Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
File: EsShfSBma32NKx_-GKRoevkmIY8.mft (raw, json)
Hash identifier: jXcPXbEVO6iduPVE60rh55ULI/SF7heX8uMowKjMY0A=
Subject key identifier: 4A:A7:C6:19:5A:AA:18:A1:E5:04:24:F6:03:78:7B:18:CB:8D:B4:6B
Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
Certificate issuer: /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Certificate serial: 0196CA972C4EA22AD5F73ED0693561BA46F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 17:00:26 +0000
Manifest this update: Tue 13 May 2025 17:00:26 +0000
Manifest next update: Wed 14 May 2025 17:00:26 +0000
Files and hashes: 1: EsShfSBma32NKx_-GKRoevkmIY8.crl (hash: cYLtxKLYj9IhjoZpAObuq7t+iVUP5DEyc21bhLh70mo=)
2: nfi8L76Q0CcXdXMuyopjIwMNN1s.roa (hash: yyBzF5vSH0UZ1Eb70mzyyMArzuUjMy9cXtif0oEgNm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:2c:4e:a2:2a:d5:f7:3e:d0:69:35:61:ba:46:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Validity
Not Before: May 13 17:00:26 2025 GMT
Not After : May 14 17:00:26 2025 GMT
Subject: CN=4aa7c6195aaa18a1e50424f603787b18cb8db46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:d9:9d:a4:37:7f:11:30:86:a4:35:0d:9b:
e2:7d:a1:d7:3c:9e:e3:02:52:e4:4a:3c:77:7d:13:
6e:c0:16:46:ee:b0:19:cb:bb:d7:f6:26:ed:10:15:
be:e3:e2:5b:89:d7:92:53:08:f0:e8:d2:62:76:6b:
f6:18:85:73:48:7d:3b:f2:ab:4f:5d:29:9c:4c:57:
d3:02:10:98:f2:03:e4:78:c9:c7:93:7a:88:d9:e9:
f4:4a:36:d9:23:3f:ef:71:dd:26:ee:e4:2a:1d:a3:
d3:e8:0d:78:4d:63:fb:4d:a1:e7:69:76:08:45:5b:
f6:91:83:64:4d:22:a4:43:f6:f5:c0:d0:31:29:3f:
b5:f5:db:93:d6:77:68:06:ec:e2:1e:0f:20:c7:f2:
53:b5:2a:14:0e:38:a0:a2:4a:f2:92:18:1e:35:54:
91:97:8d:71:8b:68:ed:59:09:7e:4f:0d:32:50:9b:
e5:a4:5a:73:e9:95:8f:0a:01:dd:1b:d6:d2:05:3c:
84:89:80:99:5c:7a:0f:a2:f2:ae:2a:dd:1c:3d:3d:
e5:94:88:d4:2c:f6:11:34:b3:ee:30:89:32:ee:0f:
19:22:8a:bd:b9:be:49:c3:9c:e5:f5:1f:b2:8a:2d:
c2:d6:64:54:69:0e:f9:21:33:de:f0:1e:67:52:54:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:C6:19:5A:AA:18:A1:E5:04:24:F6:03:78:7B:18:CB:8D:B4:6B
X509v3 Authority Key Identifier:
keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5f:b4:6a:86:5b:ab:ef:74:02:1c:d1:76:0c:07:8f:89:ad:
d7:87:63:7b:d7:be:fd:60:5b:88:22:9d:63:51:91:9d:ea:28:
fb:89:7d:e2:c3:75:1d:5d:e3:53:75:57:da:16:39:dc:29:e8:
40:d8:9b:98:aa:ce:4e:51:f5:d7:b5:fb:20:75:49:11:ce:07:
1c:ad:5f:0c:be:19:ee:4e:91:90:c1:15:17:01:6a:82:ae:9a:
2d:4d:5c:36:87:e0:b2:5c:22:77:b0:aa:cc:8c:57:d7:a3:a0:
1b:cb:80:ce:83:9e:65:ff:04:01:9d:f9:f6:58:41:bd:fc:2f:
6b:14:90:d0:88:e5:f8:6a:cf:ba:c6:33:6c:e8:9a:84:ff:be:
0f:a6:04:a5:92:55:d1:f4:33:66:f6:a7:01:c9:5a:71:dc:78:
81:6f:47:0f:b5:e4:48:fd:ca:3d:d6:a6:f9:97:c2:91:04:df:
d4:29:70:0f:30:fd:e4:d0:dc:15:0c:03:12:f8:52:da:ec:88:
6d:01:10:0e:bf:45:82:53:69:8e:f5:76:b5:d3:bd:ea:a5:69:
a4:97:c0:9b:27:2c:9f:03:d1:fa:e5:2d:6f:9b:46:58:d7:6f:
95:cb:af:1c:12:77:16:24:6f:cb:be:12:2c:f2:eb:4c:c7:7b:
d2:20:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:22:39 2025 by rpki-client