Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
File: E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json)
Hash identifier: cu0YTS7z24BUHvO4822uCOuRBpJLvzuTKp8aY7pBTPE=
Subject key identifier: 28:31:70:47:D1:C8:FC:91:48:38:4E:E8:53:61:C6:B5:17:B0:F7:71
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial: 0196556ED633C9C8F679C622C5E21346880E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
Manifest number: 148F
Signing time: Sun 20 Apr 2025 23:00:49 +0000
Manifest this update: Sun 20 Apr 2025 23:00:49 +0000
Manifest next update: Mon 21 Apr 2025 23:00:49 +0000
Files and hashes: 1: 9htWy01pg2D2zYDPH366mUte-18.roa (hash: EzJGaZ3hn2rEMiPwCBKqVw/ZKa/ezLWPSIlGniopSlk=)
2: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: X+yeqoC6tgDQcRJFLIVaaU6uz8LOwrmP3LHMhAKs85I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:d6:33:c9:c8:f6:79:c6:22:c5:e2:13:46:88:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Validity
Not Before: Apr 20 23:00:49 2025 GMT
Not After : Apr 21 23:00:49 2025 GMT
Subject: CN=28317047d1c8fc9148384ee85361c6b517b0f771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:77:d0:73:6f:9a:78:94:2f:f8:85:25:ed:
b3:2a:52:5b:d4:3c:04:40:b1:22:c7:30:6c:ff:16:
3a:92:3a:ee:32:17:4d:22:a9:a3:23:95:da:9d:fb:
5f:14:c2:28:73:cf:ff:47:3f:5b:41:a0:bd:9e:ea:
28:5b:7c:20:8d:59:cf:72:6d:e3:1e:08:69:34:84:
e5:9f:77:ca:12:74:a3:a1:38:9a:75:98:f3:4e:4b:
63:b0:06:97:d7:01:7e:43:9a:01:59:a5:d0:27:19:
24:5c:74:f0:44:d6:de:1a:00:27:54:55:1e:de:9e:
dd:f8:bb:38:ab:a6:23:7e:98:e3:dd:cd:e9:81:8d:
80:2c:6e:f3:ed:99:15:f1:f3:ae:e7:87:c7:3a:31:
f3:68:96:f7:02:ed:f0:cc:d5:3f:33:b8:83:94:87:
f0:e7:3b:3a:29:5c:8a:f3:15:12:fb:28:24:99:40:
09:95:c6:1d:67:51:3a:2e:f2:8f:ac:56:92:63:95:
51:c4:1c:de:c2:7d:21:8f:f2:01:df:b0:61:57:aa:
66:c8:23:7b:8b:12:0e:c4:9d:d3:40:75:de:1a:95:
34:fe:78:18:7d:ec:65:47:95:94:8d:58:66:54:7c:
81:9e:d6:59:3d:79:b6:d6:ec:b2:2c:85:d4:05:19:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:31:70:47:D1:C8:FC:91:48:38:4E:E8:53:61:C6:B5:17:B0:F7:71
X509v3 Authority Key Identifier:
keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:73:7d:ac:e1:c9:c6:3d:22:93:4a:64:7a:06:69:b4:cf:cc:
92:57:86:10:da:82:1c:b6:bd:0b:bb:4f:3c:93:af:11:0d:72:
07:91:ca:89:76:dc:fa:29:5e:ba:0b:1b:3b:b3:65:07:15:31:
a2:d0:bb:d9:f8:39:91:14:71:96:94:1f:d2:94:3f:24:86:88:
50:5d:5f:ff:23:e4:96:40:21:8c:11:e0:5e:4e:c1:0e:10:fb:
76:03:63:b0:ef:41:69:09:08:c8:ee:a3:b5:ac:18:d8:57:79:
4d:82:9b:dd:a8:bd:61:4f:a0:b5:a9:f0:50:30:1d:e0:c9:09:
76:10:70:0e:3d:49:b2:a2:ab:10:b3:53:70:57:71:9c:a3:db:
c8:83:22:d5:77:8a:2e:94:9c:c8:da:b0:42:a1:70:8f:12:ab:
1e:33:3c:12:0f:41:a5:cf:53:5f:37:ba:99:60:fe:87:bd:7a:
59:c4:d2:3c:cd:26:bd:bf:4e:95:57:8e:55:05:a3:bc:3b:0d:
d0:e7:5f:5c:5c:78:c8:1a:c7:c8:be:ec:a8:75:2b:df:1f:c4:
e5:ae:53:1f:21:8b:85:e8:f2:95:fe:77:cf:49:91:82:9d:af:
af:a8:ca:e6:ef:66:b9:cd:e0:1f:d2:4d:83:7d:d8:a9:0c:cc:
f2:65:25:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:49:01 2025 by rpki-client