
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File: E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier: +9dr+PVyFq7akOYoPgr58hVPG/6ppXVbwzzlYdLuIb8=
Subject key identifier: E6:F8:05:D2:24:CA:F8:ED:F8:9E:5A:99:F7:92:B8:78:E2:18:EA:41
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer: /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial: 019652000666BFC0A0F047022DCDCB92CA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 07:00:55 +0000
Manifest this update: Sun 20 Apr 2025 07:00:55 +0000
Manifest next update: Mon 21 Apr 2025 07:00:55 +0000
Files and hashes: 1: 8gvSRkioiol7AtclW0w3QDNdRw0.roa (hash: pAF2HpC02c8LxHhm/ivKqiw2U8OBqawxXoZZFN2vllM=)
2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: 0rIVqXkvvop7rKx5j1cQ68w6dWRLZxjXtPs/QC3Ak6w=)
3: VqJZEln3bccahadYDW0ePgV1gdw.roa (hash: CgpHiF36vVgykBJlcL4O9MnI1LRoTpD9E00VJ7RhYwg=)
4: wQk6P3JazTtfJ7Qbak1iF7pmDzU.roa (hash: yyhyj8+uWZT4ObCsZinsPoUAt/nN+0r3AmItPKtF2y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:06:66:bf:c0:a0:f0:47:02:2d:cd:cb:92:ca:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
Validity
Not Before: Apr 20 07:00:55 2025 GMT
Not After : Apr 21 07:00:55 2025 GMT
Subject: CN=e6f805d224caf8edf89e5a99f792b878e218ea41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:73:11:22:e8:05:a1:43:b6:04:80:1a:5c:78:
86:91:11:c9:df:a6:11:a7:cb:9f:f0:6b:ac:ea:cd:
88:8c:a7:98:3b:76:4b:28:56:a3:ff:7d:ec:03:78:
cc:0c:f7:ac:cf:8c:62:e9:b4:b4:44:88:03:34:2c:
b9:c1:e3:70:80:3b:30:8b:0f:4c:fe:ac:a8:01:1b:
3b:2f:0f:fe:0c:f4:a0:93:56:66:e3:4c:89:bc:04:
e5:2e:ef:20:a6:38:83:17:df:32:2f:7d:76:8f:85:
20:56:27:17:1d:b1:f2:4a:0b:6f:76:d6:43:88:d7:
f2:b1:8f:4d:63:f9:9b:f6:d0:4a:72:ec:5c:c6:21:
67:10:78:a7:a3:e5:a1:b0:1c:0d:d8:7c:35:d9:1c:
b9:9b:a1:bf:e0:58:6d:50:68:07:c9:a9:24:9c:96:
ef:44:bf:a7:54:04:45:6f:98:cf:85:8d:f6:90:38:
4f:78:d0:df:8b:82:85:23:54:65:77:c1:1e:ca:c6:
87:3f:16:d3:38:8f:45:13:23:94:b2:4b:25:9c:24:
64:68:2b:f8:31:03:05:c9:62:4c:0e:2c:90:6d:d9:
41:bf:33:84:eb:a4:10:5e:6a:d1:52:6e:aa:12:29:
51:54:f2:ec:94:f1:1a:70:15:7e:c8:0d:e4:44:0e:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F8:05:D2:24:CA:F8:ED:F8:9E:5A:99:F7:92:B8:78:E2:18:EA:41
X509v3 Authority Key Identifier:
keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:43:e0:a9:af:4f:fa:79:91:a6:f2:db:82:88:1f:5c:07:da:
ff:ab:6e:a2:38:a3:2b:f2:1c:5b:87:28:42:35:95:05:b1:4e:
06:85:2e:f7:46:07:d9:d9:00:22:a5:3f:34:ba:dc:8e:f8:73:
d0:d1:8b:e7:8a:af:3b:aa:c9:9d:b2:19:30:c5:8f:6a:93:25:
8c:9a:36:ca:e5:ad:21:47:fb:b8:f4:4f:e6:79:2f:fa:7b:37:
3f:1d:25:16:2a:c5:43:6b:22:23:7c:b2:6c:7d:07:f7:60:bd:
45:1c:8d:54:83:9a:52:b9:fe:ab:c6:57:ba:bd:b8:fb:57:d9:
9b:d4:0b:14:e6:1b:8a:b7:bc:ae:5c:46:b9:bd:00:dc:e9:35:
87:8b:32:9f:b6:4c:b2:19:04:b7:34:e5:6e:51:d0:13:61:15:
b2:59:83:c3:36:9c:99:61:d5:1e:20:a5:f1:82:95:40:33:9c:
a8:a8:35:61:d9:3a:55:6d:2a:ec:f4:ed:8f:9a:5c:0b:eb:b9:
31:bd:bf:96:05:42:3c:09:d7:e4:49:0e:8e:e4:c1:25:9d:38:
f2:f9:6e:a4:09:66:ff:1b:9c:74:35:d2:64:9b:c5:44:de:c8:
45:ec:95:b4:ab:9f:f0:99:cf:e1:98:bd:03:a2:40:e5:3e:1f:
d7:94:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:01:17 2025 by rpki-client