Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier: xSxioXlmFn/10dnVcaCrbW6+CNZw2t76a7D3rzoV7eA=
Subject key identifier: C2:9F:B7:D4:A7:5F:DC:8D:AA:25:E0:59:5C:56:42:6F:56:3D:48:7D
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 0196B9A4039DC4254D1A6F03354D8610C1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 10:00:55 +0000
Manifest this update: Sat 10 May 2025 10:00:55 +0000
Manifest next update: Sun 11 May 2025 10:00:55 +0000
Files and hashes: 1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=)
2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: BqsiN4FVVgkqukJDJGxw5Kvjhr9X9Ex6OAdp60AuKr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:03:9d:c4:25:4d:1a:6f:03:35:4d:86:10:c1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: May 10 10:00:55 2025 GMT
Not After : May 11 10:00:55 2025 GMT
Subject: CN=c29fb7d4a75fdc8daa25e0595c56426f563d487d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:04:f8:32:73:9e:92:be:b0:ab:16:84:86:
d0:b8:6d:f6:67:f2:90:2b:3f:2a:d2:de:fd:86:65:
bd:79:3b:f2:b2:54:f0:c8:b0:0a:47:aa:ae:8d:7a:
b5:7e:10:80:61:11:47:26:11:ef:84:b6:25:6e:3c:
e6:a4:93:df:8f:09:71:33:92:21:7e:f7:6e:64:6e:
3d:b6:fb:3f:01:da:4c:be:c4:33:37:c0:dc:c9:3d:
f4:64:0d:d5:f3:24:b0:ac:12:5d:3f:eb:89:21:4e:
f8:4c:9b:56:29:a5:f4:3c:d6:84:fb:92:7a:1a:37:
18:2e:0f:b4:ad:a6:9c:09:70:4d:07:1e:86:86:64:
75:b9:44:6c:7b:6a:15:9f:b7:22:f4:58:1c:fa:4c:
8a:cb:f9:e8:59:91:c2:40:cc:26:97:b9:a4:0d:e3:
11:13:59:fb:ba:98:55:05:4d:5c:16:31:3f:61:ab:
94:36:9c:0d:9e:3b:10:d6:61:d9:c1:d4:2d:e2:32:
8a:05:fe:65:f3:4f:19:51:3b:d0:46:0e:2c:d3:fd:
8d:db:e9:47:3f:e8:6b:5c:54:a9:18:6c:d4:57:31:
f2:3b:8c:57:e1:03:94:a0:0c:08:d5:57:a6:3e:fe:
c1:11:03:39:36:f1:26:fa:1c:89:6d:13:b1:44:79:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9F:B7:D4:A7:5F:DC:8D:AA:25:E0:59:5C:56:42:6F:56:3D:48:7D
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:00:90:ca:62:5d:d1:2d:9d:c7:94:81:cf:0e:e3:de:4d:af:
55:7f:7b:20:44:b2:00:d0:2c:03:3a:0c:38:a0:49:f9:5d:77:
f3:b8:0b:c9:ec:2b:f2:d0:a6:c4:0b:f0:a2:d7:01:05:23:e3:
3d:fd:27:8b:e4:d6:0e:9d:06:70:4e:e7:2a:86:e1:24:dd:62:
7f:8b:8f:fd:44:a4:1a:e9:c0:ef:5a:05:26:5f:95:26:df:38:
49:65:7d:05:b2:fa:f5:f9:b9:79:39:da:de:3d:88:83:3d:07:
e0:e8:ff:f9:61:17:dd:b9:23:4b:b9:77:53:c7:1f:6e:cb:f1:
4c:c6:a8:3f:42:9c:d7:6d:4d:94:77:64:24:dd:eb:25:0e:2b:
5b:96:79:25:fa:c5:f3:5a:4e:e9:ca:13:21:f3:01:01:34:ce:
22:6c:5e:b2:99:21:a2:a8:80:0f:5a:d2:3e:b2:8a:57:e4:69:
b0:eb:55:ed:88:37:f2:d2:61:d9:62:ef:bf:c8:46:76:ef:f0:
a1:fc:44:84:b6:20:57:80:45:c3:c5:3a:c5:4e:20:db:ed:64:
1b:f7:fd:a8:d3:fd:d4:f4:27:83:32:42:44:d1:4a:df:cb:d1:
18:fa:10:21:a8:af:89:4b:b9:1d:d4:00:38:36:3c:f5:91:53:
59:e3:99:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:09:48 2025 by rpki-client