Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier: o595EQLM6depst2zniEscu9zPgKuA7i0Z+FKgd+JhYo=
Subject key identifier: 6B:FE:AC:84:01:63:88:17:F0:F4:47:C6:E6:6E:00:C6:DD:C5:7D:98
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 0196AC8D26166120ECD84E0C2FA80DAEB4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 21:00:53 +0000
Manifest this update: Wed 07 May 2025 21:00:53 +0000
Manifest next update: Thu 08 May 2025 21:00:53 +0000
Files and hashes: 1: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: bdTTaHuhqQKltdOYAjdQhw3/dd5PQNhpBmhK6GMTnlo=)
2: uh0s7nQF6Ch_13wcoEBB1CrHctE.roa (hash: ALTdvaEI8Z2+A2eOLrrx34dYp9qQTeI0QMDzvRKkOhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:26:16:61:20:ec:d8:4e:0c:2f:a8:0d:ae:b4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: May 7 21:00:53 2025 GMT
Not After : May 8 21:00:53 2025 GMT
Subject: CN=6bfeac8401638817f0f447c6e66e00c6ddc57d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:34:7c:21:a5:7a:e1:4f:5f:42:2e:ab:26:
fc:44:aa:ec:d6:87:a3:a0:2b:d2:93:ec:41:5c:6e:
05:ff:e6:3e:f8:de:fb:34:a1:fc:50:9d:3c:fa:2f:
ed:85:e1:bb:31:8e:15:ec:e2:c5:26:4e:14:c6:f1:
ee:c5:71:92:37:e8:c2:ed:8b:17:a1:c3:aa:7c:96:
4e:fb:15:04:59:ec:44:37:4f:15:45:56:db:13:23:
5f:7c:4e:96:1f:d4:48:07:ad:a4:cf:67:cf:d3:0e:
cf:7a:d3:f5:70:6d:3f:69:30:cf:cd:85:bb:84:a8:
82:8b:59:db:ad:b2:b4:a1:31:e8:51:51:fa:1d:3c:
9f:d9:d1:02:d1:05:03:6d:1d:74:0a:68:82:41:df:
d8:b4:8f:8b:8e:75:cf:8e:b7:17:e0:ea:85:94:23:
e5:73:76:45:c0:91:5e:36:6c:66:0b:13:e1:0b:d3:
6e:18:ed:e0:e9:2d:e8:84:6a:f1:ea:fd:02:86:f6:
1b:6e:f7:91:ae:e6:76:da:00:2a:6c:b7:8f:2c:81:
9c:b0:27:0b:40:e9:14:fe:d0:6c:41:de:f2:cb:17:
3c:c7:38:a0:00:3d:92:b9:3c:34:6c:b4:ea:28:c1:
3b:db:64:26:0d:a1:5f:5d:73:9f:be:f9:12:fb:ae:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FE:AC:84:01:63:88:17:F0:F4:47:C6:E6:6E:00:C6:DD:C5:7D:98
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ab:ac:2e:b5:06:fb:4f:85:57:e6:38:d9:9a:d0:10:f0:df:
0a:10:22:f0:1c:a9:9c:c2:13:69:21:0b:16:b5:9d:32:a7:50:
d6:eb:88:5a:d5:88:b8:3a:49:e7:ba:1a:33:f9:a9:80:45:ff:
0c:61:89:f3:3e:f5:76:22:30:45:41:d4:a3:0c:0f:2e:eb:5e:
88:10:b3:d5:b1:d9:4e:fc:39:12:43:3c:17:13:a2:ac:7e:6b:
20:e9:34:40:af:8a:4e:b5:17:9e:58:92:a9:c2:cc:71:b3:03:
00:1f:7d:5d:a9:de:b9:9a:94:f6:5a:4d:d1:c2:ea:1c:f8:c8:
8b:a6:4b:4f:82:13:c2:14:a0:d6:3e:32:4a:5e:40:9f:5f:5e:
7e:78:62:a1:f6:00:c9:f5:f1:70:cd:42:96:2f:d2:df:c5:9a:
99:c1:98:94:b8:bc:b3:0c:24:fb:4f:c5:0d:1e:89:1f:73:e5:
17:7f:6a:6c:82:0e:78:90:a1:5a:55:1f:7d:d7:11:4b:cd:9c:
90:3f:d3:60:f6:b5:24:57:7d:b0:2a:c1:ff:6c:4e:1d:23:75:
95:84:bc:81:b7:64:ee:9b:01:dd:ed:da:2f:b1:31:fa:8e:90:
57:af:b1:db:b5:43:3f:d4:25:69:4b:c1:ee:b5:09:6b:e2:d6:
6e:05:6e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:33:44 2025 by rpki-client