Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File: E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier: JozJXw2WknMfyAQNu7Mtz6tpP3yQbdoyvMbo2Uijd4E=
Subject key identifier: 1E:D0:A1:5A:B0:CF:5C:5C:10:10:D1:B0:EE:BA:0D:DC:41:A1:BB:60
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 0196496A4CCB8F431E0A403846B1F235AC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 15:00:25 +0000
Manifest this update: Fri 18 Apr 2025 15:00:25 +0000
Manifest next update: Sat 19 Apr 2025 15:00:25 +0000
Files and hashes: 1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: +5wm3b3/L21lwCSLRUVhCjhkTNQuxQoduGe+OpIRDoU=)
2: GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa (hash: OkjXTbnHRtbFuWzt8SkmqNTl7djjfQ2D/Z/mnZbORFo=)
3: iDJMZTn0ZQsbFebdZO8EqvngV-M.roa (hash: DFTmsPgWe97cJSGWeErnYcp9qELmEJE971RJTfF9FUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:4c:cb:8f:43:1e:0a:40:38:46:b1:f2:35:ac:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Apr 18 15:00:25 2025 GMT
Not After : Apr 19 15:00:25 2025 GMT
Subject: CN=1ed0a15ab0cf5c5c1010d1b0eeba0ddc41a1bb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:35:b0:e1:5d:96:d8:62:d9:22:3c:0c:79:
7c:08:5f:d8:29:48:89:0f:22:7b:f3:7c:38:f1:62:
c6:d3:ef:bf:1e:62:27:f2:d0:79:96:6d:58:cb:69:
21:a3:33:14:0d:81:01:f2:75:cf:97:99:aa:94:0d:
63:e8:0e:27:77:0b:02:20:ac:94:f2:28:34:b7:5a:
be:63:42:be:92:56:3d:b4:10:21:79:22:2c:bc:35:
95:d3:90:5b:de:d9:0d:ce:22:ae:93:7a:c9:23:2c:
cb:68:16:bc:39:16:b1:01:d5:bc:b3:57:ff:53:08:
df:8f:27:7e:d4:a0:00:7f:b0:e0:8d:30:c4:51:d6:
56:91:3b:56:27:98:3e:8f:20:e7:41:ba:f6:27:99:
95:bd:07:2d:e2:75:9e:6f:bf:76:4a:96:3e:b2:0d:
c5:fb:9d:64:91:59:31:20:2f:1c:ba:ab:3d:8f:51:
58:7f:f4:34:25:ac:5e:fc:c3:9f:e1:d4:eb:14:7f:
ef:9b:63:47:5c:3a:b1:34:e7:dc:f5:77:93:90:70:
01:35:93:e1:f4:01:df:ec:0f:eb:a4:2f:55:ed:19:
08:ca:6a:95:f7:ce:63:b5:1c:3d:5d:8d:19:83:77:
9e:c7:c9:82:b7:0a:a9:de:7a:ba:4d:78:43:44:27:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D0:A1:5A:B0:CF:5C:5C:10:10:D1:B0:EE:BA:0D:DC:41:A1:BB:60
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:11:63:e2:68:19:7e:ae:4d:52:be:2d:0e:5d:af:7b:cb:d8:
da:09:f5:b4:9d:66:44:76:93:15:65:99:1a:a6:6f:3a:5b:57:
ee:ff:08:21:1b:d0:2b:e3:e8:3a:4a:37:42:37:b3:dd:2b:6c:
0e:8e:8c:03:8a:9c:d2:84:e7:b0:ba:9e:f7:30:00:ac:d9:e4:
80:1e:b1:f1:8a:e4:6a:bb:72:0a:c8:ba:3b:6a:15:95:eb:f6:
2e:27:83:f7:cd:ba:ba:81:6f:4f:2b:b9:ce:5a:dd:bb:f8:27:
61:f3:8f:86:43:d3:1c:29:e5:06:6b:42:a0:40:b1:75:a9:e7:
b0:e0:3f:70:d7:22:ed:1e:e3:48:2d:61:7d:26:6a:2e:7e:8c:
cf:87:0b:86:56:f2:9e:fc:43:98:24:32:0a:80:7b:4d:a3:d2:
1e:92:12:de:48:c0:8f:ee:aa:54:72:dd:0a:bd:34:0e:e9:e1:
e7:ec:e6:7d:db:45:c4:f6:f5:0f:79:ba:a0:7c:51:d6:c6:87:
a6:64:96:e8:93:93:5e:7b:69:18:9c:ea:b8:02:76:8a:b1:a9:
82:7e:bb:f0:8d:8c:3c:bf:f1:6f:81:e6:d9:f3:77:ea:e8:4f:
8b:4e:3e:34:20:c2:29:33:95:f2:43:73:5b:42:f4:b5:70:52:
35:36:60:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:52:50 2025 by rpki-client