Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File: E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier: C3PmbyrH+NHor2o++i4EGhK5DO5cPnAEumb0RIuoyh0=
Subject key identifier: FF:19:F9:E1:5A:21:94:27:A1:29:9D:DB:BC:0A:87:AF:90:59:B1:A7
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 019655DCC1D005700CC7637D32B904700D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number: 123C
Signing time: Mon 21 Apr 2025 01:00:52 +0000
Manifest this update: Mon 21 Apr 2025 01:00:52 +0000
Manifest next update: Tue 22 Apr 2025 01:00:52 +0000
Files and hashes: 1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: YxAyZ6ju4gAydQAf3/wy4Bp117oRhtoWT18P3MsehQQ=)
2: zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa (hash: ojS7UDvnpbti0L0m+Z7X9vfIKPOWqVpCsWT632+KxOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:c1:d0:05:70:0c:c7:63:7d:32:b9:04:70:0d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: Apr 21 01:00:52 2025 GMT
Not After : Apr 22 01:00:52 2025 GMT
Subject: CN=ff19f9e15a219427a1299ddbbc0a87af9059b1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:21:75:ba:c0:43:95:f8:29:7a:47:37:6b:
66:93:85:e0:b8:5f:48:f5:d2:b8:2b:7b:4e:19:8d:
c2:c7:f1:7d:41:02:71:a6:68:22:ff:47:90:06:47:
fe:d5:fb:36:00:6d:14:04:1a:c1:27:a3:81:47:21:
8c:52:d9:9b:94:c2:31:ca:81:4b:63:e6:34:a3:2d:
3d:d7:2c:bb:c4:3b:70:ff:4d:25:0a:30:be:c9:47:
73:74:a2:5b:f7:00:bf:b7:30:bf:09:2d:f7:79:0b:
4d:3e:18:31:67:7e:5e:97:ba:18:ff:62:f5:95:db:
a6:bf:48:b1:88:88:27:ec:b7:35:d6:6d:d1:c0:39:
8e:8d:74:91:9a:29:1f:c6:b3:cc:4b:a2:62:25:dd:
f3:85:63:6f:a8:e8:5b:65:e0:33:49:d1:bb:ae:18:
26:04:0a:0a:c3:a5:61:e1:d3:67:3e:dc:10:38:e8:
c3:0e:e4:d3:be:75:45:78:7e:1a:3e:02:53:c4:01:
74:8c:5c:48:af:10:23:84:9c:03:7f:a8:9b:3b:2e:
1a:7e:5f:ca:e7:da:34:5a:7d:00:f8:dd:42:af:8e:
66:a6:d4:2a:e2:df:8c:62:4a:20:33:3c:70:0d:42:
32:0f:37:f8:5a:32:53:cd:a7:b5:8e:5a:b3:b9:14:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:19:F9:E1:5A:21:94:27:A1:29:9D:DB:BC:0A:87:AF:90:59:B1:A7
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:14:44:d1:ee:53:6d:32:ec:09:e0:1f:2f:30:db:5b:da:c8:
b7:06:08:f6:8d:89:7f:9a:3d:23:af:ce:e1:3e:e8:89:73:9b:
93:4e:a3:ab:76:64:7f:e0:b2:de:ba:4d:2f:1c:e7:dd:09:d2:
79:73:00:b6:50:8a:0c:db:61:ba:12:52:90:7c:f4:d0:4a:50:
b1:73:f3:1d:b3:a0:36:e6:b3:1f:29:0a:c0:22:2f:2f:2b:07:
d9:a1:2c:0a:7b:b6:ed:a3:76:f3:a9:80:e7:5f:e9:23:6b:85:
04:5d:49:5a:f4:6a:f9:5e:7b:04:a2:1a:7d:9f:a2:74:0d:eb:
dd:a3:1b:e1:97:50:04:28:2d:85:c5:6e:1e:7d:d0:89:2c:de:
90:26:dd:eb:29:f9:22:70:e2:79:9e:dc:ca:f0:80:f9:04:3b:
22:d4:34:e3:c4:6c:bf:d9:85:41:45:47:d8:85:39:81:f9:69:
d1:df:a1:b0:51:fc:4a:54:80:6b:37:d6:24:a6:83:bc:95:a4:
87:43:82:05:29:5d:dc:49:68:d4:41:49:8b:de:32:a3:68:fe:
db:b0:c9:d1:55:2d:33:ff:b1:34:0d:44:2a:91:16:96:47:7a:
4d:b3:d5:8a:15:57:25:a0:4e:ec:af:b4:58:16:a7:d5:41:22:
c7:71:56:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:49 2025 by rpki-client