Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
File: EIanwN6nPdD5Ti6f4ayatnAbIlM.mft (raw, json)
Hash identifier: ehL/oWdTQaoBHztlA/zG0AfxlWBAF2hCo49lNfIl1hI=
Subject key identifier: A8:33:B5:03:E2:6C:92:16:6D:31:21:DC:BE:FE:6C:0B:DA:30:D1:36
Authority key identifier: 10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
Certificate issuer: /CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Certificate serial: 019651242071593FBFA7DD5967ED04F60315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 03:00:44 +0000
Manifest this update: Sun 20 Apr 2025 03:00:44 +0000
Manifest next update: Mon 21 Apr 2025 03:00:44 +0000
Files and hashes: 1: 3wY6oGANv8v5KdwOhq0YCyGCR3c.roa (hash: YTsANZzZhIeMDaKWnAImTcGoqYZxIqqraKwHHW/4AQQ=)
2: EIanwN6nPdD5Ti6f4ayatnAbIlM.crl (hash: wrc4QTeb5i5AifV/4qiqf8hm486IqNR5u9PT9BJKLaE=)
3: N6mQt4p5LaN2cPNO7YXd-z2Q3Ds.roa (hash: NGM3dzWw+RuSOK1JbfI7JvooWiDasEuAqNb3dRiWmXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:24:20:71:59:3f:bf:a7:dd:59:67:ed:04:f6:03:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Validity
Not Before: Apr 20 03:00:44 2025 GMT
Not After : Apr 21 03:00:44 2025 GMT
Subject: CN=a833b503e26c92166d3121dcbefe6c0bda30d136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:d1:a6:bb:d7:8e:3a:d4:4f:1d:f3:74:5f:
30:df:9e:1e:fe:24:54:f4:6e:32:d2:81:ea:11:ad:
fc:b1:80:d8:f1:fd:91:d8:32:fa:4b:65:65:20:fb:
55:04:61:96:bb:9b:c2:07:a8:ec:75:b8:67:de:18:
f7:c6:00:e8:8d:cf:4a:ad:ae:63:86:1e:39:1c:80:
11:fc:c6:9a:cd:e7:1c:83:2c:53:b4:41:1e:3b:96:
33:0b:1b:3b:2f:0a:d2:fa:f2:76:04:b6:54:22:fe:
54:34:24:9d:37:7e:31:11:ab:e5:ad:15:8f:ad:f9:
ef:5f:03:81:e3:b8:75:fb:55:8b:bb:6c:64:27:8a:
30:13:4e:33:1c:6c:a6:44:ee:f9:85:54:02:c5:fd:
e9:38:c8:66:35:ca:33:cc:3f:48:3b:93:76:ed:57:
b7:64:d0:c3:42:37:99:7e:72:a2:1e:cb:5e:70:df:
da:c5:1f:6c:9d:e8:f5:b0:96:a9:5b:44:74:72:70:
42:02:12:9e:68:19:ec:d6:9a:9a:d7:1c:30:35:77:
15:a6:7d:78:e5:90:3d:00:fd:b7:47:2a:c6:d5:5d:
9a:2e:a9:6d:32:98:e5:8f:22:a9:a6:df:7c:21:90:
d7:4c:61:74:24:0b:61:6b:e5:cd:e5:36:c5:18:89:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:B5:03:E2:6C:92:16:6D:31:21:DC:BE:FE:6C:0B:DA:30:D1:36
X509v3 Authority Key Identifier:
keyid:10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:38:84:f6:7c:c2:b5:ae:f1:3d:6a:75:64:c2:1d:46:34:5f:
93:c7:82:2a:b8:ad:50:76:78:0e:3d:4b:e8:31:6d:ac:d3:1b:
50:50:de:b5:46:61:e3:a0:54:66:3a:ef:f0:0a:fa:36:6f:7e:
4c:8c:d4:9d:ba:43:68:3e:54:2a:e5:0e:3f:2a:e8:e3:d5:5d:
db:28:86:7a:1f:82:8e:82:c4:f1:c0:59:bf:94:e8:04:85:12:
ac:4a:b7:ac:a6:75:14:97:34:97:47:08:05:ba:d7:fd:52:eb:
11:52:79:a9:0b:28:40:06:8d:54:04:1b:06:a6:08:3b:fd:39:
24:f1:f2:d3:33:08:55:2a:2a:4a:f7:e0:6c:ce:e0:b8:3e:61:
65:86:47:f4:d6:5d:9c:09:26:cb:b7:54:39:bf:ba:0d:73:09:
e3:72:75:41:2f:9a:e4:72:60:e2:a8:80:ea:b3:95:ee:c9:74:
8a:47:63:fa:cf:46:85:ba:a3:c2:ca:7f:0f:df:4a:6c:90:fc:
2c:ba:58:06:81:84:b7:05:3b:0b:76:8f:b3:cf:cc:ad:ed:a8:
0e:8b:b1:2f:73:68:c0:97:8d:08:cc:3a:f7:2b:2a:8c:ea:53:
8d:bd:df:e1:ce:61:18:97:01:99:d3:39:0c:55:2b:8d:88:d5:
57:b8:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:06 2025 by rpki-client