Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File: E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier: liXb35XonframI8YBl+4ycg0thMj5tVIiF297yeg5g8=
Subject key identifier: 9E:DD:52:2B:B7:A7:AE:7A:31:47:A7:AF:60:32:BE:68:D7:8E:27:84
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial: 0195F84F2790E3D40D41DAB8A291FDCD317F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number: 104C
Signing time: Wed 02 Apr 2025 21:01:31 +0000
Manifest this update: Wed 02 Apr 2025 21:01:31 +0000
Manifest next update: Thu 03 Apr 2025 21:01:31 +0000
Files and hashes: 1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: /tqW3TDo4DmY+zeSrNhU6iZ6VD5bYrvIW6yqY3WyyhE=)
2: EfwdFjXVhRXWX5ii0NrhIm4Va4g.roa (hash: rkgBBwT7155haQFS5qhcb+40oim+InAz1f/X+wiaZP8=)
3: JoUWdKjnvYv36EECrdw-DD3L2JE.roa (hash: A24wnWQHwaxLRVm8zSKIhvI+f81n1EoreHc8UbUVP5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 21:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f8:4f:27:90:e3:d4:0d:41:da:b8:a2:91:fd:cd:31:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Validity
Not Before: Apr 2 21:01:31 2025 GMT
Not After : Apr 3 21:01:31 2025 GMT
Subject: CN=9edd522bb7a7ae7a3147a7af6032be68d78e2784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:45:bc:83:89:4a:f7:0c:da:37:eb:83:24:
86:1c:02:51:c2:ac:2c:5b:41:79:eb:80:51:60:84:
22:aa:23:c5:70:ec:97:2c:ce:0b:18:38:31:f5:50:
83:96:a8:4d:2b:86:61:45:ac:9e:a0:33:ee:68:0c:
cd:5b:88:cd:43:49:5d:d4:d0:56:ba:95:16:dd:8d:
a4:9c:2e:f1:31:2e:20:7b:0b:98:49:85:a0:56:8f:
f1:3d:46:4f:11:50:2e:0f:db:a1:88:49:11:0b:2f:
0a:8e:63:c4:43:30:a8:f1:7c:87:de:24:15:c5:c2:
0c:3f:10:30:6f:62:bd:19:31:e2:5e:37:5c:f4:4e:
5f:1e:b3:c3:f1:78:9f:fa:2c:4a:60:21:d8:40:d7:
b5:2b:04:c6:50:99:80:06:98:cb:ce:df:c6:0b:26:
91:35:cf:32:c2:e7:20:1c:c3:e0:b9:10:16:48:10:
7f:97:89:ef:01:6a:fe:b3:ee:de:6f:63:5a:50:0a:
00:6b:30:1f:f2:2a:84:e6:3e:c3:a2:47:04:a5:93:
7b:ae:58:8f:ee:f5:6c:83:a6:88:77:ba:90:7e:a2:
44:54:d6:4c:fa:cb:df:8e:b3:56:6d:a7:5a:1d:0f:
5d:f3:9f:e4:e0:16:51:8a:6c:76:b5:f3:91:e3:74:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DD:52:2B:B7:A7:AE:7A:31:47:A7:AF:60:32:BE:68:D7:8E:27:84
X509v3 Authority Key Identifier:
keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7e:02:cd:2b:67:7d:78:67:1b:6e:73:87:11:a4:b8:60:07:
91:bd:25:11:84:df:98:de:b9:88:9e:e2:21:b5:d6:f6:3a:42:
77:14:bf:a6:a0:f6:08:1c:7e:ef:0e:c7:33:dd:01:b4:ee:c2:
43:f8:f2:21:02:ab:5b:36:59:be:2a:52:48:9b:59:68:e7:e1:
c2:5f:4a:cf:55:69:97:cb:1e:2a:6a:e4:8c:47:13:6f:72:24:
91:66:4e:01:b1:20:96:a1:d3:1e:80:0d:f2:a1:fb:8d:3c:ca:
84:a2:9d:99:f7:c9:eb:72:cd:ef:a8:37:e9:c5:ff:8f:e2:7e:
15:05:cb:60:f2:a0:b2:c5:3f:dd:b2:90:f9:28:ec:7a:33:35:
e2:c4:82:8f:f2:d7:f0:91:93:8d:f6:b9:43:6a:31:6d:84:9e:
f8:43:22:42:03:d6:f6:b9:c2:50:e4:d0:ce:ef:4b:63:04:c6:
c6:22:9b:c7:c7:00:e2:d3:9d:9a:f0:d2:45:5b:12:85:1d:60:
85:2e:7b:a3:a7:17:af:53:28:e4:af:d0:46:cf:78:fb:90:17:
87:1f:06:56:db:21:98:ba:15:a7:ea:41:93:e3:f1:91:06:4d:
cc:fd:f1:c8:26:8e:84:a6:cb:32:18:e7:6a:5c:7e:4b:4f:3d:
ea:fa:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:42:33 2025 by rpki-client