Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier: A4kVjC0qDAqLwxLuDMypTfMBhKcJfZZDHHSk2sXi2Jg=
Subject key identifier: 46:43:EF:84:40:6D:E6:30:26:BF:9C:C9:DF:D3:E8:39:39:58:9E:39
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial: 0196440CF631238C4AA3D41F9B10E105E1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number: 144E
Signing time: Thu 17 Apr 2025 14:00:22 +0000
Manifest this update: Thu 17 Apr 2025 14:00:22 +0000
Manifest next update: Fri 18 Apr 2025 14:00:22 +0000
Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: E+JApUGgRyK4k8d69WVWAidBXsGMTeT8T2M9OqerYAc=)
2: pPGln_tGe3Wb0dePm4ie5BM7xaM.roa (hash: e7lXmv0/qA8zwcIJTP+HZzZQ8eseEaVWqcUevE7q2Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0c:f6:31:23:8c:4a:a3:d4:1f:9b:10:e1:05:e1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
Validity
Not Before: Apr 17 14:00:22 2025 GMT
Not After : Apr 18 14:00:22 2025 GMT
Subject: CN=4643ef84406de63026bf9cc9dfd3e83939589e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:f3:ed:da:51:bd:02:16:d4:4d:68:81:26:
3a:bd:9b:29:3c:0b:3f:47:8d:a5:9c:51:55:06:f1:
fa:b8:84:c6:7a:52:12:55:1a:e6:22:84:d8:5d:59:
45:31:09:a9:7e:6b:7e:83:f0:9e:be:d8:47:77:27:
e1:b7:56:16:39:14:90:e0:4e:58:4f:3f:16:59:0f:
25:ab:bc:09:a1:02:f5:83:35:6b:0e:2e:1b:a5:a3:
02:41:91:98:e1:d4:c7:2d:ad:90:1c:b8:46:2d:c4:
99:60:f0:3f:95:ef:64:61:5b:31:7f:4a:86:42:7e:
b1:36:53:e0:1e:0b:40:55:0b:df:12:d2:45:25:74:
7f:bf:39:a5:fc:bb:72:49:35:55:d7:b1:fb:84:1f:
66:e5:59:6a:b8:5c:f7:35:2e:a3:31:b1:4d:ff:37:
78:b8:10:6f:5d:3a:50:ac:1a:3d:fd:06:32:f3:da:
4d:19:10:00:1d:47:3f:68:d6:98:83:ac:92:2f:70:
14:75:38:7c:a9:ee:41:f6:4d:41:6f:5f:97:67:58:
a7:d6:d5:1e:25:93:d8:67:d8:83:15:44:a1:7d:93:
53:06:8a:50:72:fb:57:74:48:07:53:1f:ba:8c:99:
c6:86:f4:d0:bd:b9:35:63:ef:87:9f:3f:23:bb:32:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:43:EF:84:40:6D:E6:30:26:BF:9C:C9:DF:D3:E8:39:39:58:9E:39
X509v3 Authority Key Identifier:
keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c4:f1:ae:ca:a7:10:e1:3d:83:86:af:ba:0d:01:be:8b:9c:
03:8d:ee:fb:fd:7e:6f:86:b9:71:6c:bb:bf:e7:26:b9:76:f5:
a3:95:d5:75:86:1f:7c:01:18:b2:4a:f5:ce:8d:68:69:da:6a:
6c:48:74:29:a1:41:0c:0c:55:75:4d:fa:12:71:63:a1:1b:ff:
e7:ff:4e:cc:e3:6e:bd:2e:73:33:bc:07:9e:eb:6f:3a:51:49:
41:b2:8c:76:17:e8:64:69:0c:95:25:b9:a7:3d:80:8a:d3:39:
13:5a:45:45:ab:01:5e:ab:95:28:88:1f:ca:8e:2e:e3:d2:95:
12:83:7c:58:6d:6a:e9:82:19:4c:4b:25:fb:0d:86:23:2b:ef:
7f:14:7b:4d:2c:47:47:30:2d:38:21:fb:5a:be:dd:55:41:4f:
71:47:49:11:fb:f5:e1:ba:63:5c:41:25:99:ae:7d:7f:15:ca:
22:f9:7a:4c:5e:85:fe:60:73:ab:eb:ba:f1:e2:4c:a0:3c:4b:
6e:18:ec:cf:25:6a:f6:fe:ef:65:45:35:7b:cf:13:ac:37:02:
88:9b:24:f2:38:c4:df:b6:49:53:b6:e6:0c:0b:df:92:59:fc:
e7:cc:8e:19:eb:41:7b:27:4d:7e:31:d7:c2:2a:37:fa:48:aa:
81:28:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:31 2025 by rpki-client