Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
File: eA-G0ESkoqIzMZQYqo2prYN8duo.mft (raw, json)
Hash identifier: IILa0TI73cSnrHZYu44KrhvvLegYQFtjjbk09cF2B08=
Subject key identifier: A2:F4:F2:82:49:6F:C5:7E:A7:24:85:3B:E8:47:CE:9D:6F:E0:26:87
Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Certificate issuer: /CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Certificate serial: 0196B17C41F5B38DA0E6BC14305C60680704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
Manifest number: 1531
Signing time: Thu 08 May 2025 20:00:32 +0000
Manifest this update: Thu 08 May 2025 20:00:32 +0000
Manifest next update: Fri 09 May 2025 20:00:32 +0000
Files and hashes: 1: 3FcBSSiJh8aVrK9iYZdzbMgTqW4.roa (hash: 6RoiwnIQu/6s++wuEChPFYXGvNvnIKo47xh4stLwSlQ=)
2: eA-G0ESkoqIzMZQYqo2prYN8duo.crl (hash: 5cTeOZ4VSYZkpBppkPw9a2Acz4pNrWRTcD1v22OvaZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:41:f5:b3:8d:a0:e6:bc:14:30:5c:60:68:07:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Validity
Not Before: May 8 20:00:32 2025 GMT
Not After : May 9 20:00:32 2025 GMT
Subject: CN=a2f4f282496fc57ea724853be847ce9d6fe02687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:d2:c9:1d:13:6c:fb:d8:35:b3:21:35:7e:
15:0b:a7:d7:4a:40:86:fa:c3:ab:42:f8:6b:a3:ba:
24:67:a2:4a:f1:e3:4b:a5:a2:a3:23:c7:12:0a:2d:
f3:80:3d:05:5b:d7:6e:7b:3e:10:b1:6b:a1:63:9c:
a8:53:22:ca:06:9c:53:7b:ce:48:7c:4e:bf:05:e9:
e2:d9:f0:ae:1b:1b:21:81:a8:89:dd:94:7c:5a:9e:
7c:38:b9:59:0b:0e:2f:b7:21:d6:fd:22:59:68:17:
27:e6:e1:81:38:0a:c5:07:fd:0e:ec:1e:3d:ce:8a:
eb:a3:78:3f:6b:cd:9c:80:e8:04:28:41:0f:77:2c:
25:19:5a:45:3d:b6:10:5f:3f:d5:f0:90:4e:a5:d3:
65:b8:53:48:79:f4:63:b4:bf:d4:e4:00:98:94:39:
ef:18:65:1e:40:46:7d:02:d9:1f:4e:3e:b3:dc:a7:
9f:b0:b0:2f:be:bc:48:b6:60:3c:8f:47:95:dd:f7:
c4:3e:25:9f:70:7a:c3:22:f1:f1:4a:7b:5e:28:df:
8a:c8:14:98:a1:55:33:3f:d2:63:8d:c5:37:91:35:
9c:a2:99:ed:fa:9e:83:44:81:06:f9:ff:64:e0:cb:
f7:0c:4b:2f:56:b6:ef:00:6a:52:ce:ad:6b:03:21:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F4:F2:82:49:6F:C5:7E:A7:24:85:3B:E8:47:CE:9D:6F:E0:26:87
X509v3 Authority Key Identifier:
keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:36:e5:3c:c1:0c:c1:88:ae:1f:86:1c:77:63:c4:7a:c4:27:
a1:af:b9:5a:10:73:b1:9d:5c:e6:00:9f:82:2c:5a:0c:60:bd:
a4:d2:5c:21:5c:07:fb:65:f8:82:fa:e2:ed:1b:31:7b:eb:80:
