Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File: E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier: MecBIpdDMVkeJqXtSPYkTzOw7Jda2ioF8Q26SHjn5qk=
Subject key identifier: BE:32:9F:56:74:53:32:2F:55:E4:76:CF:A3:1E:58:0C:53:61:64:BB
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer: /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial: 01965B707F4C2EE4E923E0E120370F9A8766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number: 14FE
Signing time: Tue 22 Apr 2025 03:00:21 +0000
Manifest this update: Tue 22 Apr 2025 03:00:21 +0000
Manifest next update: Wed 23 Apr 2025 03:00:21 +0000
Files and hashes: 1: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: f0mzxtEGRnz4WLFVtODUqYLOX22XXLfFQGIZrl1Ee1Y=)
2: i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa (hash: we3OAkuZWKug5XOiU5EwCdxx9AgvZmIQX0TruehoLK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:7f:4c:2e:e4:e9:23:e0:e1:20:37:0f:9a:87:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Validity
Not Before: Apr 22 03:00:21 2025 GMT
Not After : Apr 23 03:00:21 2025 GMT
Subject: CN=be329f567453322f55e476cfa31e580c536164bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7e:39:d6:da:f7:f5:66:62:bd:ae:27:10:c7:
8a:2e:fc:6a:8c:b3:5b:15:6d:94:2b:2c:86:47:63:
96:01:9e:b1:00:84:89:c2:a7:0c:b4:f5:39:3c:4a:
30:79:ba:9a:47:8d:27:37:11:98:17:8b:27:c8:02:
df:bb:49:07:f8:b8:05:14:90:c9:64:87:e8:90:e7:
f3:05:9c:30:08:41:9f:bb:99:23:5d:70:56:10:0b:
61:f0:bd:47:b4:b7:fe:de:35:8b:96:c3:f9:cd:e3:
0d:4e:47:77:28:27:94:c2:a1:c9:12:fc:de:bb:80:
37:09:59:fa:18:5d:49:fe:95:46:67:4e:ca:b8:1d:
e6:be:94:2b:09:c3:f1:7e:4d:bc:9d:df:14:46:34:
20:0c:57:f1:0c:05:fe:45:10:ac:9e:66:5e:72:34:
75:67:db:11:45:0c:dd:0c:26:ea:9e:6d:5d:81:eb:
a3:d8:98:c2:e9:57:d6:73:3b:60:b7:8d:e8:bd:c7:
52:46:f9:ef:dd:a8:99:98:fc:20:1e:51:dd:82:2c:
8a:dd:bc:54:8b:0f:79:0d:ea:a4:c7:02:fd:d9:ac:
86:2d:08:e5:ac:d0:3d:29:d1:62:85:19:0c:b9:a3:
a5:c3:bf:61:6d:1d:a5:dc:86:5e:72:d8:fd:10:19:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:32:9F:56:74:53:32:2F:55:E4:76:CF:A3:1E:58:0C:53:61:64:BB
X509v3 Authority Key Identifier:
keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f7:ab:cc:bb:4f:ee:1c:b7:b8:c3:d7:d2:c1:56:6d:28:d8:
d0:64:8c:75:ff:40:0d:60:94:7b:9e:09:ac:ba:bb:a2:28:fd:
1c:91:9a:51:da:8c:92:af:0e:88:dc:4c:2c:43:cb:1d:79:c2:
33:42:e9:e5:e7:2e:dd:ed:b4:9c:b8:d2:5d:7d:47:ef:a9:47:
38:87:08:02:a8:7b:28:a7:14:c3:5a:44:da:03:6c:25:f4:38:
b8:30:07:20:cb:bf:3d:76:a3:a4:1d:45:f0:ca:c1:a2:16:54:
46:c0:0f:d8:b2:1c:33:a0:3d:4b:09:6d:8a:4b:a2:8a:b5:ac:
66:71:f5:ca:f3:f7:47:86:40:b7:23:30:6d:88:e2:e9:f0:bf:
f6:1d:53:d4:45:fb:48:01:fe:78:b5:a9:22:18:b4:aa:0c:43:
3b:37:cf:c5:6a:f9:61:58:fc:79:62:3b:85:bd:9a:26:5f:c7:
24:33:32:bd:9b:95:16:cd:59:04:21:8d:24:8d:10:dd:11:e7:
71:b4:b3:74:ad:26:d7:1f:90:7a:06:bf:3f:cc:87:8c:bc:0a:
5c:97:dc:2c:64:91:16:38:81:92:44:d2:1b:ed:5d:f9:31:74:
9e:1c:b2:47:89:34:70:3e:5c:3d:4a:8c:13:3f:19:a6:10:3a:
48:21:b3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:47 2025 by rpki-client