Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json)
Hash identifier: rgtd8ltfUQSoHOAu7t4XRf+PSLhVPn9M0YcX83RatNQ=
Subject key identifier: D8:90:C2:D3:1B:79:C4:56:EF:68:E3:18:30:84:51:D7:53:2C:FB:D4
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial: 01958B8447E7CABD8A19EE4C9339BE10CE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 18:00:56 +0000
Manifest this update: Wed 12 Mar 2025 18:00:56 +0000
Manifest next update: Thu 13 Mar 2025 18:00:56 +0000
Files and hashes: 1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=)
2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: ygDSqygX0cd9j6tt7F2eaBlBc6QwBkQdY+dbuLWhC9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:47:e7:ca:bd:8a:19:ee:4c:93:39:be:10:ce:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Validity
Not Before: Mar 12 18:00:56 2025 GMT
Not After : Mar 13 18:00:56 2025 GMT
Subject: CN=d890c2d31b79c456ef68e318308451d7532cfbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:d9:70:d6:67:1d:c6:82:3a:8a:b1:1f:68:
99:49:32:1c:7f:90:dd:4d:26:53:2b:5e:d3:3d:7e:
fe:3a:78:e6:3d:22:61:66:11:d8:9b:a1:35:8f:93:
e6:aa:b0:1c:b7:69:39:0b:54:8a:2b:bf:50:fb:4c:
21:a7:b9:8a:e6:28:9c:a4:ba:0f:06:9a:1b:b3:c6:
49:d1:99:74:1a:d3:93:59:ef:e9:d6:a6:10:c1:83:
df:05:b4:15:3b:f5:59:e3:26:39:49:e9:3f:7a:4c:
b8:96:8d:2f:91:ef:2a:6f:50:a0:71:8a:fe:bb:84:
76:1c:b4:8a:b4:fc:92:fc:14:69:d5:9a:eb:a2:68:
3d:71:a3:53:eb:c5:10:66:06:77:c2:ad:d7:fd:21:
93:d4:ae:de:4b:46:10:ee:9f:84:29:4a:c5:98:e3:
95:40:cc:b2:ff:71:7f:63:ff:0c:90:c9:25:04:c0:
03:d3:f7:aa:b4:4c:81:96:79:0f:f8:6f:62:a3:d6:
72:76:64:b4:d6:ab:84:23:78:04:e7:f9:e5:aa:6d:
f2:6b:26:fa:57:1c:1f:be:b8:f5:58:76:ec:67:8e:
43:9d:3b:37:db:84:62:bd:9e:30:83:2e:95:49:d4:
b8:1b:06:01:fe:a8:54:76:22:bb:36:67:76:18:7e:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:C2:D3:1B:79:C4:56:EF:68:E3:18:30:84:51:D7:53:2C:FB:D4
X509v3 Authority Key Identifier:
keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c4:7f:b9:21:f6:71:7b:a9:b1:ef:3f:eb:3f:2e:e3:c5:1c:
22:d4:1a:22:b9:76:5a:60:81:57:f4:1c:89:4f:2e:37:8d:d3:
6f:f0:eb:20:51:c3:1d:99:97:1c:5b:d4:12:20:31:05:1c:8c:
1f:68:a4:e4:f7:81:c3:ea:e7:06:96:6e:e0:c0:26:fc:4f:85:
c1:ec:95:34:1e:ba:33:50:7f:a8:37:27:9e:65:67:a5:49:12:
46:a7:9a:21:9f:c6:41:df:87:98:4d:b2:64:85:1a:39:1a:bf:
e6:0d:80:1e:23:2e:f0:df:71:cf:e0:ec:b6:a0:51:91:31:21:
55:e6:2f:fb:9f:11:1b:0e:ef:0c:cf:78:31:53:bd:83:97:49:
76:77:2f:9a:99:8d:5b:bf:9f:04:01:4f:3a:de:7d:a8:25:f3:
16:65:b0:25:6b:d1:9a:c6:31:f8:93:e7:4c:59:34:ec:a6:cb:
9f:fa:b6:3f:c2:39:46:92:39:85:5f:34:be:d0:14:85:8c:8d:
f3:f0:79:db:aa:99:eb:a4:12:d7:48:1b:84:50:67:08:c2:91:
2b:5c:4f:70:ee:47:d8:3f:48:60:54:ab:da:62:40:88:57:7a:
20:6e:c9:f7:4a:3b:1d:d5:1a:c7:40:58:44:8e:47:4e:7c:b2:
76:9e:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:21 2025 by rpki-client