Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier: j3QSJtP0O8RVw0pWWWg32h/DTnlArph98Pph/JRCNq8=
Subject key identifier: 47:66:8F:6A:45:F4:63:C2:A3:FB:16:47:B9:C5:35:58:67:D1:CC:BD
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 0196C26FB2BC745F0810F8BB49F90B2AC493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number: 0D2B
Signing time: Mon 12 May 2025 03:00:22 +0000
Manifest this update: Mon 12 May 2025 03:00:22 +0000
Manifest next update: Tue 13 May 2025 03:00:22 +0000
Files and hashes: 1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=)
2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: E2pXGx+fxd3cr/wnBwcsrpAiTwf9rxC4hMFdZ/1qn1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:b2:bc:74:5f:08:10:f8:bb:49:f9:0b:2a:c4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: May 12 03:00:22 2025 GMT
Not After : May 13 03:00:22 2025 GMT
Subject: CN=47668f6a45f463c2a3fb1647b9c5355867d1ccbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f8:78:23:ba:ef:c5:05:75:29:d4:31:c0:5e:
d2:30:55:70:f3:30:f9:43:bd:13:43:82:24:f2:a1:
db:0d:f0:33:37:d6:50:74:24:15:ac:ce:68:fb:a9:
f8:d2:c6:6a:6e:ab:11:5c:7b:7c:4e:98:c1:fb:6b:
86:2b:a9:db:56:52:35:94:23:03:75:87:ab:87:46:
0f:33:92:f5:de:ff:c8:68:f6:9c:3f:d6:af:97:84:
d7:07:8c:f2:38:6a:52:e6:35:3d:74:67:6a:05:68:
78:a7:59:a2:0f:31:49:35:32:32:90:39:6e:91:15:
42:a7:71:87:71:c6:ae:dc:02:bc:fd:03:08:b6:26:
6c:c1:9d:67:73:e0:f0:ca:a2:07:8c:85:11:28:e3:
19:01:51:9e:a2:03:ec:c0:0d:7c:d1:48:f5:81:18:
65:26:d3:f4:ed:09:da:37:ab:a2:fc:01:84:d9:78:
f9:25:30:4e:58:96:bf:d3:fa:c9:3f:a2:44:e3:c7:
95:46:10:25:ac:dc:2e:4c:dc:7e:2c:06:e9:c8:f4:
e4:d0:53:b5:e5:11:7f:e2:48:5f:2b:59:08:01:1f:
b5:61:ec:20:17:f6:02:6d:b5:1f:4d:0e:ef:c9:18:
5b:31:24:3a:89:6b:13:fd:cf:95:ff:2f:64:6c:1a:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:66:8F:6A:45:F4:63:C2:A3:FB:16:47:B9:C5:35:58:67:D1:CC:BD
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cf:f1:a1:3b:89:be:6d:77:3b:93:ee:f9:29:ed:49:d9:9f:
1d:7c:30:b4:f6:e4:2d:21:dd:c1:8f:90:8d:0d:ae:e8:04:cc:
32:90:1c:84:ff:e2:c2:de:1e:85:13:8e:e5:b5:f4:1f:d5:2d:
31:84:42:0a:db:9b:1f:2e:fa:74:37:70:bc:4d:bc:95:61:b4:
e7:7a:a9:e4:2e:2a:33:b4:6e:7c:65:bc:59:19:9e:f3:0a:5c:
1e:40:7b:88:7e:f6:9b:37:eb:88:a3:40:70:40:cc:bc:7c:0a:
92:f1:82:2d:f4:41:8c:4d:4c:08:de:68:15:bf:02:51:66:69:
e6:91:34:40:79:58:b3:f4:ed:06:52:3f:93:d8:18:02:26:ca:
b2:24:53:89:62:91:21:86:97:dc:37:cb:fa:85:fe:8a:ad:65:
e8:83:38:95:c9:56:a0:26:20:93:d0:e6:eb:af:43:f3:d7:3f:
5d:8e:2d:45:88:7c:da:01:5d:12:47:48:f2:da:c5:35:e7:dc:
27:99:76:50:83:ce:fe:25:61:1c:cf:e5:f3:a7:11:69:21:11:
06:06:e9:e9:c0:29:a1:71:07:03:b2:3f:7d:9e:63:92:b0:1c:
97:60:87:35:a1:a6:76:9b:5b:43:ab:55:a8:e4:12:24:9f:4c:
b8:78:2c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:13:43 2025 by rpki-client