Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: L+xDO375m0bhwl5nlR1YLDEy0DWGsBnhOvLPMdBLzdY=
Subject key identifier: F8:1D:8C:00:B6:9C:5D:69:31:DA:94:ED:2A:DF:CE:6A:A7:0A:32:1E
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 01961DA46488BA5BDA17C0136CBFF18FF004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 039B
Signing time: Thu 10 Apr 2025 03:00:34 +0000
Manifest this update: Thu 10 Apr 2025 03:00:34 +0000
Manifest next update: Fri 11 Apr 2025 03:00:34 +0000
Files and hashes: 1: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: 7geNFs2MHFi/cgCVioPUbOGFIdNcTV2c78V7QZNLffo=)
2: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (hash: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=)
3: r-plRi1ZpgmWnu-urPIdYNrFFFU.roa (hash: DxecFcu5t+xZ0qqmbJOm2zril/rb62HI5wbo3Djm3yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1d:a4:64:88:ba:5b:da:17:c0:13:6c:bf:f1:8f:f0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Apr 10 03:00:34 2025 GMT
Not After : Apr 11 03:00:34 2025 GMT
Subject: CN=f81d8c00b69c5d6931da94ed2adfce6aa70a321e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:79:d7:e9:44:7f:1a:18:55:05:bb:22:f2:
d7:1e:f7:f8:dd:fd:93:18:d4:94:e7:4b:ee:80:0e:
2b:4e:e1:9c:c5:a2:ba:84:c3:02:b5:42:44:b8:e4:
53:3e:8e:14:2e:26:a2:00:79:ca:f2:f0:46:a0:f2:
47:95:09:3a:2d:99:28:36:dc:12:8b:61:b7:d2:5a:
65:db:31:2e:66:4b:20:82:88:75:68:c4:5c:93:bf:
bc:0f:94:2f:17:6b:ea:64:41:be:41:62:fb:b7:56:
8c:3c:31:f1:39:de:73:3c:98:6f:38:a0:33:7e:96:
04:05:c3:6c:71:d3:31:13:49:f6:cd:2b:dd:9c:2d:
3b:97:89:1a:1e:c2:14:45:c0:46:2c:52:52:a9:83:
cc:03:3e:0b:6d:0c:5d:b5:11:bb:30:83:35:3e:84:
b5:26:ff:f9:01:de:17:00:6f:4a:45:91:b7:87:ea:
b6:fb:f9:bf:d3:16:7a:96:7e:3b:8b:5f:d9:6e:ee:
f9:0c:de:85:5f:b3:bc:7c:f9:4e:ad:f7:2f:67:f0:
69:0c:b7:3b:7f:0d:8e:1c:79:e3:83:ad:cb:b6:da:
97:08:f5:eb:45:2f:8a:15:ac:62:82:1b:8c:27:40:
d2:1a:d7:e1:d7:ec:3a:03:14:c9:ee:c8:c3:0e:e5:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1D:8C:00:B6:9C:5D:69:31:DA:94:ED:2A:DF:CE:6A:A7:0A:32:1E
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:61:0b:54:78:a1:14:08:24:7a:2c:12:9f:50:f2:43:36:57:
48:31:33:76:0f:1a:ee:ec:6f:e2:4e:87:27:cb:80:d5:51:6c:
ae:27:e0:98:f1:36:0b:e1:7a:f2:42:63:e6:0a:fa:1e:a1:8f:
aa:e4:78:aa:0e:6c:48:7e:f5:5a:48:f4:8d:2e:d6:82:e0:da:
8e:d0:5b:ce:2e:3b:0b:dc:24:7b:aa:f1:91:04:17:b4:55:a7:
e4:82:63:e5:ea:1d:80:e5:ca:28:0a:40:5e:91:f8:6d:c7:84:
a9:3e:d8:59:ab:bc:fb:15:52:fb:dc:82:74:e9:13:07:f7:17:
24:0d:43:50:c0:70:bd:c6:58:6a:18:2c:ce:8e:2c:27:66:b4:
44:ff:ee:f1:e3:0a:20:c7:85:e6:09:0b:3f:34:24:e6:8d:a3:
69:dd:47:16:04:18:0d:d5:52:0c:28:67:e7:82:53:84:8d:e2:
16:2d:1a:35:2e:76:47:d2:b3:77:12:d0:c6:e6:59:76:58:8c:
bf:f2:be:cd:08:58:65:29:41:48:c1:57:95:2a:26:42:bd:c5:
bf:38:1f:2b:c5:68:99:f4:08:a4:ae:ed:e4:4c:df:f0:d4:2e:
cf:11:85:2c:16:cc:be:37:16:b7:46:aa:2e:5f:0f:f8:bf:81:
39:56:12:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:59:53 2025 by rpki-client