Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: 3YQTdJTQDYqwyjsDdrvAXolFMzTpGWUNKV0ZoshPNSI=
Subject key identifier: 21:8F:DE:4E:A3:B1:8C:AE:25:28:29:74:81:67:4A:3E:C9:2C:66:B8
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 01958B16A42E453CB6DF177F9AD1A0958138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 12E5
Signing time: Wed 12 Mar 2025 16:01:11 +0000
Manifest this update: Wed 12 Mar 2025 16:01:11 +0000
Manifest next update: Thu 13 Mar 2025 16:01:11 +0000
Files and hashes: 1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=)
2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: OKmKZxZ0hdH2ALqWg3wdwlQNnMiqB3QKh8jUua34iZo=)
3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:a4:2e:45:3c:b6:df:17:7f:9a:d1:a0:95:81:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Mar 12 16:01:11 2025 GMT
Not After : Mar 13 16:01:11 2025 GMT
Subject: CN=218fde4ea3b18cae2528297481674a3ec92c66b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:b0:9e:6a:2f:11:c5:f1:80:eb:29:f9:67:
f3:47:89:af:7d:f2:1e:43:b7:70:88:49:59:26:4e:
60:ba:9f:cd:94:31:8c:92:ca:2e:e7:ba:38:d6:8f:
1e:0c:d1:45:59:d8:91:0b:7e:bf:77:14:00:c3:a3:
e9:fe:d2:eb:0c:ca:37:f7:73:f9:ab:15:e9:1d:89:
61:7a:fe:54:50:d6:57:e3:8a:8b:f1:70:43:bc:46:
b6:be:06:85:29:20:af:c7:be:45:ff:b1:14:76:da:
82:83:8f:9c:f2:38:80:36:8b:c4:3a:94:71:93:05:
65:b3:b0:ff:1e:4e:7e:82:c5:37:bc:0a:a9:51:1d:
44:5d:a8:29:0d:61:7f:cb:ac:7a:de:27:a2:96:9c:
d1:49:b5:d9:c0:aa:8d:74:45:ee:d5:a9:81:8f:98:
fc:c7:65:0c:ea:12:9c:f8:b1:18:65:6e:2b:62:e7:
a2:5c:73:47:a4:93:88:e2:e4:72:c7:34:c0:5f:51:
0e:eb:9c:f1:c9:dc:9b:91:66:a0:d2:dd:78:df:7e:
c8:66:9a:45:b3:b1:76:fd:e4:14:d8:d2:d0:5c:45:
db:71:60:06:c1:37:b9:8f:47:43:53:80:a1:b4:84:
28:8b:3e:3c:a6:12:05:c2:f5:76:c2:98:37:c7:48:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8F:DE:4E:A3:B1:8C:AE:25:28:29:74:81:67:4A:3E:C9:2C:66:B8
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:00:ff:5a:36:26:ad:65:f2:e3:c8:cd:70:d2:1f:e2:ff:c8:
bf:e4:06:03:99:87:a5:b1:b1:9f:0e:1a:39:99:20:df:7f:df:
3e:70:3b:af:0d:ed:e7:ca:62:75:2a:1d:cc:76:0a:3d:08:41:
c8:9e:70:d1:e3:e3:33:43:02:c7:43:e9:ff:7f:e1:6f:53:e8:
ef:61:91:c4:6d:1a:54:f1:02:68:9b:6f:4a:9e:b9:4e:35:45:
9d:9b:46:4a:37:38:da:96:62:aa:5c:00:18:71:d0:fe:58:7c:
4a:cc:8d:6b:69:03:7f:fb:13:c7:fe:57:bc:c1:b3:ba:6b:9a:
43:68:af:f9:6c:ef:fc:aa:94:d1:05:7f:89:3c:14:ea:a8:5e:
9a:ff:39:31:52:4a:72:22:41:5c:fc:94:e9:66:e5:b0:1a:ca:
e8:05:ba:cf:40:ed:1a:11:ee:d8:e5:aa:fe:60:28:22:d8:ec:
64:c8:53:df:10:08:ec:02:6a:8f:c0:38:9d:50:81:23:90:ab:
57:e2:6c:8d:57:ea:7b:4f:2e:10:89:c6:de:95:e8:6f:ff:a1:
a5:38:bf:3b:14:63:06:e0:6c:4a:69:d1:3f:30:db:9b:74:85:
31:c4:7e:c6:68:b4:6d:1b:df:d7:2d:99:5d:78:21:04:f3:5e:
dc:06:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:33 2025 by rpki-client