Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
File: E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json)
Hash identifier: 5dEtccnbqRNMzuX7dvibhPGqbdzMaqZAw/oh3nDTMjM=
Subject key identifier: D7:CF:54:22:AF:B5:13:E6:D5:7C:44:0B:5A:17:18:73:00:7A:F1:F9
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial: 019611D7BC459F8C717A24202F8311C42776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
Manifest number: 0BC3
Signing time: Mon 07 Apr 2025 20:01:13 +0000
Manifest this update: Mon 07 Apr 2025 20:01:13 +0000
Manifest next update: Tue 08 Apr 2025 20:01:13 +0000
Files and hashes: 1: 3ZKIh733NIkz8A90ghZangf0O7w.roa (hash: +/arpwpD8EZM12Zn7hG4BlRv38snttCFSH/eAZhX+dg=)
2: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: ahPS0Utqy3hsc/5E/+GVoSba9FdLneZfVFzB/tKJiTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:d7:bc:45:9f:8c:71:7a:24:20:2f:83:11:c4:27:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
Validity
Not Before: Apr 7 20:01:13 2025 GMT
Not After : Apr 8 20:01:13 2025 GMT
Subject: CN=d7cf5422afb513e6d57c440b5a171873007af1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:31:5e:19:97:12:2d:08:1e:03:e7:c0:67:
0b:22:8f:e9:2d:80:c9:b1:45:d1:b3:ad:2e:12:d7:
f2:99:23:fd:78:ad:ac:64:ef:18:97:55:ad:54:56:
41:f4:81:d8:96:95:19:42:15:ea:af:54:6b:42:21:
51:e1:b3:50:9f:32:20:2d:01:b5:21:1b:ab:da:fe:
8d:60:9c:2e:be:0e:c2:7e:5f:83:27:76:62:39:b1:
35:71:8c:45:1a:76:19:83:fd:65:0b:e8:a7:ea:53:
7f:19:a1:97:0e:93:64:85:3c:89:a8:55:0c:eb:50:
50:f8:7f:c1:a0:8f:2f:c2:42:74:e8:57:7d:08:3a:
01:ce:13:1d:77:d6:29:22:78:88:6b:8d:f5:8d:4a:
f7:69:6b:83:a8:4f:a1:53:f9:d0:c1:49:3a:b4:a6:
39:98:e9:77:6e:d9:16:19:3b:56:44:17:b3:84:a5:
51:8b:ac:29:e8:e3:9f:28:b7:37:d8:e5:e7:d8:ee:
83:a7:cc:bd:c1:a3:81:04:af:08:8d:4e:a5:9e:4d:
01:86:51:9d:d6:9e:f2:ca:30:70:de:fa:d7:cb:2c:
4b:ab:9b:1c:45:4f:45:cb:01:3d:b9:1c:d1:73:91:
9b:ad:69:d2:fe:76:3e:1b:8e:84:51:70:d3:f1:08:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CF:54:22:AF:B5:13:E6:D5:7C:44:0B:5A:17:18:73:00:7A:F1:F9
X509v3 Authority Key Identifier:
keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6e:d3:72:d8:5a:23:13:bb:84:e7:4f:1d:31:8a:a6:7f:9b:
61:c4:3c:ef:ed:03:7c:87:f8:d8:a4:87:0f:65:a6:f1:5e:2b:
b4:4b:15:79:4a:a0:94:b3:e7:9a:5a:f1:47:8c:f8:8f:e6:63:
43:af:26:45:af:25:47:63:86:eb:a3:3a:55:e3:77:a3:8a:e5:
15:96:b2:68:3b:c3:ed:80:b6:a2:03:70:fd:d9:94:19:ab:51:
37:b0:ce:39:ea:28:78:5e:be:0b:e1:c7:59:e3:03:c3:eb:11:
9d:07:e4:5b:89:d0:47:5b:13:a7:d6:c1:ef:01:1f:13:00:37:
aa:08:12:7b:83:7e:8f:39:96:db:ed:a2:8e:7a:fb:19:6c:58:
7a:6a:73:bc:8a:a5:6a:b1:4a:06:cf:f5:02:cc:82:92:ca:cb:
9f:a6:ac:cd:9a:73:b8:cd:49:47:ab:3f:9f:ac:ec:a2:cc:e5:
c5:28:2f:27:e2:3d:c0:1e:9f:7a:75:53:0d:9e:f8:03:54:4f:
5f:e8:9c:53:e3:61:db:5f:a4:ff:09:0d:b8:dd:6f:2e:0c:49:
33:a2:4b:73:56:03:2e:7b:ed:29:2d:6d:f3:a6:14:01:10:c8:
2b:12:20:1a:ef:f0:12:94:14:e7:98:b9:ae:19:c2:bf:f3:4c:
23:5b:71:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:43 2025 by rpki-client