Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
File: eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json)
Hash identifier: 6jmgKeYZI7L1m2SKWU7TgZOgs1t+6Mf7NUYl70jLKcc=
Subject key identifier: 10:70:EC:68:0A:0F:D8:69:3F:D8:BB:AD:28:DA:C8:D3:5D:1D:99:3A
Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
Certificate issuer: /CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Certificate serial: 0196BDB778328F8B32AD3611F8BD9F665694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
Manifest number: 0203
Signing time: Sun 11 May 2025 05:00:39 +0000
Manifest this update: Sun 11 May 2025 05:00:39 +0000
Manifest next update: Mon 12 May 2025 05:00:39 +0000
Files and hashes: 1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: l0OIecC77iPRGVzU/DLH0l/4jii2gVBrUlIh+QDWrTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:78:32:8f:8b:32:ad:36:11:f8:bd:9f:66:56:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Validity
Not Before: May 11 05:00:39 2025 GMT
Not After : May 12 05:00:39 2025 GMT
Subject: CN=1070ec680a0fd8693fd8bbad28dac8d35d1d993a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:0f:9f:23:11:c2:ad:e4:f5:d5:24:cd:b0:
e7:a5:fc:b5:7f:e8:2d:cc:31:b7:cd:59:ae:b5:d6:
31:9b:16:8c:76:57:19:08:da:a2:b3:c4:b8:09:dc:
f0:9a:21:75:bd:78:a0:51:a8:78:31:98:dd:3f:9e:
9c:54:be:98:98:c5:77:96:14:f9:6b:b5:e6:c8:c3:
f9:3a:46:47:d4:c8:0e:09:ed:ed:96:73:f0:8e:8a:
30:e9:7a:7e:d1:91:cc:00:7c:1f:c0:4e:c7:2c:26:
0b:3b:f5:3f:55:90:41:db:e7:bc:d8:0e:10:a7:de:
44:38:b1:97:bb:86:09:61:66:8d:7f:d4:8f:57:5a:
c3:d6:f0:0e:fa:97:7c:09:29:68:79:5e:64:cb:9f:
04:f4:f5:9b:e9:46:70:4a:28:30:63:63:e2:13:2a:
5a:e2:00:fb:ef:b8:e2:c0:12:49:13:e0:20:6e:bc:
19:78:29:d0:7d:08:c1:0a:a9:a9:0f:d2:37:bd:60:
76:75:1c:13:08:7e:de:2e:30:4e:56:a7:be:39:b3:
1a:4f:a7:a0:b9:31:61:1c:7c:cc:15:c3:9b:ff:ba:
9d:91:90:f5:54:82:49:2e:81:1f:6a:7b:ff:72:66:
d4:a7:a9:3e:be:b9:f2:37:de:84:a2:16:3f:d8:4f:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:70:EC:68:0A:0F:D8:69:3F:D8:BB:AD:28:DA:C8:D3:5D:1D:99:3A
X509v3 Authority Key Identifier:
keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:22:14:8e:fd:79:c7:35:a3:da:32:5e:ec:49:de:7a:b4:59:
81:b5:93:66:25:de:cd:8f:7e:d1:fa:78:06:ba:1c:ae:3e:a9:
b1:6c:2b:18:07:ca:48:32:35:48:7f:fd:88:bd:5a:bc:3a:5e:
18:2a:ac:de:c1:69:a4:37:be:27:71:a0:43:82:6d:2a:86:97:
46:b8:06:09:36:3e:24:2c:48:83:3f:5c:fe:e6:f5:07:6e:2c:
25:d5:09:4c:3e:31:a4:2f:c2:26:95:16:ca:b5:98:72:aa:e7:
6b:42:7e:38:a2:f1:8a:15:fa:8b:92:59:15:f3:b6:e4:3a:b2:
53:3f:93:87:73:ed:99:55:cd:64:ee:00:c7:e5:ca:24:af:05:
1f:c3:9d:4d:34:e9:55:91:f4:95:0b:b7:79:59:92:be:ad:aa:
58:95:38:04:06:13:26:65:8e:90:ad:2a:0b:cb:8f:02:27:e7:
fd:b5:b4:3f:47:22:21:4c:a9:d1:ec:ba:ed:0a:dd:63:e6:22:
33:08:0d:d9:0f:fb:45:e0:58:1e:d3:52:ad:f7:93:3a:b9:01:
b1:75:c2:29:64:bb:6d:48:33:4c:ec:0e:57:13:af:25:62:c5:
81:47:59:ef:7d:21:92:b6:ea:c4:65:9a:2e:ae:83:c0:72:48:
2a:f3:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:17:41 2025 by rpki-client