Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File: edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier: lh7xp3WqHRPwMao/anIh43AUQWLLlrtcvvQLW6PS7W8=
Subject key identifier: 27:5A:31:84:7C:5A:3C:B6:6C:D2:FE:38:CA:0B:DA:C7:18:1B:5E:3A
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 0196A1643EE5E082D520151AAC125C44FAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number: 1047
Signing time: Mon 05 May 2025 17:00:23 +0000
Manifest this update: Mon 05 May 2025 17:00:23 +0000
Manifest next update: Tue 06 May 2025 17:00:23 +0000
Files and hashes: 1: TYJYGhUdPQj6nUzCCLnr49eyuJI.roa (hash: FFOiY72wCTLfd9O6jpfQiklPE7rmHUgalP7Yo7iSGDQ=)
2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: V5kJS6nucPZMyZ+YExSp749/7HEuy8NezHh2rXDDwxU=)
3: hAlLG94IoU5kKafsGjrMwkfb3Zw.roa (hash: ln0Y8HQZmVKSWnd47yKAygvb/rzeGv9K49zzh8vw+ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:3e:e5:e0:82:d5:20:15:1a:ac:12:5c:44:fa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: May 5 17:00:23 2025 GMT
Not After : May 6 17:00:23 2025 GMT
Subject: CN=275a31847c5a3cb66cd2fe38ca0bdac7181b5e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:e7:bc:bf:e6:4e:cd:bd:76:89:8b:30:0e:
28:b4:09:de:78:4e:d3:1b:22:f9:6b:f8:ea:12:0f:
41:9a:58:47:9d:59:31:1f:99:46:e0:c6:9a:a4:ef:
65:27:22:73:e1:74:39:3b:4f:62:d7:cc:cf:77:5e:
75:b7:bb:d8:28:5d:fc:ca:7b:e4:09:47:5e:cc:22:
38:ef:bd:fc:f5:e5:5b:a0:5e:37:3b:e6:fe:37:56:
f4:5d:bd:a8:a2:56:02:33:fd:fe:45:dd:c1:1d:cb:
0a:b4:fc:3d:e0:4f:d3:58:f2:b8:c2:a2:6a:52:f5:
2a:f4:16:c5:fe:8a:3f:ff:19:c2:ef:70:6a:ad:72:
03:c9:78:04:5a:a2:52:48:37:3e:02:51:0c:9d:9d:
b0:1b:0e:75:a8:32:c1:86:eb:92:a7:fb:0a:76:96:
71:e9:56:17:cf:0c:63:b5:48:cc:ad:38:f1:bb:e4:
34:be:a8:a4:b6:1c:ca:02:40:90:fb:ef:c6:fe:e0:
fb:eb:dd:6b:3b:de:f7:8c:9d:4d:07:7f:1b:4c:8f:
cd:94:4e:db:23:c5:f2:67:1b:19:a5:53:70:c3:e5:
ca:81:76:de:5c:54:4f:58:fc:e1:b5:25:d8:88:e7:
1f:9d:d2:43:02:a5:8a:88:28:89:02:01:fb:32:db:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5A:31:84:7C:5A:3C:B6:6C:D2:FE:38:CA:0B:DA:C7:18:1B:5E:3A
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:81:ae:f3:e7:6e:97:7d:1c:87:b9:c2:3c:97:7f:33:e5:98:
45:51:05:1e:e0:66:80:75:34:cc:b5:a7:f6:8d:7f:d1:d7:bf:
df:21:a9:08:64:34:9a:91:ed:6c:ad:2d:6d:3e:59:f0:a7:4b:
03:ce:80:92:38:a9:5c:10:24:0c:2e:e4:0c:5e:45:3d:d9:30:
6f:1a:3d:d5:47:a3:da:b1:dc:13:6f:bb:c3:60:4b:30:91:b0:
3b:02:21:c8:4e:ee:3b:b1:88:ca:23:c3:ca:1b:9e:32:6d:c2:
cd:c3:7f:68:e8:93:2a:7a:0c:47:2d:d1:ca:4c:3c:6d:d5:11:
f1:6b:46:9d:ca:c4:da:3f:8e:ed:12:a1:a7:73:db:3b:a6:ec:
9c:e5:04:12:d8:c8:e0:63:c1:a2:52:89:4b:b1:21:71:4a:14:
4a:92:58:c7:48:9d:3f:94:e2:db:0b:2c:22:11:5b:73:f4:78:
9e:2e:90:8f:ab:55:28:5b:08:7d:d9:9a:d7:c8:96:35:36:7d:
64:38:3f:8b:f2:83:9c:5c:db:c0:87:68:ad:60:36:69:42:a3:
20:a5:be:78:9b:5b:eb:89:1a:57:00:36:19:8a:f6:5d:58:8d:
20:bd:f0:9b:6d:83:ef:68:12:69:2b:45:e8:f2:bc:2a:f2:d5:
09:e9:6a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:51:06 2025 by rpki-client