Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
File: eUif00bnIUhmFZrC8OycmQxPFLk.mft (raw, json)
Hash identifier: 3zxtWIAr5Vs3/5vctuyQRRv4ENbf3qkIr2iXlgxugT8=
Subject key identifier: FE:D7:EF:F1:48:1D:93:2D:E0:EE:24:4A:8E:30:F1:87:C4:90:91:A9
Authority key identifier: 79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
Certificate issuer: /CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Certificate serial: 0196B6D9805A0A177770AE2BD3A340960584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
Manifest number: 038E
Signing time: Fri 09 May 2025 21:00:29 +0000
Manifest this update: Fri 09 May 2025 21:00:29 +0000
Manifest next update: Sat 10 May 2025 21:00:29 +0000
Files and hashes: 1: YbVpJmm5d19rM-zYZeA0ZWdtDMg.roa (hash: l5rWO723DVA6iEz8C5Lvzh9vlRYqelqcHe5HXOP/cpM=)
2: eUif00bnIUhmFZrC8OycmQxPFLk.crl (hash: yLuUteQxt9JBVkjVJ5N0VObaF7XIG6O6zEUiappwJV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:80:5a:0a:17:77:70:ae:2b:d3:a3:40:96:05:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Validity
Not Before: May 9 21:00:29 2025 GMT
Not After : May 10 21:00:29 2025 GMT
Subject: CN=fed7eff1481d932de0ee244a8e30f187c49091a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:b3:52:21:4d:40:03:85:c6:63:36:c7:f9:
91:ce:3b:cd:21:e1:e4:22:09:e0:a3:a2:ab:5f:e9:
71:9e:09:93:d3:8b:0e:da:cb:a8:28:99:3d:b5:c7:
8c:2b:7c:22:ba:96:61:bc:02:d5:bc:5b:1e:ec:26:
5c:f4:42:c5:35:f0:6b:ce:46:2b:fd:cd:e3:a4:b1:
f9:29:4d:a1:85:3c:46:3c:f1:ce:f1:c9:d1:75:e8:
7b:09:95:74:36:23:92:20:30:36:d8:84:df:d2:66:
cc:7c:8d:1a:82:b0:0e:f6:f7:42:c1:58:0e:e1:9f:
fc:b3:d9:c7:8b:bb:41:ae:b1:ab:2d:6f:ff:4e:cf:
8d:8a:d4:f0:61:02:30:75:5d:be:a1:c0:30:97:6a:
1c:15:8a:f9:4b:fc:35:c3:d9:3f:f0:1d:95:3b:0a:
7c:08:1f:8d:42:b8:40:10:6c:4c:34:18:86:e7:04:
94:a2:99:0a:1c:4f:8e:bd:bd:05:fb:e0:ac:8f:30:
70:7b:41:bb:4d:0f:4d:f8:f8:98:9a:18:5c:02:7d:
cb:9d:21:d9:ff:2c:ca:a5:fc:f7:9c:ff:f7:ed:a5:
61:a1:78:49:55:44:3b:2b:8d:c4:82:e8:74:61:ec:
42:e3:61:0d:d5:03:46:29:c8:0f:81:a5:05:45:b5:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:EF:F1:48:1D:93:2D:E0:EE:24:4A:8E:30:F1:87:C4:90:91:A9
X509v3 Authority Key Identifier:
keyid:79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0e:32:7b:c1:63:e1:2c:80:c9:91:c5:6d:93:cf:4e:34:bd:
24:66:66:e0:c0:86:7d:68:75:2f:83:65:44:62:5b:88:18:fe:
cd:33:7b:a1:94:53:a1:d3:df:94:0c:ea:c3:ac:5d:90:b3:8d:
df:06:ab:91:84:be:f2:6b:aa:b2:37:c9:79:ca:17:92:09:ed:
05:64:d4:97:39:b6:7f:c0:fe:9f:75:fa:de:94:05:9c:20:db:
d8:f3:3c:60:7b:20:2a:9b:de:1a:d8:11:b8:ea:11:42:35:df:
19:a3:13:93:9a:47:a6:0e:3c:d6:9f:8e:24:a1:ed:72:8b:32:
c6:55:ba:ff:7d:6b:bd:c0:bd:83:db:56:97:35:d3:05:52:96:
3e:ea:52:1e:35:c1:c1:da:68:81:c6:5b:60:32:d7:5a:05:e9:
f1:4e:3e:51:86:dc:ab:c1:85:69:02:3d:60:47:8b:83:7b:fa:
aa:78:8e:05:26:1d:63:79:98:f8:0b:ff:0e:f2:89:61:12:08:
57:40:90:78:61:70:1e:10:3c:e5:81:61:15:12:25:b2:a4:f1:
cd:53:63:c1:0e:54:bc:cb:8c:8d:75:31:00:33:b7:6d:19:0c:
a0:d7:44:07:9c:0e:c6:dd:dc:e5:57:00:9d:9c:4b:8e:96:17:
11:aa:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:00:26 2025 by rpki-client