Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier: Eu4dfMCL7oDDb+4TU/bYQ+q+H1yiAmotSTlbhNvALhY=
Subject key identifier: 94:54:94:EB:EB:F4:89:A9:72:A1:B4:A2:72:A8:E7:80:C8:41:A6:7A
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 019659B9A361F55D6CCBD2714BFB53C479E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number: 0D8B
Signing time: Mon 21 Apr 2025 19:01:00 +0000
Manifest this update: Mon 21 Apr 2025 19:01:00 +0000
Manifest next update: Tue 22 Apr 2025 19:01:00 +0000
Files and hashes: 1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=)
2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: qZ8KBiVkzfVtXqZR00JKIcM9LLx50xQbC3X4v4F0QVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:a3:61:f5:5d:6c:cb:d2:71:4b:fb:53:c4:79:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Apr 21 19:01:00 2025 GMT
Not After : Apr 22 19:01:00 2025 GMT
Subject: CN=945494ebebf489a972a1b4a272a8e780c841a67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:31:b3:37:d6:9f:a8:1e:15:08:8c:9c:27:
86:74:aa:db:69:dc:53:d1:b9:2b:62:9c:c2:34:18:
a9:57:a3:8e:56:94:20:d1:94:69:57:72:2f:65:b4:
c1:0c:34:fd:1d:90:09:78:06:b6:de:7a:c5:c0:d6:
b7:41:9c:08:6d:91:13:e8:c9:09:b3:6c:de:8d:c0:
6a:09:b6:f5:94:69:86:b5:5d:c1:75:80:d6:d8:06:
34:00:8d:f9:a8:be:79:37:8a:e5:41:e0:f8:e0:68:
43:d7:04:68:d6:c3:c4:f6:21:ba:65:51:dd:6d:2e:
16:00:20:24:be:59:51:a9:c7:59:fc:6a:51:42:d9:
eb:ca:50:9f:6e:32:45:bd:36:f4:bb:ee:fe:a7:e6:
43:a0:0f:d9:08:0e:de:02:e8:f0:ca:f9:93:ec:2a:
65:cc:d7:bb:ba:ad:c7:54:4d:4a:be:b6:af:45:63:
fc:2e:fb:83:8b:94:8b:59:67:89:36:8e:b0:c0:67:
05:60:72:84:bf:13:f5:06:56:61:d1:08:96:90:c6:
19:11:e3:08:57:f4:d4:ac:fc:14:59:e6:90:23:60:
a5:0b:d4:5b:d8:a7:9c:e8:04:bc:2f:5b:0b:ae:11:
40:2c:dc:cc:1a:38:03:87:81:b0:af:a8:ab:20:5b:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:54:94:EB:EB:F4:89:A9:72:A1:B4:A2:72:A8:E7:80:C8:41:A6:7A
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:67:8d:e0:27:bc:d9:3c:57:48:ab:46:3e:a6:b9:6c:d9:b5:
dd:47:29:db:4a:b2:9b:12:ea:f5:8e:5f:d2:0f:4a:5e:b5:a6:
7e:48:9a:f4:bf:86:92:0a:c9:a4:d4:5a:82:dd:6a:d8:19:c3:
13:ef:4c:eb:14:64:7f:ff:43:90:bb:32:6b:8a:c1:99:ca:c9:
5d:c9:f2:48:b0:d1:2c:d1:75:4b:a7:f9:ed:4c:34:08:6d:92:
ca:4e:13:bb:bf:00:97:0c:b6:94:e2:1e:36:9d:9e:b1:7d:59:
66:21:7f:8f:37:1e:6b:91:7e:f9:c8:6c:ac:85:09:0e:1d:fa:
2f:cd:17:ce:86:ea:63:d1:e6:35:80:c5:d2:bd:2b:ce:46:5a:
21:8d:47:3f:60:42:53:76:67:4a:4a:f2:c1:16:8d:4b:90:26:
de:e1:3d:dd:b9:97:df:b4:4e:e6:70:13:0a:0a:41:fe:29:2e:
27:d6:81:3d:fe:3b:95:b1:98:d2:93:9b:64:c7:a1:b3:5d:64:
51:41:f3:66:e9:56:88:b4:34:d2:0a:35:5f:cb:e2:ec:93:8e:
68:84:77:9b:fb:c7:56:63:61:41:df:19:56:14:bc:68:d9:8c:
15:91:09:14:b4:2e:65:3c:f7:e2:38:72:f8:0c:e5:09:fc:48:
4d:46:ce:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:20:20 2025 by rpki-client