Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: 6esNPycVjGM5O/JhA9pFQICb0+sUA/HVFNDSdmuK9bU=
Subject key identifier: FB:3C:09:4B:67:30:20:49:5B:75:5E:5B:68:E8:1A:24:C0:41:23:90
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 01964CA2BC2C27B24603B9EC40BB27A33E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 06:00:55 +0000
Manifest this update: Sat 19 Apr 2025 06:00:55 +0000
Manifest next update: Sun 20 Apr 2025 06:00:55 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: K4yddqMEr+McSP6bG8Jxt4zu8bIO2DitAPl7e5rLAgc=)
2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:bc:2c:27:b2:46:03:b9:ec:40:bb:27:a3:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Apr 19 06:00:55 2025 GMT
Not After : Apr 20 06:00:55 2025 GMT
Subject: CN=fb3c094b673020495b755e5b68e81a24c0412390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:c5:ff:e2:50:85:8f:c0:ef:70:35:7f:1b:
0b:de:0d:4f:f1:2f:a6:0e:82:84:3a:9d:8a:5a:49:
3b:0c:dc:19:c6:03:df:e3:cf:95:53:b8:a5:1b:ef:
4d:fd:9f:bd:43:a4:a6:75:7c:02:96:f9:ea:44:71:
68:3e:48:eb:c3:fd:a4:13:04:80:60:78:4a:b0:18:
ac:fd:de:c0:f7:2e:dd:ec:8c:a3:7b:53:1e:27:a4:
b7:a6:7f:bf:9a:4a:55:a4:a7:38:1e:24:ca:9d:8c:
b3:ec:d8:d2:2a:52:37:7b:f8:f4:b5:fb:b9:58:37:
1c:75:59:8b:97:34:1c:e1:74:d4:0b:49:a6:8b:17:
96:53:4f:d7:2f:67:7b:7a:f8:1e:83:13:f2:6b:2d:
8e:d0:d2:fb:5f:d3:be:b1:c4:3c:d2:1c:6f:29:27:
f6:04:8e:ad:60:39:7a:aa:45:20:b3:f8:54:27:1a:
27:a2:a9:e3:7d:52:e4:0c:5a:2f:cc:70:da:44:27:
a1:41:12:25:dc:d1:7d:95:f8:4e:6f:74:7a:72:6b:
42:f9:7e:b9:fb:3a:c2:98:2d:af:2a:ce:70:ec:18:
a4:b8:dc:b8:3c:1f:87:09:0e:d5:d2:76:c0:0e:92:
40:d5:79:66:39:1c:3d:b9:9d:ab:4d:9a:84:35:70:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3C:09:4B:67:30:20:49:5B:75:5E:5B:68:E8:1A:24:C0:41:23:90
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6a:d5:31:8a:62:a4:e1:db:d5:7a:56:ba:af:71:f1:a8:3a:
c2:72:36:77:24:d1:46:8e:c8:e6:46:4a:91:cc:f9:64:81:97:
34:64:73:50:14:04:49:9b:5e:92:7e:97:d1:90:55:f2:0f:41:
93:ec:74:2b:c4:73:30:79:ef:b6:5d:93:ec:06:c2:dd:0d:8b:
1a:2b:5a:c9:82:0d:7d:f6:27:87:08:42:e9:be:d9:38:08:6f:
f4:78:e5:ba:1c:51:9f:8b:b9:e7:f0:6d:99:47:53:21:aa:f7:
d7:58:f4:66:94:78:ce:b0:8c:36:54:94:9f:8a:13:ca:71:ca:
d6:ec:33:da:61:cc:ad:13:0a:1f:b7:c2:24:21:06:10:59:65:
5c:47:d3:fe:66:e2:07:60:93:e3:f9:cf:da:bf:be:90:be:e2:
07:31:ce:54:e9:6c:49:c2:d9:ef:3c:ff:4c:c7:e9:19:f6:0e:
52:5a:09:66:db:bc:a1:38:5a:aa:0b:99:ee:f9:2d:9a:bc:1d:
ba:72:6f:37:f7:b4:ea:c2:7d:4d:aa:f7:6b:3d:e7:ea:8d:79:
1c:26:df:8e:07:06:05:67:bd:cb:90:6c:bf:08:01:e7:8d:64:
f8:b7:96:c6:48:5d:7d:ef:fd:89:eb:b7:3d:f9:d2:48:85:9d:
de:44:4f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:29:59 2025 by rpki-client