
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: vYsw6Y0Pb83YqRvnitQnH/WHzk7PVtZU88iJwq+f2zM=
Subject key identifier: 85:7D:D4:3B:31:AC:A3:52:90:40:54:D9:6A:C0:C4:1B:B9:66:CC:3B
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 0196553832A7CE6D35964C466B59EA92AB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 1490
Signing time: Sun 20 Apr 2025 22:01:08 +0000
Manifest this update: Sun 20 Apr 2025 22:01:08 +0000
Manifest next update: Mon 21 Apr 2025 22:01:08 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: ajfiYF6VLzMWuJ4L3/sEW6SxS4jinEhxqVOdDnSWBLQ=)
2: gdCbju7iq0jqbnL3F15jB2y6w9k.roa (hash: 5imVu9OgEC0LpB68Uf/xLlkHKg4D35cIEP4G8Ci0Msk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:32:a7:ce:6d:35:96:4c:46:6b:59:ea:92:ab:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Apr 20 22:01:08 2025 GMT
Not After : Apr 21 22:01:08 2025 GMT
Subject: CN=857dd43b31aca352904054d96ac0c41bb966cc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:52:d6:13:17:e8:8f:2b:9b:86:9c:f2:a0:
87:a3:d1:4c:63:45:8a:bb:93:48:48:bb:6b:b2:3d:
68:14:2c:64:6a:f4:19:b6:b3:36:b1:19:9a:05:cc:
7a:0f:20:b1:ef:0f:96:17:e0:2e:2c:4b:af:6f:28:
1d:a4:47:43:77:fe:56:d2:58:5c:01:1e:17:68:70:
f6:40:2d:dc:57:3d:c9:70:63:8a:ad:c8:93:3c:15:
eb:f5:27:dd:6d:36:a5:85:e5:ba:5c:90:ea:93:22:
77:a7:40:be:86:61:d4:3b:82:1b:ea:b1:cb:1b:75:
af:44:82:b9:70:9c:91:ca:2c:31:25:a7:cd:17:90:
59:ee:b0:63:e6:47:00:8f:dc:e2:37:9e:83:b1:7c:
5d:19:a1:54:f9:e2:b7:83:c4:50:15:8a:ea:b2:0d:
52:cb:21:29:7c:dc:6b:22:e1:6e:45:e0:7f:4b:89:
cd:91:1e:33:66:ec:26:4c:c9:e5:04:99:af:16:2e:
af:d2:80:2b:87:9b:49:0f:dc:80:df:6d:28:c1:1b:
4e:c7:a1:22:d5:8f:d8:19:b5:c8:89:24:9f:f2:0b:
aa:ed:42:34:ef:63:56:50:46:04:dd:2e:c9:b2:f7:
3f:ff:b6:01:f5:d2:16:d0:69:67:6c:76:3f:4e:00:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7D:D4:3B:31:AC:A3:52:90:40:54:D9:6A:C0:C4:1B:B9:66:CC:3B
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:cb:55:91:3e:95:66:56:fb:4f:c9:99:70:9a:3c:ea:1b:24:
55:9f:ce:30:29:35:84:d6:96:a9:7e:48:56:84:99:35:48:04:
23:3a:29:15:c2:f0:a6:c9:ae:ea:41:6e:ca:c0:85:8b:a5:6c:
92:3e:c6:71:fc:aa:dc:ff:08:21:d7:7c:d2:fc:5b:99:bd:bd:
70:8b:2a:be:91:21:f8:ed:7c:a6:4f:33:1c:cc:38:02:85:a0:
8d:87:89:4d:97:6f:81:42:b3:c2:34:ca:ba:92:6d:0a:92:64:
fb:11:4f:a1:4b:f6:e5:b8:9b:c3:c7:45:1f:94:43:03:bd:54:
c6:77:f3:d3:44:7a:bb:71:72:34:7a:ce:70:66:66:2b:32:fc:
4b:66:f9:68:94:8f:5b:b1:45:c7:2e:84:c4:e3:f6:ef:5c:27:
12:da:42:a8:77:c5:ab:01:49:83:fe:28:7c:8b:83:21:3c:56:
9f:09:b4:f1:2e:8c:b2:ab:b2:45:25:51:a0:9c:eb:39:94:0c:
3f:cd:83:0e:85:99:8f:5d:5c:58:2b:34:58:8c:ee:56:aa:ec:
79:3e:85:85:c7:ab:a9:9b:2b:a3:eb:ee:13:61:84:d7:a6:d8:
cf:85:87:50:df:a7:4c:c9:29:56:14:1f:9e:55:d6:b6:7c:c5:
0b:c0:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:32 2025 by rpki-client