Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
File: eaMEujS2GhXjeX_9TRrowhjBx78.mft (raw, json)
Hash identifier: Qtzak9Ro95WljM1ZmlcO9RwD97xEdxcEciCqmpQcIng=
Subject key identifier: 1F:FE:75:1B:3D:79:6F:35:EF:3C:25:7A:E1:EA:A5:B0:B0:ED:A1:9E
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Certificate issuer: /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial: 0196BECA3F6AB4AC2045FC492F13BD5EE3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
Manifest number: 0C43
Signing time: Sun 11 May 2025 10:00:47 +0000
Manifest this update: Sun 11 May 2025 10:00:47 +0000
Manifest next update: Mon 12 May 2025 10:00:47 +0000
Files and hashes: 1: 1-NdTr5SG40wO4Kbvwy1COocgFrk.roa (hash: oe54LaKxNplT5wDF3qIUM33hwicykogi4I92CR9BK78=)
2: WMIHYk8xvDaFM74QNnIJJvo_0c4.roa (hash: VnzFTov/2fcaAAWs7Jv52Wdrro3t3T/GLjVSPHCgVtY=)
3: eaMEujS2GhXjeX_9TRrowhjBx78.crl (hash: mIgYwGS8UygbClR0ZMdo6qQP2rLhVP5ASGRUXrwGdOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:3f:6a:b4:ac:20:45:fc:49:2f:13:bd:5e:e3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Validity
Not Before: May 11 10:00:47 2025 GMT
Not After : May 12 10:00:47 2025 GMT
Subject: CN=1ffe751b3d796f35ef3c257ae1eaa5b0b0eda19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:71:de:72:5a:d5:ef:67:65:e9:9a:a4:fa:
8c:d8:39:8c:4f:ce:e1:9e:da:04:66:01:e8:de:d2:
6f:6e:69:87:5e:41:3b:2b:22:78:4f:3b:fa:ad:e3:
02:c4:01:4c:e4:e7:b7:95:47:3e:11:95:c4:06:5e:
de:08:0d:50:b9:70:1e:cb:38:6b:b8:a7:64:f3:47:
1d:f1:eb:95:e7:41:93:d4:41:4f:77:13:35:a9:61:
09:35:b4:5a:4f:91:9e:8a:b6:5e:8e:2b:e2:c1:0d:
03:39:78:4f:92:eb:e4:b8:d0:97:a8:a3:e8:7a:87:
36:65:65:f8:f4:c2:0f:4e:f0:94:9b:c6:e1:40:47:
38:55:19:e9:fd:c1:e8:8d:6d:83:aa:33:50:63:a8:
c8:3b:aa:a6:1f:35:64:f5:6a:32:d5:71:55:2b:33:
55:47:fa:9a:9b:3f:76:1a:2a:c9:fb:f4:86:ad:df:
e5:d4:87:7c:16:b2:5b:41:e5:e0:27:50:f8:44:df:
cf:d6:ff:57:d5:b2:41:8a:71:66:56:ad:53:e7:63:
20:0d:a2:88:3c:0e:50:18:fb:55:51:2a:59:5c:75:
c6:ef:11:a2:30:14:27:96:03:5e:76:35:9b:1d:bb:
72:90:04:c9:7a:60:9a:3b:51:6e:33:8d:78:dc:85:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FE:75:1B:3D:79:6F:35:EF:3C:25:7A:E1:EA:A5:B0:B0:ED:A1:9E
X509v3 Authority Key Identifier:
keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:30:5c:5b:63:dd:bc:7e:3a:45:b7:59:55:1f:d5:bc:57:9e:
7c:48:02:c2:a4:0d:7d:5f:84:29:99:fa:81:97:92:54:43:61:
87:aa:55:9f:4d:c3:b6:a2:a0:85:48:22:9d:3a:99:15:ce:aa:
8b:bd:40:cf:c0:69:99:1b:61:30:33:e4:6b:48:1e:f8:91:06:
cc:14:ec:7b:7d:ce:8d:64:45:eb:86:0b:23:aa:57:10:6b:bf:
ae:8a:93:05:08:e8:5b:77:60:a7:ba:de:75:f1:a3:c2:ce:cc:
e5:f6:aa:33:87:19:98:58:9b:ed:0c:3d:7e:90:9a:87:14:55:
b2:d8:89:94:a4:48:40:d6:a3:22:b9:91:11:ad:1f:de:b4:89:
bf:eb:2c:42:4c:7f:0a:ec:e9:03:78:8f:4d:b2:c8:42:6d:76:
7c:96:51:de:a2:62:76:9f:e9:96:b8:4d:3b:2a:0e:9b:2d:98:
e3:31:13:b3:55:9d:01:c8:5d:7c:bf:a0:2a:95:ce:c2:e7:51:
8b:55:ec:90:d4:99:c6:fe:01:de:81:81:e9:03:1b:fd:14:b3:
72:42:7b:3a:a2:2b:64:16:21:32:d4:63:94:68:33:0f:2d:70:
87:52:3a:5b:e8:92:27:f5:fe:a5:ec:65:aa:d5:c2:ee:95:03:
12:83:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:14:33 2025 by rpki-client