Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
File: eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json)
Hash identifier: nfMfanen8o7fgMrr8k5TfEkDvXy18wsmAr8gDBJwKz0=
Subject key identifier: 53:C2:1B:9B:42:CB:AB:DC:67:20:F5:B2:42:E2:B6:29:6B:92:A1:A0
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial: 0196A1647C09EE78F0FA2213794BFF9CF785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
Manifest number: 0171
Signing time: Mon 05 May 2025 17:00:39 +0000
Manifest this update: Mon 05 May 2025 17:00:39 +0000
Manifest next update: Tue 06 May 2025 17:00:39 +0000
Files and hashes: 1: VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa (hash: gWEnNe9T8U6TtdthLKRFfDmS/LnKXxsDWRpdZGNSQs4=)
2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: 1AzX7B6mI5IFP7qY2/0MYjulSqQhFgTf4t89ljOSRUc=)
3: pCSKhYNkTR7SxUskaAwpFx35Lys.roa (hash: XnHKJyo6BAhxQvWoTo8yVgwue3aegX0njca6tfTmGRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:7c:09:ee:78:f0:fa:22:13:79:4b:ff:9c:f7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Validity
Not Before: May 5 17:00:39 2025 GMT
Not After : May 6 17:00:39 2025 GMT
Subject: CN=53c21b9b42cbabdc6720f5b242e2b6296b92a1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:fb:68:56:7e:8f:55:54:06:0e:22:93:cf:
64:d1:0e:c7:b2:73:09:71:d1:3e:43:20:e4:72:79:
65:04:d9:2e:23:54:63:b8:e0:ae:c2:1c:25:d2:42:
24:ee:86:62:43:fc:7e:3f:44:c8:26:04:9c:66:9d:
4c:a2:e2:59:97:f7:c7:77:b3:5d:ba:be:cf:51:75:
68:ed:cf:91:fe:34:f0:d8:94:b9:54:4f:1e:1b:1b:
c9:05:7b:2e:c2:64:00:c6:c1:97:26:8e:cb:c6:3f:
9c:c7:b5:06:90:48:60:70:05:62:8e:96:99:cb:a4:
97:ba:95:03:7a:15:bd:65:52:68:ba:b5:14:9f:eb:
bb:08:cf:cc:c1:a7:14:76:c3:e6:b4:ec:37:9f:e3:
d9:8a:76:4f:0e:b5:c4:27:fd:ce:da:71:ce:1b:11:
39:76:32:9c:cf:ba:8c:9e:c2:1c:fb:16:2a:af:4f:
dd:31:8a:9b:c7:19:83:f6:db:12:47:0c:2a:00:d0:
ef:c3:e8:93:03:fe:82:2f:8b:c6:a7:74:e9:fe:37:
ab:8a:71:49:41:0d:b4:cc:86:ad:92:fb:39:4c:2b:
be:7b:47:75:3c:66:51:af:0a:63:10:66:e1:45:fd:
1f:c4:4a:d5:fa:02:fd:e8:da:97:5f:60:24:a3:ec:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:1B:9B:42:CB:AB:DC:67:20:F5:B2:42:E2:B6:29:6B:92:A1:A0
X509v3 Authority Key Identifier:
keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a1:98:de:20:b2:90:91:12:62:3c:d0:e6:bc:16:d6:03:46:
5a:9a:61:d2:e5:f8:41:90:40:41:10:fa:17:87:9d:d5:f2:9f:
bf:8e:fd:5d:ed:bf:fd:ed:2b:fc:1f:15:6f:d2:7c:8e:14:24:
4e:a2:dc:2c:7d:9a:e1:f5:bb:78:dd:83:3d:0e:c3:c1:20:70:
7b:59:e1:cf:50:33:1c:6d:c0:67:ad:2b:61:1d:65:5a:30:a9:
e9:f6:99:4f:e5:7c:26:70:b1:e7:09:f5:cb:de:35:d5:ab:6b:
cd:7a:f6:2f:bf:c2:2a:81:1c:48:16:b3:47:61:31:84:59:e7:
a6:9a:af:38:79:de:74:17:90:93:2c:75:fe:d6:0a:ab:81:c7:
e2:7c:38:7d:d1:c0:77:57:e5:3c:a1:48:c9:84:7e:a8:e6:38:
3e:a2:16:df:75:71:8b:04:80:4b:89:5e:5c:be:3f:c8:0c:33:
48:08:41:67:84:aa:fc:67:32:a6:2e:b7:18:fd:76:0c:d7:3a:
5e:e9:a9:19:9f:ea:a4:bf:67:c2:4b:59:27:40:9f:71:d9:a2:
76:43:14:4d:23:b2:cb:1e:ab:21:4b:b9:5e:4f:f2:35:d4:88:
6b:f0:a4:71:fb:d8:b4:24:2a:bd:f0:dc:4b:f2:7b:0d:35:95:
65:f0:7e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:01:13 2025 by rpki-client