Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier: dqI/2sj4P+RtRBnZ3VnUMgkZMNCHx7/DEaS5+SjpxKU=
Subject key identifier: 6A:BE:D5:09:6F:C4:CA:4B:3F:55:DB:77:38:34:E6:22:2F:E3:EE:13
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 01965F4DBA9A7BF3E4AC1FC18CCD2D84E5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number: 0A2A
Signing time: Tue 22 Apr 2025 21:00:51 +0000
Manifest this update: Tue 22 Apr 2025 21:00:51 +0000
Manifest next update: Wed 23 Apr 2025 21:00:51 +0000
Files and hashes: 1: X1TlKjqQxQOIUE9nmZNVP4vjBXo.roa (hash: YEcDQS5RtxJGLo4gojN6ANb19cB9cM3e9I1XVwuKzs8=)
2: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: uBEcuj1eHZFYaalJlnGNGJFOnm76kNWBCl0lQMxYrTc=)
3: pbPgbOFAYYSbv86NqTphvTqH-ss.roa (hash: 2bo0N8otfq6/P5RuOu/G2vL2kcq6chqi1fFShZ0tEtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:ba:9a:7b:f3:e4:ac:1f:c1:8c:cd:2d:84:e5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Apr 22 21:00:51 2025 GMT
Not After : Apr 23 21:00:51 2025 GMT
Subject: CN=6abed5096fc4ca4b3f55db773834e6222fe3ee13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:12:49:1d:45:49:9d:8a:4e:81:7a:3a:dc:5f:
1f:1e:85:4b:d8:80:5b:71:36:c1:74:27:39:44:fc:
9d:1d:b3:90:1d:7b:fb:4b:aa:45:5c:7b:38:ea:64:
2f:69:58:b1:e7:fa:b5:50:19:9f:82:c3:2a:27:68:
91:56:3f:4e:22:0f:f6:43:4e:d6:b4:7e:9d:81:8c:
99:37:a9:42:fa:98:9e:dd:d5:71:7d:ca:a9:a7:ec:
80:9a:91:be:63:03:39:eb:1c:0e:08:2e:c7:d2:f6:
49:3d:c8:03:31:2d:c4:34:e2:38:f4:55:4f:e4:ba:
da:0f:5f:b0:c8:48:a3:ec:d1:6f:8a:7c:fe:04:aa:
e2:af:bf:59:38:a7:4c:f8:ef:ea:72:74:bd:81:4f:
fc:92:1a:f1:5f:94:22:0b:88:05:db:a9:b1:eb:b3:
8d:d1:ef:d1:e3:86:70:8e:66:50:d3:c9:cd:ec:93:
5a:30:9b:4a:15:e0:da:c4:d2:56:39:dc:12:05:47:
93:5d:18:5f:8f:dc:95:e6:d5:ff:d3:7f:cf:f1:2b:
bd:44:24:5d:02:85:c5:09:da:ef:25:c8:23:53:b6:
32:7b:38:2d:bf:23:a6:8e:cd:30:52:c3:a1:8a:e0:
24:97:8d:d9:15:02:d9:56:60:11:b4:00:e5:cc:8c:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:D5:09:6F:C4:CA:4B:3F:55:DB:77:38:34:E6:22:2F:E3:EE:13
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d2:24:c4:68:92:7a:ac:f5:a0:e1:c9:f6:fd:73:f9:78:8d:
86:f4:8c:44:c5:22:b6:f8:e1:94:b3:a2:07:ea:27:a4:ec:54:
b9:b1:d5:28:48:4b:97:97:ac:de:45:53:ec:3c:a7:30:dc:e4:
76:89:be:c4:3a:90:0d:05:35:48:f6:43:28:b5:1d:4f:55:a4:
d1:d2:06:24:02:b4:a3:4f:d1:b7:c1:c1:46:27:85:70:16:8b:
6e:14:e8:e5:f4:8e:d7:9a:18:73:77:ed:e0:c4:7b:0a:d4:fd:
1e:db:fd:2e:ea:a7:62:d9:05:bb:be:29:39:98:65:a7:bb:46:
53:87:2e:a0:d6:0a:86:5d:8d:98:46:19:83:ea:75:76:08:c5:
eb:97:0b:35:93:c4:da:ec:6a:fb:e3:19:00:64:4e:e9:b2:38:
a7:cc:85:f7:94:8d:21:4d:3e:f1:72:36:3e:79:ff:55:f4:58:
93:34:85:e4:82:04:f8:00:c8:8b:5f:c1:33:8f:69:a8:4b:03:
5e:44:64:c6:97:fa:64:91:2c:a7:47:73:a1:42:ec:5f:2c:a2:
40:14:7a:49:e5:4b:7c:1c:27:fd:cd:96:b7:33:7c:7b:46:08:
17:81:57:c8:00:bf:70:c8:38:09:f5:df:be:36:48:27:fe:8f:
d5:da:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:23:32 2025 by rpki-client