Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
File: eNMexT3EQF1pFeGCWWS5fXoRb4E.mft (raw, json)
Hash identifier: /hPeHiAON1ICCPXjILuc7YLfX+Hqc38ZjzayqnLIEso=
Subject key identifier: 67:C0:C5:AF:6C:E5:CE:A7:E9:65:95:7E:2E:F8:B4:53:9E:C7:8D:E5
Authority key identifier: 78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81
Certificate issuer: /CN=78d31ec53dc4405d6915e1825964b97d7a116f81
Certificate serial: 0196B8C7FA7DF23969F55305A329FCFC9845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
Manifest number: 109F
Signing time: Sat 10 May 2025 06:00:35 +0000
Manifest this update: Sat 10 May 2025 06:00:35 +0000
Manifest next update: Sun 11 May 2025 06:00:35 +0000
Files and hashes: 1: 5gEGlVwVZrqZpPnotBCu9f34jtg.roa (hash: haUW51qrmH8OlsZcre9A2kx3gtQnJaSmXQISoIixtmo=)
2: eNMexT3EQF1pFeGCWWS5fXoRb4E.crl (hash: FoEI48BuaiACnifcipmXmzB+WDf0UMNbfGje8f9r1Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:fa:7d:f2:39:69:f5:53:05:a3:29:fc:fc:98:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d31ec53dc4405d6915e1825964b97d7a116f81
Validity
Not Before: May 10 06:00:35 2025 GMT
Not After : May 11 06:00:35 2025 GMT
Subject: CN=67c0c5af6ce5cea7e965957e2ef8b4539ec78de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:f1:10:e3:6e:00:22:74:be:62:12:72:f7:
7e:31:ff:c1:65:67:37:7c:63:91:7d:27:a6:06:b2:
f0:c6:5a:9b:9d:2d:49:42:78:76:13:cf:6d:0d:36:
f4:be:70:e0:12:73:73:73:de:92:4d:45:9f:88:74:
a9:79:cd:ea:c0:e7:a0:6e:67:0d:65:3e:c2:bb:a4:
95:35:4e:a5:83:90:01:b2:e4:4f:ea:56:a5:bd:a4:
6e:26:97:1b:fa:8a:a9:b9:f9:dc:26:0c:d6:91:2b:
fb:cd:a9:bd:63:48:68:19:5f:94:d9:e8:be:c8:eb:
56:dd:63:a8:94:18:68:3c:9f:2c:38:68:d0:35:96:
f5:bb:c0:3d:92:e8:62:ab:5a:ba:6e:5b:8b:80:33:
df:4e:78:74:5b:a9:90:c8:1a:7d:aa:c0:d0:a7:8f:
de:0f:42:3f:34:e6:b5:75:34:04:da:a9:9e:7f:5d:
cd:71:01:db:e9:d5:3b:b3:91:20:2b:a9:3e:a6:f9:
e0:67:6d:07:b1:ff:a9:c6:71:d8:da:7a:bc:e4:59:
f1:18:18:d2:f4:06:07:ab:ae:54:7c:1c:0b:4f:1a:
25:32:bf:69:c7:f8:07:0c:87:f3:0d:cf:85:d6:8d:
d9:80:07:7d:c2:19:93:06:df:06:00:4b:74:e2:10:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C0:C5:AF:6C:E5:CE:A7:E9:65:95:7E:2E:F8:B4:53:9E:C7:8D:E5
X509v3 Authority Key Identifier:
keyid:78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:64:6c:4f:0c:7d:b9:9a:11:8b:27:f8:b9:07:45:6b:0f:98:
17:ca:23:89:04:77:fd:9f:3b:bf:5f:1a:b4:d0:d7:6c:a0:7b:
3e:3e:3b:03:6a:a4:4c:3e:c5:b8:b4:8a:3b:27:03:19:59:ec:
be:73:4e:f0:33:c5:7e:88:bc:8c:31:1d:d0:26:b5:ce:f2:c3:
1b:e0:62:3e:a8:22:07:d4:ae:e1:e4:6d:91:4b:9e:52:f0:16:
ca:72:56:eb:91:67:29:0d:d6:fd:f6:a7:a1:5e:37:2f:42:32:
40:d8:4b:44:75:c6:a1:a0:6f:fd:77:2f:cc:65:93:6e:6d:e8:
9a:d4:7c:cd:c0:c3:3b:45:fc:54:dc:84:36:86:e2:ba:d1:6f:
83:e4:c7:32:21:c0:c6:c6:0f:0b:3f:36:7e:cd:59:9b:70:19:
1c:ff:f5:02:90:2a:dd:7d:0c:7d:2f:36:84:7c:44:27:c3:1e:
48:23:ea:82:f7:34:6d:39:ad:9d:45:a1:21:50:ff:da:06:9a:
5a:ec:fd:24:8e:74:34:b0:a5:d7:09:d8:96:b5:c3:04:cf:f1:
4b:bf:bb:e4:6b:38:78:13:1c:bb:72:ce:c6:1f:af:68:24:a6:
69:57:8e:e5:82:19:28:22:cd:2d:b5:3d:1e:39:cf:9b:9d:49:
61:c7:c9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:31:22 2025 by rpki-client