Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File: eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier: idCMxG+pWKWCXCbjGa0a7qKHoviMtK45CwvcLmLPX/w=
Subject key identifier: 4D:6F:9C:8A:80:CC:EC:88:CE:12:2F:F6:3D:01:9B:25:01:17:B1:8D
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial: 019638E4BFBE972C5E274314E0775B57905A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number: 146D
Signing time: Tue 15 Apr 2025 10:00:37 +0000
Manifest this update: Tue 15 Apr 2025 10:00:37 +0000
Manifest next update: Wed 16 Apr 2025 10:00:37 +0000
Files and hashes: 1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=)
2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: VQiXj0vLjmodFrgP5TRcEY+Mcs+eeUFEGpNl6+JgoCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:e4:bf:be:97:2c:5e:27:43:14:e0:77:5b:57:90:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Validity
Not Before: Apr 15 10:00:37 2025 GMT
Not After : Apr 16 10:00:37 2025 GMT
Subject: CN=4d6f9c8a80ccec88ce122ff63d019b250117b18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:dd:d5:12:27:d9:6f:fb:d0:63:f3:17:40:
3a:c2:5c:fa:68:85:37:38:7f:b5:2d:be:30:da:e1:
9b:22:f7:2b:bb:49:fa:b4:3f:02:c8:2d:3a:38:6b:
19:a5:e9:c8:44:ba:d0:bd:74:3b:38:6e:a5:a2:71:
56:2b:a4:4f:ee:ae:2a:e1:a4:ec:a2:21:1f:7c:d4:
25:5b:b9:55:a7:96:5b:38:a0:0f:7c:71:42:a2:5c:
f5:ff:14:f2:3a:95:92:9c:be:72:a6:b8:17:40:eb:
29:2f:1c:e3:2d:72:a6:61:ec:6e:39:f8:7c:62:52:
d7:02:b1:53:56:e1:d6:f5:88:3e:13:ba:cf:4a:6c:
85:0e:5c:81:a3:4c:b6:ae:d1:af:6f:9f:8c:18:cb:
93:80:31:22:7a:e0:ad:aa:3f:fe:75:a7:5f:4e:83:
cc:26:c1:72:b5:3d:8e:64:63:b5:4e:85:0b:a9:f6:
b9:29:7f:fa:96:b2:3b:c7:36:98:cf:d0:53:a5:0e:
6b:3b:fe:f3:68:0d:a8:44:bf:79:3c:c6:1c:9b:d1:
27:8b:e6:a0:b1:1e:3e:f7:1c:38:aa:75:a0:0b:b1:
22:b2:2e:3e:02:b6:6c:8c:ef:f6:a2:9d:34:dc:9f:
42:44:45:0a:b7:94:b3:07:13:54:56:ed:89:c5:8d:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6F:9C:8A:80:CC:EC:88:CE:12:2F:F6:3D:01:9B:25:01:17:B1:8D
X509v3 Authority Key Identifier:
keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4a:0b:75:ea:50:71:f8:db:88:f0:86:fe:48:72:b9:89:72:
0c:51:68:23:3d:b7:b0:42:20:cb:f2:05:d0:0a:a2:c5:9b:01:
3b:89:5e:5a:df:29:dd:b0:77:24:2d:87:a7:1a:78:10:b4:86:
09:94:28:56:61:fd:08:e5:6a:84:43:a0:17:19:d3:33:73:e5:
51:84:62:72:a7:3e:10:b1:cc:e5:b5:4d:50:e5:29:d5:06:11:
74:07:cd:c4:9b:dc:4a:64:fa:73:c0:d5:ac:9a:d0:b7:38:78:
77:e1:b9:da:f5:94:7b:05:27:52:da:92:df:f0:68:79:cb:6b:
45:8d:81:fa:f9:45:e0:a0:55:6b:13:da:38:5f:4e:cd:cf:01:
5c:e1:3f:58:b3:f3:95:76:0f:3e:10:8a:36:fc:7d:d1:6e:02:
53:57:2f:e1:8c:2a:5f:a6:72:bb:b0:82:ff:dd:cc:34:56:35:
70:57:97:85:28:e3:0d:29:69:a0:91:e6:cf:4d:f9:8b:4f:5f:
e5:1e:b1:a9:13:2a:ae:26:2e:0f:83:8d:d4:7a:72:21:9b:3a:
86:d6:27:ee:7e:f7:2d:96:5f:60:6d:46:ea:bd:b1:78:f3:61:
0d:c3:46:77:1b:40:b4:24:fb:e3:12:3d:de:0b:73:8c:4e:fd:
bd:c6:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:05:38 2025 by rpki-client