Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
File: E-XdFL3pMjctyLWTLMVNYI276Qg.mft (raw, json)
Hash identifier: fYRMe8pfL878bh3H+lr7+HSOULkKaJzWWjrD7P/rzx8=
Subject key identifier: E1:23:68:6B:41:CF:BD:7F:59:72:EA:07:52:0E:6B:B9:C4:B7:8B:64
Authority key identifier: 13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
Certificate issuer: /CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Certificate serial: 0196BCA4D84565FE1B38E54159E044BD5ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
Manifest number: 0123
Signing time: Sun 11 May 2025 00:00:41 +0000
Manifest this update: Sun 11 May 2025 00:00:41 +0000
Manifest next update: Mon 12 May 2025 00:00:41 +0000
Files and hashes: 1: 12_j47AEFlNkQmnvJ6lQS6k9OJM.roa (hash: QL5MIkOPhYomrHDRf0wI6//DVHKZ3F+ShGeX+xkxEXo=)
2: E-XdFL3pMjctyLWTLMVNYI276Qg.crl (hash: aSYcVb8gI4m8gX8734HGfFgmwwKP2G1u0M9AuTgfOBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:d8:45:65:fe:1b:38:e5:41:59:e0:44:bd:5a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Validity
Not Before: May 11 00:00:41 2025 GMT
Not After : May 12 00:00:41 2025 GMT
Subject: CN=e123686b41cfbd7f5972ea07520e6bb9c4b78b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:1f:d9:b8:b4:05:83:2d:ee:bc:55:d6:79:
ee:c3:64:42:3a:19:9d:19:ec:9e:fc:da:5b:4e:ca:
d6:9b:d4:bd:a5:7e:bc:97:77:99:35:25:34:58:7c:
9f:db:27:3c:6a:88:b3:1b:83:8c:f0:30:0c:8a:be:
ce:d9:24:7d:03:b7:16:61:e0:c3:47:05:2a:7c:43:
75:95:89:03:a5:53:9a:9b:de:89:17:f1:a2:2f:6d:
d9:42:7d:bb:40:ca:5b:58:a7:b6:b2:9a:59:df:4e:
4a:e6:63:29:b2:d1:bc:78:02:52:d8:fe:1f:79:7b:
91:16:6b:78:b4:d2:9f:57:99:99:a2:4c:74:8c:58:
be:b7:e3:27:93:3c:34:73:a8:29:39:f4:61:10:13:
d7:05:e1:8b:b4:da:80:a6:51:3c:85:ce:42:3a:e7:
41:94:31:5c:e5:69:4b:d3:b1:8f:52:34:d9:4e:95:
3a:94:20:5d:42:20:ef:10:0b:d2:01:ad:15:44:bc:
a0:93:aa:b9:1f:bc:dd:f4:72:ec:c9:91:1a:12:af:
b8:c3:6a:37:87:ea:47:b5:9e:89:25:ce:4b:7c:47:
8f:6c:d7:f4:87:c3:4c:64:f9:7b:a2:94:42:26:5c:
32:3d:2f:10:32:e7:1e:c4:d5:24:d4:ad:87:14:a9:
2d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:23:68:6B:41:CF:BD:7F:59:72:EA:07:52:0E:6B:B9:C4:B7:8B:64
X509v3 Authority Key Identifier:
keyid:13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5b:40:c7:70:90:a4:25:ea:34:e3:87:f4:5b:bb:ca:4d:08:
1e:d9:4d:b7:fc:28:61:f9:85:a3:ec:2a:45:45:c5:c5:55:96:
54:22:f7:a9:11:03:52:87:a0:89:39:85:9f:76:f1:58:0a:c8:
2a:f6:6f:5d:36:ac:e4:51:31:38:97:24:66:86:12:59:f6:ee:
11:e1:63:a7:db:9e:47:42:b8:8a:ab:ff:7b:de:1e:8a:1c:1c:
76:88:32:f2:7c:94:d2:8f:af:8d:d4:25:e0:9f:4b:ce:89:a9:
39:1b:12:15:0e:3c:ed:40:78:3e:72:cf:69:cb:99:d3:9c:1e:
cb:93:74:94:b1:37:2f:6f:ee:35:fd:dc:7f:96:fa:85:b4:be:
ba:5e:ae:2f:00:d9:93:b7:b5:26:80:bf:5f:82:9a:d6:52:e2:
65:86:5f:0c:b2:e8:dc:43:47:d5:1a:39:ed:36:68:44:8c:a3:
3a:91:4c:06:a2:ea:18:cf:e2:26:8c:b4:62:89:bf:9f:73:78:
4c:79:16:85:9a:df:70:36:0f:34:b8:c4:37:02:10:c3:d8:03:
0b:5e:3f:92:d5:68:bc:46:e3:c9:65:5a:16:2e:53:5c:e7:2c:
10:4d:77:85:5b:8b:9a:4b:d0:50:73:bc:c4:fa:34:ec:6b:88:
33:ae:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:51:29 2025 by rpki-client