Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier: 0Gi2OWfiYxcG0wmKg7lkaPyNLlFGuxNFlGvRi0tc6rw=
Subject key identifier: 7C:15:66:81:7B:A1:98:58:39:C7:D7:48:4C:A3:7D:A1:6C:A1:05:69
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 019653B796B3B4B3FC9AB1A19D0F123FAA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 15:01:02 +0000
Manifest this update: Sun 20 Apr 2025 15:01:02 +0000
Manifest next update: Mon 21 Apr 2025 15:01:02 +0000
Files and hashes: 1: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: qWzYgwB4q5PvUx0bjicGnhem7SAaMGB2a79ZM/gLprw=)
2: uh0s7nQF6Ch_13wcoEBB1CrHctE.roa (hash: ALTdvaEI8Z2+A2eOLrrx34dYp9qQTeI0QMDzvRKkOhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:96:b3:b4:b3:fc:9a:b1:a1:9d:0f:12:3f:aa:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Apr 20 15:01:02 2025 GMT
Not After : Apr 21 15:01:02 2025 GMT
Subject: CN=7c1566817ba1985839c7d7484ca37da16ca10569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:ea:61:66:d5:db:38:22:a0:fc:d2:d0:18:
d1:52:84:2a:23:c2:e1:38:18:30:a1:81:3e:2a:95:
bf:7b:ec:fc:ce:8e:86:14:dc:8a:21:8e:5b:2d:79:
6a:ed:46:8d:8f:5a:b9:f5:48:db:c4:69:47:1a:cd:
27:f1:74:82:27:dc:e0:c9:1d:c5:66:50:c3:9f:99:
f8:26:51:69:bd:b9:4a:b3:ba:e1:18:3e:8a:d6:ce:
ed:e5:36:f3:8e:a0:1d:87:c6:25:1e:b1:21:46:b2:
e9:54:8f:2f:fc:19:8d:3b:05:d0:07:80:30:d7:d1:
83:ad:2f:6b:b8:17:57:3f:62:7b:c2:07:15:45:c2:
e3:62:14:a6:d4:8f:1c:72:c3:c2:44:05:84:a3:f5:
10:8a:1a:24:d1:8a:1f:51:5f:9b:b4:19:0e:0c:86:
23:82:26:6b:d0:43:11:66:53:2c:5d:e3:b9:90:ff:
8b:ce:ab:b2:e8:7d:c7:4e:6c:4a:51:62:74:5d:a4:
83:26:94:b7:ab:3e:b7:17:7a:45:52:7d:7c:ea:1d:
78:48:e1:ef:09:2d:cd:67:bb:c6:39:d7:b1:6f:f3:
f3:fd:a2:5e:f6:7d:a7:f5:a7:23:6e:5d:3e:a4:79:
fd:9c:4a:1c:58:20:57:8e:9d:78:9e:cf:5e:94:f0:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:15:66:81:7B:A1:98:58:39:C7:D7:48:4C:A3:7D:A1:6C:A1:05:69
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:58:f1:0b:b2:4b:56:eb:b5:f6:59:ee:0a:5f:42:11:e8:39:
57:85:99:60:af:c5:71:92:25:39:99:73:87:f7:30:e0:ec:5d:
ac:4a:c2:5e:35:a7:5a:eb:39:5d:9a:07:bb:56:87:16:9d:57:
cb:80:18:33:98:e5:03:9a:cd:54:03:b1:83:db:2e:df:c4:a5:
74:20:f3:5d:b8:97:19:fb:83:a4:d8:b3:e5:73:46:52:77:39:
21:85:79:01:84:67:32:a4:ec:bd:90:2a:71:77:99:da:60:8e:
0e:bc:1c:3d:b3:8e:8f:2e:b6:7a:9e:f2:fa:65:37:a3:5a:4c:
30:cc:76:82:e1:95:68:b5:27:e7:5d:7b:da:d2:12:76:f3:b9:
5a:93:a8:a0:39:36:e7:c4:c8:e3:27:a5:7f:6b:fc:e3:d6:c7:
0d:25:ba:da:64:81:44:72:5e:a7:67:3b:7c:4e:1b:53:02:3a:
00:03:15:3c:b7:5b:05:95:e0:02:d7:84:14:b5:2b:2d:53:c7:
ec:03:2a:4c:f1:92:25:c7:01:07:06:ac:1e:f7:15:70:d2:97:
7b:78:20:7b:c1:79:a2:4a:61:d7:3a:39:f6:4c:8d:4a:03:fe:
35:db:d5:49:45:40:aa:1f:7d:c4:82:9a:a0:73:35:f9:9c:7a:
00:9e:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:41:54 2025 by rpki-client