Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
File: EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json)
Hash identifier: fb3iH4nd5raRnizlxIcl1f7X9phnwJEH/aRcnBUjpbw=
Subject key identifier: AF:12:8A:1D:57:59:AC:EF:3A:77:9E:E6:CF:FD:5C:5F:69:3C:D0:52
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Certificate issuer: /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial: 0196A01AEF852A3995D6701856889265D0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
Manifest number: 046B
Signing time: Mon 05 May 2025 11:00:41 +0000
Manifest this update: Mon 05 May 2025 11:00:41 +0000
Manifest next update: Tue 06 May 2025 11:00:41 +0000
Files and hashes: 1: 5LHo1rIxEBH1YyvcCV5J0OCLikI.roa (hash: G0Yp0y8eU2LPogOz8dggyJAEEJcHDiocdCHAGxqPAIo=)
2: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: hIGiUiVJ6H+Ki96Badod+Pl9P6fP3jn3qYdkn41b7QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:ef:85:2a:39:95:d6:70:18:56:88:92:65:d0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Validity
Not Before: May 5 11:00:41 2025 GMT
Not After : May 6 11:00:41 2025 GMT
Subject: CN=af128a1d5759acef3a779ee6cffd5c5f693cd052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:21:0d:39:69:95:61:ae:96:6f:37:ab:e1:
dd:ab:9c:18:e3:73:72:2f:bc:40:ed:6d:a3:71:5d:
0e:b9:16:67:67:d3:69:ff:b5:d6:8d:28:11:6a:08:
bc:32:b2:6d:a0:1e:a6:88:9d:49:21:e5:39:54:05:
ac:f5:36:85:74:e5:6b:bd:2e:6e:07:16:b6:4b:98:
4d:4d:1a:cf:96:28:3c:03:1a:d6:ff:97:92:71:6a:
ea:b6:1d:44:91:60:60:fd:a4:50:e8:f6:94:1d:b9:
ba:99:26:3d:38:9f:2d:4a:43:3f:f7:09:c7:12:e2:
66:17:aa:62:0a:08:ed:51:24:20:70:65:bb:44:49:
3b:78:81:90:d7:7c:07:4e:8b:31:10:69:8b:96:2a:
a0:45:26:01:c9:e4:e3:d4:d7:d5:1a:7d:2c:7b:fe:
66:be:2d:05:d5:20:32:a6:b0:5f:9d:d3:47:0c:98:
d2:db:1f:a8:7a:28:3c:70:90:8c:e2:84:39:ba:09:
90:f8:c8:8e:94:5a:f4:98:f1:53:0c:76:4b:b3:38:
6d:35:81:84:da:75:fb:44:a1:0f:ff:a2:32:ec:90:
b9:79:ae:7a:0d:d8:52:f7:01:7a:c0:43:aa:93:4e:
dd:d6:e9:f3:0c:51:cb:a3:39:df:cb:bd:bd:c1:81:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:8A:1D:57:59:AC:EF:3A:77:9E:E6:CF:FD:5C:5F:69:3C:D0:52
X509v3 Authority Key Identifier:
keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bc:a5:f4:f0:56:5f:33:75:1e:61:1a:2b:c4:9e:c8:08:5e:
77:94:8c:72:4b:bd:c9:37:f4:2f:52:82:11:d2:b5:e4:3a:81:
25:91:72:86:a5:3a:ba:b9:ff:0d:a1:3c:c2:56:53:b8:8c:6c:
3a:26:d8:78:df:62:47:a2:7b:b0:56:3b:c6:6e:60:14:04:13:
36:59:93:d4:0a:31:75:25:f3:07:56:e1:ca:39:92:87:1c:3a:
c6:78:82:46:69:f1:13:e3:a8:a2:dd:61:b8:48:3d:61:17:d3:
7e:22:e9:e1:7e:97:ea:dc:a3:fd:10:df:9b:b5:af:93:ad:0a:
1d:a0:3b:99:b0:93:40:d1:66:61:3b:85:ce:c2:98:5e:d8:f3:
52:11:cb:2e:92:45:d4:21:b2:f5:6a:5b:53:a7:88:1d:7d:1c:
cf:c4:00:d1:75:6c:27:f7:43:be:18:32:61:39:fa:73:dc:e5:
dc:f8:3b:6f:b5:57:a8:f4:30:e8:49:d3:61:74:70:4a:07:31:
e9:e0:3d:9b:c4:1c:19:8b:5b:d1:44:f5:56:26:5f:be:6a:d5:
22:25:93:cd:c3:78:9c:32:37:4b:61:8c:73:15:3e:6b:a2:a3:
0b:eb:67:0e:d8:c6:9e:df:c3:00:85:53:bd:c8:79:6c:d9:3c:
61:08:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:36:54 2025 by rpki-client