Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: sSPz7AJPcjTYU5g+pwZbNjY/AGYiJMwUTDdPuMTJIuQ=
Subject key identifier: 60:D0:61:32:11:2E:FE:DA:87:D3:64:44:2A:13:B0:D3:EB:87:62:A9
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 01963087BCF1746A1AAAD0E3513CBE3784B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 19:02:04 +0000
Manifest this update: Sun 13 Apr 2025 19:02:04 +0000
Manifest next update: Mon 14 Apr 2025 19:02:04 +0000
Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: IdIHlLycXZ0jwO+QKMBbWBnk4WivG6TvRdPAH/WsinM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:87:bc:f1:74:6a:1a:aa:d0:e3:51:3c:be:37:84:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Apr 13 19:02:04 2025 GMT
Not After : Apr 14 19:02:04 2025 GMT
Subject: CN=60d06132112efeda87d364442a13b0d3eb8762a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:75:27:8a:5f:64:c8:40:60:8e:8b:74:ba:
30:79:71:62:75:e2:dc:59:26:3e:0e:be:cf:61:05:
f7:40:c5:1f:aa:ba:e2:2f:62:f3:42:bb:a9:81:78:
c1:b9:32:a1:53:02:32:ea:8b:76:73:24:c5:de:7b:
e7:36:2f:80:27:84:fb:3e:cd:f0:a9:13:ef:73:2b:
58:f2:fa:cd:68:eb:88:b1:ab:21:10:d9:5d:91:08:
93:08:e2:8f:01:9c:f8:bc:86:fe:2c:bd:a8:5d:5a:
15:56:c7:11:dc:17:94:70:8a:71:4e:98:27:74:e3:
89:5c:3b:e9:ca:66:f7:e8:88:de:a1:9d:65:8d:ef:
68:7a:f1:86:42:cd:2a:d1:45:df:68:af:71:35:86:
e0:97:71:78:3b:4b:e2:41:41:e6:7a:ef:95:2d:e8:
61:2a:cd:24:20:e1:91:5b:90:45:a4:e7:d5:ea:db:
be:47:4d:08:4e:9c:61:41:12:c4:90:93:43:d5:14:
2d:fe:54:d2:11:4f:a2:c3:1a:07:42:d4:e0:1a:00:
7a:ef:32:ce:6f:21:b6:ee:64:89:05:67:5c:ec:4d:
ab:f1:10:7d:27:49:41:c0:c9:ab:1c:b3:ae:90:61:
01:13:88:ad:69:a9:df:92:0e:db:69:82:08:b7:48:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D0:61:32:11:2E:FE:DA:87:D3:64:44:2A:13:B0:D3:EB:87:62:A9
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3a:dc:0b:0e:59:55:65:0f:15:ea:14:bf:cf:4a:62:ec:8f:
48:59:e9:0e:93:73:63:a8:78:dc:6f:60:ad:fa:f6:fa:1d:b1:
23:da:5d:e2:a1:5e:b4:04:b3:9a:d4:c3:b7:31:06:97:9b:1a:
77:67:44:f0:a3:d1:35:63:b1:f6:7c:31:de:b1:b2:19:64:e5:
50:a8:80:a2:9e:50:fa:a2:c9:79:31:a4:8c:32:a4:e1:0d:1a:
0a:55:84:82:7c:f2:01:8d:97:70:51:6d:46:db:64:06:d8:36:
61:25:03:1c:1a:e1:ef:87:94:07:6d:75:89:7b:e1:50:e3:e8:
62:20:68:0d:e8:b6:2f:cb:e7:a9:cd:0d:db:1d:fe:67:97:c5:
0f:64:ad:5a:8d:27:bd:ba:94:e2:ee:d9:42:00:53:11:13:e4:
4a:7d:bd:d6:ab:0f:aa:fd:16:14:51:6d:d9:75:ed:f1:56:5c:
33:40:44:d4:2b:2a:b9:5f:09:c5:02:aa:b1:24:56:68:6c:32:
7f:2a:73:4a:4c:48:a1:6e:34:5d:df:e2:74:d2:27:47:df:9e:
e8:27:ee:c4:a0:0a:16:ba:f2:53:85:4f:41:4a:d9:a4:5a:3a:
eb:89:a2:27:54:15:22:e1:42:34:53:a3:0d:9c:dc:df:6d:1d:
d2:79:5a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:43:50 2025 by rpki-client