Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier: EGyq0b0Fa1r/kaPU/nKq1eMk0IdcVdg4K21VFt09d8I=
Subject key identifier: 1B:E6:CE:45:7B:77:A0:3D:4F:69:0A:43:94:CD:C1:0E:78:CD:FC:66
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 01965349F68EF1F8D7E1959C26AED9B4945E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 13:01:18 +0000
Manifest this update: Sun 20 Apr 2025 13:01:18 +0000
Manifest next update: Mon 21 Apr 2025 13:01:18 +0000
Files and hashes: 1: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: jbnIwLusSRaJQ12D5iAADYDld2PptRcZX1bl8fPhvmo=)
2: SCt2QF1ZyfGumaW10dxyBcs0tjI.roa (hash: RDkYHsg9brN71rMixotxKpzbe8KGvrl7wQ7cHVhi6eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:f6:8e:f1:f8:d7:e1:95:9c:26:ae:d9:b4:94:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Apr 20 13:01:18 2025 GMT
Not After : Apr 21 13:01:18 2025 GMT
Subject: CN=1be6ce457b77a03d4f690a4394cdc10e78cdfc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:bb:2e:35:b7:20:bb:48:49:b7:31:89:7b:
a0:8a:05:48:c0:31:fb:ed:16:21:d4:ef:de:8e:94:
b1:e0:71:dd:2c:ba:2a:5e:d9:6a:d2:2e:8f:cb:4e:
15:4f:55:45:18:11:b2:71:7e:50:7d:1f:58:eb:95:
2d:a4:0a:b1:1f:2f:76:43:37:0e:8c:13:9c:57:91:
37:96:0a:99:15:f4:b4:ab:a5:7a:e2:fd:4a:90:17:
82:46:d4:04:0b:b5:f5:de:f4:4f:58:09:70:73:33:
0b:65:3f:41:4b:95:85:d4:23:5f:ed:c6:cc:33:f2:
c9:7d:c5:0d:45:bf:fc:01:9f:3e:3c:bd:5f:11:50:
f3:ce:3e:8c:2c:55:aa:8d:ac:c1:c7:aa:cc:a6:b8:
8f:f9:c5:be:24:89:dc:73:ab:bc:98:e3:c8:84:cb:
ad:84:97:93:57:43:dd:ef:6f:0b:fc:57:67:90:f9:
3c:8d:6f:50:2a:55:18:04:aa:96:7c:37:b4:ff:df:
03:87:1b:4d:8b:50:ff:26:69:62:e7:58:a4:81:02:
fe:f3:b8:fe:92:bc:cb:42:fd:1e:bd:b9:f5:d6:b3:
79:8d:10:e8:5e:fc:fb:ce:53:f0:fb:2e:1d:fd:58:
32:57:13:44:15:5f:44:1d:da:54:d3:ee:72:37:cb:
a5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E6:CE:45:7B:77:A0:3D:4F:69:0A:43:94:CD:C1:0E:78:CD:FC:66
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:24:b7:c8:e7:50:a4:6f:12:e5:c9:74:75:42:f6:1c:0a:8f:
2e:99:86:7e:e7:e8:79:16:af:0d:a0:44:d5:e8:b5:13:69:14:
37:cd:90:15:a9:db:ae:f0:50:9e:99:a9:6e:b6:63:5f:ef:bb:
4a:56:f6:e5:e2:30:65:c8:7d:39:6c:fb:6e:60:85:0c:e2:0f:
7b:cf:07:fb:5f:03:52:cb:de:8e:ec:bd:4f:2a:d4:44:90:69:
35:51:3e:eb:18:e6:54:50:77:20:2e:8c:df:13:8a:06:6b:41:
d7:3a:1d:d2:93:29:d4:7c:db:30:ea:b2:cb:25:6f:cc:cc:4f:
b9:4c:6b:31:cd:aa:e2:77:81:58:6e:a8:9c:fe:0a:6f:5e:4e:
a5:f2:51:79:9c:b2:f5:af:7b:5c:8a:1e:9f:a2:89:d4:38:c6:
83:b8:8f:0f:15:6a:6d:47:79:df:f6:f4:ef:5a:a2:94:4d:9b:
ba:61:53:1c:14:03:e0:0d:ab:78:e3:e8:5f:f2:b1:c0:89:5d:
b1:8a:48:b6:df:bc:35:7c:5f:79:04:37:d5:54:fa:2f:79:c5:
fe:84:ec:d8:58:28:4a:88:08:49:7e:3a:96:5c:b4:b1:d5:a3:
e7:ce:49:93:9e:b9:c2:0e:f2:17:47:3f:bd:13:62:ca:ad:c2:
fa:fa:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:58:33 2025 by rpki-client