Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
File: E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json)
Hash identifier: odzM7pzpQtr4FZcWNVzXgN3OAk6ybSzRzTPgaLMvupg=
Subject key identifier: 09:1E:E0:99:1B:58:7B:C8:21:F4:BA:7C:D0:26:3B:A3:6D:58:E4:14
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Certificate issuer: /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial: 01964D7E54BD45D69590BE2A6184230C16FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 10:00:46 +0000
Manifest this update: Sat 19 Apr 2025 10:00:46 +0000
Manifest next update: Sun 20 Apr 2025 10:00:46 +0000
Files and hashes: 1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: 5zwFoOauYk+DfzDdbBvjHF3XQZdSuvqwCu1j4UM3b38=)
2: YUczG5dGYRQf7s0wy9SzxbyGN1c.roa (hash: AUrq9hAikj9WxxWS78u0ChjSuDjwGem9EdzmHLzSliw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:54:bd:45:d6:95:90:be:2a:61:84:23:0c:16:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Validity
Not Before: Apr 19 10:00:46 2025 GMT
Not After : Apr 20 10:00:46 2025 GMT
Subject: CN=091ee0991b587bc821f4ba7cd0263ba36d58e414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ad:95:3e:bf:5e:81:b3:17:33:4a:5d:ce:41:
d2:c1:42:5a:d7:eb:80:18:39:bc:c5:46:a5:e1:a9:
0a:3a:00:68:c3:c7:83:b9:d7:0d:78:35:51:f8:60:
2e:0d:38:44:5e:8d:75:39:2d:c0:98:1b:90:ad:76:
2d:04:61:ce:a3:b1:25:7a:f8:55:36:52:b8:4c:98:
16:22:e8:f3:0b:a4:4c:6e:fe:e3:81:9b:31:8f:11:
69:08:07:5d:85:ae:70:e8:41:b1:89:f1:ee:e4:40:
8f:88:26:b3:23:b0:f1:34:c3:6c:55:18:b0:43:f7:
22:ca:8a:05:5e:af:e0:41:e7:ae:1e:5b:51:f8:ba:
15:77:cf:67:08:ce:3f:e1:3e:85:9f:0d:96:3a:6a:
39:71:6d:01:8b:18:41:38:22:dc:6d:a8:4e:30:7d:
5f:dc:d4:a1:5f:6f:f5:dd:9c:5d:d0:52:f7:0e:00:
14:ea:7c:0c:1d:d0:fa:a2:99:8b:fc:6b:bb:93:04:
4d:e7:9e:ee:59:d9:21:d5:2e:47:99:51:bd:35:67:
2e:cb:6f:a0:59:51:41:30:f5:75:c4:f3:61:24:f2:
06:fb:2a:44:08:56:cb:b4:69:f7:70:51:89:df:e8:
33:77:29:c5:30:1d:86:f7:cf:ac:11:ac:67:16:ff:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1E:E0:99:1B:58:7B:C8:21:F4:BA:7C:D0:26:3B:A3:6D:58:E4:14
X509v3 Authority Key Identifier:
keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4d:e3:2f:fc:05:dd:ee:56:5b:9c:ef:26:93:86:df:17:bf:
3b:3c:7b:7b:40:c8:ed:19:50:44:61:18:5e:d2:bc:c9:27:0e:
52:5b:76:63:ef:07:d1:3e:67:56:fd:a7:73:cd:91:a3:b9:ac:
2f:d6:8e:14:e2:b6:73:7e:3d:d0:2e:ed:74:a5:53:27:d4:8b:
e7:d9:97:a4:3b:cf:91:07:83:36:1a:dd:aa:ef:de:93:71:1e:
06:42:c1:14:8b:ca:a5:a7:87:f3:fb:dc:ef:d7:b1:06:0e:fc:
77:de:d8:12:e9:ec:56:77:f7:19:fa:b2:62:c8:ad:42:d3:22:
50:3e:e0:94:19:e2:a2:8f:d6:69:df:05:8e:2f:bc:c6:ec:7c:
fd:31:f1:0b:e1:ba:f0:d2:01:d8:7f:be:44:37:42:4c:79:f4:
54:65:fd:d3:85:2a:f1:49:35:62:b4:67:68:49:ba:1f:5d:e9:
aa:a0:99:02:c9:03:4a:5b:f1:65:ea:f3:cd:29:de:b7:fd:d3:
d9:9d:35:50:f1:8b:6b:1b:9f:39:30:03:0c:b4:0b:99:d6:f3:
45:f7:90:68:92:a2:c2:77:48:a2:fc:a2:17:cb:d8:10:21:1b:
ed:29:46:87:9e:14:c7:03:dc:11:f5:59:c2:5f:31:dd:7e:a2:
94:ed:7e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:57:46 2025 by rpki-client