURsJew.mft (raw, json)
Hash identifier: d5wA44yneoNCL0UdESwSWUMFrKo5T6piky4GwLdkdNM=
Subject key identifier: 49:10:DD:60:6B:5C:6D:73:7D:90:C8:66:97:59:CF:C9:6B:3D:EF:C6
Authority key identifier: 78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC
Certificate issuer: /CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
Certificate serial: 0196C04B0E8741471BEA626F64724A46A893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
Manifest number: 0CAF
Signing time: Sun 11 May 2025 17:01:06 +0000
Manifest this update: Sun 11 May 2025 17:01:06 +0000
Manifest next update: Mon 12 May 2025 17:01:06 +0000
Files and hashes: 1: 4Fu6FN-8k4OplfwUDllrEVsayHs.roa (hash: qUKP8ZgE6fag+umLTQiKLSLQSA6JYp73xHBNizQefag=)
2: eN7biYi8i7Gl-eVfQXJrZURsJew.crl (hash: PKdF8iSNk5qU/KICDTkAknLzBri4la5eunG7OQjmvNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:0e:87:41:47:1b:ea:62:6f:64:72:4a:46:a8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
Validity
Not Before: May 11 17:01:06 2025 GMT
Not After : May 12 17:01:06 2025 GMT
Subject: CN=4910dd606b5c6d737d90c8669759cfc96b3defc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:af:f3:cb:13:50:a1:58:34:76:03:09:0f:
10:7d:09:a1:7a:ce:31:9a:92:7e:e0:d0:f3:97:d5:
39:36:f5:6d:21:84:e4:c8:21:ff:81:4f:2d:7f:39:
cb:47:ee:6d:e3:97:51:d2:2f:24:ec:59:77:74:da:
cb:e9:fa:f7:b6:99:a9:2d:dd:62:79:51:35:70:e7:
a8:97:94:9f:1e:9f:59:30:4c:59:0e:92:4c:d5:d4:
4d:72:71:a6:71:20:0b:70:b3:28:33:e0:fb:30:73:
4f:25:96:c5:47:9f:37:0c:6b:8a:e4:d3:bc:ac:c6:
be:bb:41:49:ca:0b:ae:3e:e6:c3:b1:1d:0a:c4:4f:
e2:a7:c0:f8:85:f3:9b:45:a7:a6:be:ef:24:67:ab:
1c:cf:29:2a:d0:86:4f:36:fe:d5:0e:11:b1:7d:13:
b1:39:c3:47:f6:9e:db:4a:57:9a:1e:bb:43:fa:af:
71:44:9d:98:dc:c8:7a:86:c0:ca:46:3c:71:4a:f4:
ed:c4:d9:d0:7e:50:46:d8:82:f8:a3:cc:c3:e4:30:
c3:a1:44:ea:df:a0:10:0e:34:82:a3:a8:8f:57:ca:
24:9d:e5:c4:a6:c0:d9:6e:52:64:56:f7:53:10:4f:
fc:da:ec:71:0d:66:ed:fc:68:85:45:4e:c1:29:f3:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:10:DD:60:6B:5C:6D:73:7D:90:C8:66:97:59:CF:C9:6B:3D:EF:C6
X509v3 Authority Key Identifier:
keyid:78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6a:64:8a:e7:1b:07:fa:a4:c2:d8:1d:9a:c0:c1:50:8e:2f:
d3:f5:2a:91:1c:03:d2:56:f0:0f:b2:ee:ab:0e:c3:e9:7b:93:
60:f6:0c:db:70:dd:15:28:b6:81:7f:32:41:6c:53:00:9f:d7:
ab:03:1f:12:bb:f4:31:12:40:3e:d5:97:f5:85:3e:b3:0e:ad:
63:33:b4:dd:f8:8a:f7:7d:10:66:12:63:bb:3e:74:be:37:bf:
08:42:54:08:22:e0:f1:89:fa:89:7f:fb:8b:04:8f:ea:1c:7b:
54:83:60:b1:20:4f:d1:7d:56:4f:92:9a:30:48:0f:33:c8:0a:
3f:aa:db:98:8a:7a:16:a7:4c:aa:cf:8a:c0:46:c4:7b:04:62:
42:55:21:e8:af:58:34:9e:a8:1b:2b:85:54:20:5f:37:c4:2c:
7c:36:a9:0d:df:fb:f6:80:af:d7:08:61:fa:ff:7e:40:77:2b:
e6:8f:61:ae:12:d4:dc:99:bd:f8:53:d5:d6:f8:6c:b5:74:31:
8e:2c:27:40:49:4c:bc:ae:6e:52:22:4b:2d:5a:00:b7:b8:11:
f4:80:56:dc:2f:90:c6:8b:17:aa:fa:97:20:0d:26:fe:13:cb:
82:58:9e:f6:29:a1:07:47:ae:09:3c:b6:4c:40:4d:cb:33:f8:
de:56:8e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:34:11 2025 by rpki-client