Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: U5lp1kl0T+NxmS/mGF6gvHUElxvEMp57W6LCZ/ldUJ8=
Subject key identifier: B5:6A:14:72:49:A9:66:52:EB:10:B9:AB:2C:0A:A5:93:F8:A7:E2:C1
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 0196BC6E4984A43430A029F8AC06744BAF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 0EF5
Signing time: Sat 10 May 2025 23:01:06 +0000
Manifest this update: Sat 10 May 2025 23:01:06 +0000
Manifest next update: Sun 11 May 2025 23:01:06 +0000
Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=)
2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=)
3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: v/40LngpSuqGJpP+nVMNJ1sXZ0zqjBFlVTm5ZaRtZVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:49:84:a4:34:30:a0:29:f8:ac:06:74:4b:af:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: May 10 23:01:06 2025 GMT
Not After : May 11 23:01:06 2025 GMT
Subject: CN=b56a147249a96652eb10b9ab2c0aa593f8a7e2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:9b:58:7e:c9:93:25:db:76:2e:c5:ca:db:
61:21:ca:b3:d0:db:98:0c:40:e1:da:1e:28:1c:69:
0b:94:2a:9d:b8:03:49:8f:22:75:fd:02:0e:fb:a1:
ac:8b:1d:f0:be:36:66:54:5e:ba:0f:b6:a1:0b:13:
40:45:77:77:d0:f9:61:8c:71:ea:19:20:53:9a:f7:
a9:61:29:29:cd:99:bd:db:7b:eb:3f:04:7a:18:ad:
20:6e:8a:15:d8:8a:68:ef:45:4c:76:37:30:74:67:
e4:01:b0:18:52:a9:1a:ca:e0:10:90:ea:84:c0:c1:
8f:95:b0:71:e5:df:48:da:32:55:4a:7b:c2:c1:fb:
a2:3d:63:be:6e:26:37:27:d1:aa:ec:21:12:89:14:
ac:02:91:2f:33:b2:e8:a3:f2:25:60:69:e2:46:22:
a9:aa:cc:e4:f5:32:5d:a8:2d:88:f6:9d:fe:7b:08:
68:fb:ad:45:55:80:fd:7e:93:bf:fd:d6:eb:bf:cb:
32:50:fa:c5:d5:db:62:bd:4a:19:dc:0e:19:c5:f3:
66:d1:d2:70:9b:e0:12:97:29:2f:b8:dc:6c:e9:b0:
0f:d2:ca:13:c8:a7:95:c3:5e:ce:46:39:bd:df:4b:
1a:c8:27:f6:34:ff:2b:6f:5d:9f:09:b8:77:22:9f:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6A:14:72:49:A9:66:52:EB:10:B9:AB:2C:0A:A5:93:F8:A7:E2:C1
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0d:db:a2:fd:81:9f:88:77:db:cf:8f:4a:2d:b0:97:92:85:
90:cc:7d:9b:49:72:ea:58:9e:5c:9e:41:79:e4:f7:8e:0f:68:
3b:d8:79:90:11:d4:92:f0:7c:35:da:f4:50:63:67:76:dd:f1:
72:e5:e4:3b:e0:5e:9e:10:18:2e:43:1d:19:9b:03:c3:d1:ce:
35:5f:60:8b:29:63:09:cc:05:3f:01:f0:9c:32:54:f7:59:42:
69:3b:e8:6f:2b:07:2d:4f:ae:47:75:ee:a6:17:54:0c:0e:b8:
27:17:14:9b:c2:9d:1e:e5:7e:d4:35:69:47:d6:28:7e:4e:80:
15:33:84:f2:fe:d7:6c:87:af:b8:c6:46:2d:e5:e2:03:4c:56:
05:5d:31:5c:e2:46:3e:43:73:5a:62:1f:9d:f9:3c:b1:a0:07:
2d:fe:64:2d:90:60:b2:ce:1d:93:c9:d7:6d:86:f1:f6:e9:7b:
70:2b:35:68:dd:1f:7d:87:9e:5f:f2:4b:61:84:bf:e6:64:3a:
85:26:18:d2:64:ba:60:b1:44:1f:6a:33:6d:9d:61:3b:6d:9e:
ba:11:4b:40:f0:fe:5b:d1:14:63:34:3a:10:c3:88:f0:8d:c0:
2e:52:04:da:60:cb:d4:93:14:d1:d7:f3:c7:49:bd:6f:a5:52:
e5:cc:84:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:56:14 2025 by rpki-client