77:ed:ba:a4:3c:c0:4f:a2:d2:2b:6f:c8:79:b9:55:8b:9b:a1:
31:99:15:e3:89:c2:63:a0:9a:c7:a8:9c:58:08:c4:5d:c3:17:
c7:a4:c8:04:a4:22:7b:c6:f1:4b:9c:6b:85:fa:03:3c:de:78:
5e:74:91:41:d4:02:18:76:9d:5c:60:26:2d:65:5c:04:b2:35:
f5:70:b6:3f:eb:d3:6a:d9:69:02:2f:85:eb:cb:f4:7c:70:58:
e1:7c:52:73:46:ac:68:2a:0a:39:02:58:34:42:87:c0:e5:38:
57:7c:7b:18:a0:40:e3:d4:54:ad:6b:ca:d4:20:a1:db:5c:72:
0e:4c:b7:7f:83:fc:28:ef:51:d9:40:65:8a:d9:d7:d5:d6:f2:
ee:30:00:42:45:3d:82:a1:a2:ea:a8:e6:ac:8e:cd:49:86:38:
33:c2:ec:1e:a9:4f:a3:1f:98:ec:1c:60:02:7d:be:42:12:4a:
74:bc:fa:f0:c8:6d:55:26:53:42:b2:6c:7c:6c:b7:8b:77:f8:
3c:3d:0d:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaxfEH1s42g5rwUMFxgaAcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MGY4NmQwNDRhNGEyYTIzMzMxOTQxOGFhOGRhOWFkODM3
Yzc2ZWEwHhcNMjUwNTA4MjAwMDMyWhcNMjUwNTA5MjAwMDMyWjAzMTEwLwYDVQQD
EyhhMmY0ZjI4MjQ5NmZjNTdlYTcyNDg1M2JlODQ3Y2U5ZDZmZTAyNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+7SyR0TbPvYNbMhNX4VC6fXSkCG
+sOrQvhro7okZ6JK8eNLpaKjI8cSCi3zgD0FW9duez4QsWuhY5yoUyLKBpxTe85I
fE6/Beni2fCuGxshgaiJ3ZR8Wp58OLlZCw4vtyHW/SJZaBcn5uGBOArFB/0O7B49
zorro3g/a82cgOgEKEEPdywlGVpFPbYQXz/V8JBOpdNluFNIefRjtL/U5ACYlDnv
GGUeQEZ9AtkfTj6z3KefsLAvvrxItmA8j0eV3ffEPiWfcHrDIvHxSnteKN+KyBSY
oVUzP9JjjcU3kTWcopnt+p6DRIEG+f9k4Mv3DEsvVrbvAGpSzq1rAyHrsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKL08oJJb8V+pySFO+hHzp1v4CaHMB8GA1UdIwQY
MBaAFHgPhtBEpKKiMzGUGKqNqa2DfHbqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUEtRzBFU2tvcUl6TVpRWXFvMnByWU44ZHVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wM2NjNGYtNjBjMi00NzVlLTllMDkt
NTI0ODAzZWUyOTQ5LzEvZUEtRzBFU2tvcUl6TVpRWXFvMnByWU44ZHVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wM2NjNGYtNjBjMi00NzVlLTllMDktNTI0ODAzZWUyOTQ5
LzEvZUEtRzBFU2tvcUl6TVpRWXFvMnByWU44ZHVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDblPMEM
wYiuH4Ycd2PEesQnoa+5WhBzsZ1c5gCfgixaDGC9pNJcIVwH+2X4gvri7Rsxe+uA
d+26pDzAT6LSK2/IeblVi5uhMZkV44nCY6Cax6icWAjEXcMXx6TIBKQie8bxS5xr
hfoDPN54XnSRQdQCGHadXGAmLWVcBLI19XC2P+vTatlpAi+F68v0fHBY4XxSc0as
aCoKOQJYNEKHwOU4V3x7GKBA49RUrWvK1CCh21xyDky3f4P8KO9R2UBlitnX1dby
7jAAQkU9gqGi6qjmrI7NSYY4M8LsHqlPox+Y7BxgAn2+QhJKdLz68MhtVSZTQrJs
fGy3i3f4PD0NEg==
-----END CERTIFICATE-----
Generated at Fri May 9 01:15:23 2025 by rpki-client