Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
File: eSMEzs5_tlUdYh4ld0N1PX0-fro.mft (raw, json)
Hash identifier: xEjayuV0V9bnzL467RFlqm54eGI/7d+ZYf6818k+tyw=
Subject key identifier: 41:67:7D:58:9B:67:B1:07:DD:1E:03:AF:D8:EB:B1:8F:81:76:1B:2B
Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
Certificate issuer: /CN=792304cece7fb6551d621e257743753d7d3e7eba
Certificate serial: 0196C1CB09BEA7EF6536ECEDE2FC5D9C757B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
Manifest number: 127B
Signing time: Mon 12 May 2025 00:00:31 +0000
Manifest this update: Mon 12 May 2025 00:00:31 +0000
Manifest next update: Tue 13 May 2025 00:00:31 +0000
Files and hashes: 1: IMdPglYzX5a0Y8UZyR6PoX9F3qI.roa (hash: LlemrthVpDv3Bg7I6x+S4EwJBWPGL+Tm33DKrH5qsTc=)
2: eSMEzs5_tlUdYh4ld0N1PX0-fro.crl (hash: nysg1I2E3sud6nXXfmW7S1CxHXabdwsDkyIOvPuqo40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:09:be:a7:ef:65:36:ec:ed:e2:fc:5d:9c:75:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba
Validity
Not Before: May 12 00:00:31 2025 GMT
Not After : May 13 00:00:31 2025 GMT
Subject: CN=41677d589b67b107dd1e03afd8ebb18f81761b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:fa:c0:0f:27:ea:0a:7e:04:2a:60:80:e4:
7e:f7:63:07:84:cb:25:f5:84:53:af:7a:dc:3e:35:
8b:46:ab:b2:df:8d:3a:ff:7a:e4:1e:89:2c:9a:1f:
c2:55:dc:01:c4:88:7b:5a:46:0f:f8:3d:f6:12:19:
7b:37:30:79:36:ea:6c:9f:29:73:5b:fa:7b:a3:52:
ec:4a:89:38:07:9c:32:f2:28:5f:b8:02:dc:07:c8:
e0:37:f5:f5:87:92:cf:ca:f5:f0:5e:93:57:93:82:
d9:e5:8c:e8:65:3f:db:ed:1e:27:53:09:62:5d:2a:
2e:65:e0:f8:48:56:1d:3c:a0:07:07:33:89:fa:9a:
13:9a:77:cc:f9:f6:6e:7f:1f:81:59:2d:c7:51:32:
ee:d0:35:9a:d9:72:c2:bb:ce:75:2d:d5:64:89:17:
37:f9:be:72:6b:0d:69:85:09:3c:71:60:53:4e:81:
97:3a:5c:82:43:d0:94:fd:b2:4f:fd:88:87:92:dd:
da:f1:0f:0a:35:57:f6:04:d9:a5:88:7f:09:07:3b:
db:1e:f9:8a:70:16:ae:13:50:73:a4:ff:b0:14:50:
f2:8a:a0:30:12:59:19:2b:57:da:b1:9a:4d:c9:2c:
2f:fe:f1:c6:c1:98:29:5f:38:e8:80:97:bf:b6:64:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:67:7D:58:9B:67:B1:07:DD:1E:03:AF:D8:EB:B1:8F:81:76:1B:2B
X509v3 Authority Key Identifier:
keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f3:b8:5c:da:fb:07:e1:06:0f:e0:70:fe:f4:3e:9f:ed:3e:
fe:e1:88:eb:57:ea:2a:af:81:f8:4a:0c:3d:dd:53:59:7f:d7:
d1:d1:a6:bb:73:91:4c:17:4a:31:8b:a2:37:e7:01:ae:0a:84:
ab:3a:3a:ec:1b:31:cd:6b:e6:4b:b5:ef:fa:21:e4:6c:38:2e:
6d:0b:87:78:b2:0d:d4:34:f7:e7:75:f6:59:76:c4:e7:88:28:
74:90:c4:1b:fa:b1:80:44:e9:e4:ec:58:73:ae:b9:60:c8:36:
3a:4d:2e:ab:15:8e:85:ea:fa:35:9a:11:1b:d8:60:cc:79:cc:
58:be:3f:cd:37:4f:d0:e4:91:bd:c5:5e:4c:a7:be:66:59:45:
48:01:db:11:7b:32:98:7c:ce:75:7a:cb:32:d3:86:af:49:99:
e4:3c:9b:d1:b4:9a:9a:38:7a:e1:c6:0b:f3:d4:37:66:4e:37:
99:31:a0:9d:66:cc:fe:f4:37:56:65:11:3e:9b:ca:14:e6:45:
fe:ac:36:7e:70:0d:f0:8c:4e:41:12:59:ed:c7:41:82:f3:cc:
eb:52:df:03:45:9e:77:42:da:2c:4a:cb:a4:01:e3:5e:61:1c:
65:aa:61:e4:e0:5b:05:b8:ff:8d:f7:e8:73:da:59:a4:15:bb:
f1:64:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:41:20 2025 by rpki-client