Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
File: Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft (raw, json)
Hash identifier: u1RgSUU8Hz8CyIEFd3z3dt0VX5FgiOk3054WQoTPv60=
Subject key identifier: 14:40:90:56:F4:52:2A:8B:B6:0A:97:BA:60:68:EA:7B:56:1C:75:8B
Authority key identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60
Certificate issuer: /CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
Certificate serial: 0196561370A8C7900941FA609B449C17B147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
Manifest number: 09C9
Signing time: Mon 21 Apr 2025 02:00:36 +0000
Manifest this update: Mon 21 Apr 2025 02:00:36 +0000
Manifest next update: Tue 22 Apr 2025 02:00:36 +0000
Files and hashes: 1: 2HCBJIX5AwlQw5itkpbxu-ijjmk.roa (hash: PvO3JA7EOrGZaCXFQBX1/p9bbO95IhgeMuSkTUD055k=)
2: Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl (hash: 0zLp9NaBmdZIKEzMF3HHf9281exvJwmDErXvbD+a4/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:70:a8:c7:90:09:41:fa:60:9b:44:9c:17:b1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
Validity
Not Before: Apr 21 02:00:36 2025 GMT
Not After : Apr 22 02:00:36 2025 GMT
Subject: CN=14409056f4522a8bb60a97ba6068ea7b561c758b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:db:e5:21:e6:1b:e7:a2:e7:87:66:f7:02:df:
83:0b:8c:5d:4d:1b:62:f4:62:ef:a3:95:21:fd:64:
26:a1:93:f6:59:94:0d:cf:1a:e3:98:b1:9b:c2:4c:
ab:cf:59:b7:0c:ba:00:e2:3b:ea:bf:06:f5:57:2a:
06:44:36:22:8f:74:42:32:60:c7:40:a8:12:aa:b6:
c2:23:8a:a7:cd:13:e7:00:5d:36:be:ef:b4:57:38:
69:44:ce:06:ef:e0:a2:bf:2a:f0:26:a1:84:b8:54:
43:ad:13:ce:a3:e0:e6:2a:d2:df:f6:1f:67:c0:fe:
93:29:1b:0c:30:4a:32:7e:a2:b0:3c:5c:4d:2e:e9:
af:87:df:88:4d:71:1e:f0:7e:30:6a:9d:a5:65:dc:
a4:83:64:1c:87:01:46:88:1e:c0:b7:77:6c:8b:09:
47:2a:e5:03:ab:27:33:c4:e6:05:90:91:30:59:e8:
0e:ae:a6:dd:16:83:59:f4:0f:23:11:58:bb:52:95:
d3:f8:f7:5a:fe:46:53:14:84:b7:50:4b:ba:38:0d:
19:8f:b7:3c:1b:1d:d0:ec:71:4b:72:cf:0c:7d:44:
16:fb:1e:e7:99:08:8f:6b:f7:54:1e:93:67:3a:44:
2b:a0:83:d0:89:77:19:24:ca:bb:d6:e0:df:fe:21:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:40:90:56:F4:52:2A:8B:B6:0A:97:BA:60:68:EA:7B:56:1C:75:8B
X509v3 Authority Key Identifier:
keyid:13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ff:37:1d:d7:7c:02:dd:17:c9:52:ab:fc:b3:f6:bc:5d:fb:
ef:e0:cf:6f:f9:c7:e3:14:cc:a0:7a:20:3a:b4:8a:d4:4b:e3:
0d:ef:dd:ea:e4:40:76:36:25:59:b5:b4:d8:d1:1e:76:c6:42:
f5:9d:47:e5:6b:5e:05:4d:b5:e1:4d:59:91:2f:b7:04:3b:56:
f3:8b:6d:bc:e0:55:88:92:5f:37:ac:6a:11:0e:1a:e9:9f:68:
e3:2c:bc:a7:7b:e8:c4:94:49:1c:bd:36:d1:20:28:5c:81:59:
f8:38:f0:e6:e4:74:a9:85:ed:70:bd:54:e3:13:f3:88:36:ec:
1a:71:86:c4:63:90:31:5a:a2:28:19:a7:94:cd:6d:d2:57:9f:
8d:4e:8d:54:58:2e:33:ef:92:3d:9b:a5:f8:fb:f2:a7:5c:f8:
5c:5a:cf:9b:aa:6f:92:84:89:8b:e1:6b:fc:8d:2c:08:b7:46:
1b:a4:06:f3:e1:f3:71:87:a8:1d:13:cc:b1:3f:d9:9f:13:71:
5f:e3:ae:cf:b2:55:ed:6f:c7:bf:31:72:a9:89:9a:76:0b:34:
13:ca:5d:45:cd:f6:ab:e9:b3:06:77:33:76:80:59:23:d4:a3:
39:6a:e2:42:c7:29:a4:44:48:6f:55:50:0d:9d:e5:7d:94:ab:
92:a4:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:19:43 2025 by rpki-client