Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: eIGKoV+RYq0Wff1lt3aBWUVynHw3TCzfFM13o7+KfXc=
Subject key identifier: BE:82:50:5D:F0:3C:EC:09:EB:8F:64:60:4D:5E:AB:3E:EE:76:16:0F
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 019619FEC3C2DACDAD4458AF533CC2829379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 14E1
Signing time: Wed 09 Apr 2025 10:00:48 +0000
Manifest this update: Wed 09 Apr 2025 10:00:48 +0000
Manifest next update: Thu 10 Apr 2025 10:00:48 +0000
Files and hashes: 1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: Aq+fPwHf+wLiUo1WYHidf3N4LABNSLOnBphoqwW0P3w=)
2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=)
3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=)
4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:fe:c3:c2:da:cd:ad:44:58:af:53:3c:c2:82:93:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Apr 9 10:00:48 2025 GMT
Not After : Apr 10 10:00:48 2025 GMT
Subject: CN=be82505df03cec09eb8f64604d5eab3eee76160f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:42:dc:68:c0:74:01:e0:39:43:48:6c:91:
64:03:f8:8d:6d:37:51:02:0a:90:1c:86:b0:b9:9e:
ff:86:94:7a:4e:12:da:a4:cb:b6:26:af:2f:89:22:
2c:3e:c7:9f:48:11:05:3a:5a:44:3a:cf:1d:39:f3:
ed:c8:42:5f:cd:0e:fe:09:7c:7a:0e:d9:93:7b:e9:
46:67:a1:59:58:65:d9:38:f8:0e:90:cc:23:32:3d:
8e:64:b6:4f:c2:e5:25:e4:a6:73:7a:3f:9b:b8:32:
cc:8e:b5:09:62:5b:e7:bf:ab:60:7d:2a:bf:55:8f:
b3:b5:f7:02:d2:7d:b6:1a:86:96:ba:87:46:0c:64:
66:11:6e:a3:b7:d8:9e:2f:d1:cc:6c:e3:9f:13:a6:
a2:01:5d:4d:ae:61:ef:82:b0:5f:20:7d:cc:15:a6:
c2:7d:d3:a3:4a:8b:8e:36:40:e0:be:6d:b1:b3:bc:
05:08:a4:63:12:4f:19:64:f6:01:e2:e7:c1:f0:c7:
d7:3d:14:06:62:46:63:d7:ef:fc:5e:52:3a:9a:ff:
a5:17:e3:a0:19:5b:0c:f1:72:ac:f2:86:6e:b7:24:
2d:fa:f1:a3:c9:cf:db:67:03:dc:d2:e4:cc:2c:78:
e3:83:46:67:0b:5d:80:0f:35:03:aa:5f:fc:30:89:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:82:50:5D:F0:3C:EC:09:EB:8F:64:60:4D:5E:AB:3E:EE:76:16:0F
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c2:ad:02:78:5e:01:36:0a:cc:c3:95:9c:06:cc:36:c5:bc:
3c:fc:6f:25:06:8e:80:6d:bf:bc:9c:8e:6b:31:8d:7c:b8:10:
0a:73:21:16:65:cc:87:c3:01:b1:71:b5:08:65:13:e1:92:68:
0f:6e:0a:a8:fd:98:f2:8a:d8:85:a9:39:85:11:90:7e:a3:27:
c3:d1:35:97:dc:d2:71:35:7c:bc:d9:81:1b:e9:f0:f7:c0:ea:
89:8d:6f:5e:93:3d:01:d1:ea:07:04:f2:6b:44:1c:4a:ee:58:
48:53:e4:55:8f:c2:c1:57:ac:26:b4:b8:b6:ed:1d:6b:97:33:
6e:d1:29:c2:6a:5e:0b:f7:b9:c2:9c:6b:11:31:c1:a9:5e:7d:
10:48:aa:09:27:fc:43:14:63:4e:d7:73:74:fb:5f:5e:6c:ae:
dd:91:1c:ff:a8:15:45:19:fa:79:ea:ad:8e:58:04:52:56:6d:
43:61:b7:12:16:5d:bd:da:72:f8:26:af:db:27:d6:dc:52:41:
02:fa:5a:a0:b8:b9:e5:78:a3:f9:ad:1b:dc:b6:64:17:aa:ba:
6e:f9:57:09:4a:c5:f0:6a:2f:87:04:2c:7a:e7:71:f0:4b:26:
87:80:a7:d8:87:b6:31:b8:e9:65:70:e1:69:99:2c:b1:9f:c7:
d9:29:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:57:55 2025 by rpki-client