Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: xf+gOMu9nc4HE5f2Sv0yWedmzfZ+GOnm5fhsqYQeEzk=
Subject key identifier: 0B:90:DE:12:EE:A3:6B:70:E3:2C:DA:3E:EA:D4:8A:79:D7:4C:BE:2E
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 0196B66B95E5E87F6C37DD7B70FA08C6460B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 19:00:26 +0000
Manifest this update: Fri 09 May 2025 19:00:26 +0000
Manifest next update: Sat 10 May 2025 19:00:26 +0000
Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: hjDu4zKntX+bKmeAmlU8XrAnnt+QI38FfUNXqgLe+sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6b:95:e5:e8:7f:6c:37:dd:7b:70:fa:08:c6:46:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: May 9 19:00:26 2025 GMT
Not After : May 10 19:00:26 2025 GMT
Subject: CN=0b90de12eea36b70e32cda3eead48a79d74cbe2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:31:20:56:74:ba:e8:a8:a2:57:95:d9:03:
7b:3b:7b:30:03:8b:8d:1d:db:44:85:af:d3:fe:0e:
85:37:21:e2:28:4d:02:75:b2:9e:12:88:a8:6d:12:
cc:84:76:30:bd:36:01:e5:ac:79:80:0a:a3:0f:f1:
45:f6:fa:f3:b0:dc:c1:22:13:67:f1:3e:76:4c:10:
3e:22:54:67:ed:6a:0e:76:b7:45:5d:43:0e:7a:f8:
8c:e3:32:05:b8:b0:c0:3d:64:76:78:8c:01:17:03:
78:18:81:1e:ff:76:18:c1:99:b5:33:b3:8a:40:ab:
a7:81:bd:38:04:ec:1f:7c:95:18:8d:ef:f3:c3:0c:
5c:5e:35:62:1b:65:0c:fe:bf:cb:af:4a:08:b3:5f:
39:7a:b6:fb:f5:e2:3d:32:e2:36:c3:e1:25:d2:f6:
c2:de:6e:f3:cf:72:aa:e3:f2:8a:50:96:dc:e5:66:
16:32:5b:16:6a:20:b8:86:c2:a0:3c:f1:dd:a4:a6:
13:02:5f:bd:37:a7:65:33:da:ad:fa:e1:74:73:43:
14:53:b1:9d:78:8d:76:fd:ca:e4:63:4e:78:2e:fa:
cc:fb:9b:6b:5f:ec:af:47:21:b1:4d:03:47:69:8d:
3b:66:9b:fb:18:09:92:09:55:00:ac:74:87:64:02:
4d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:90:DE:12:EE:A3:6B:70:E3:2C:DA:3E:EA:D4:8A:79:D7:4C:BE:2E
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c9:07:b3:ff:29:e6:e9:3c:44:28:25:24:a1:43:59:54:f5:
d7:55:11:64:21:ba:39:8f:74:95:50:39:ca:f2:77:8d:65:70:
0a:4d:34:56:4c:b4:41:50:c6:3f:92:88:59:e5:5b:23:d9:50:
3e:1d:d6:05:80:0e:13:a8:85:30:94:f6:40:8f:db:0d:59:35:
1f:19:00:1d:74:91:43:1d:df:d2:1d:9d:81:b0:c7:46:f7:8d:
56:5e:09:6c:cd:e4:a0:10:0f:03:6e:e3:85:e1:5a:f7:95:fb:
b2:b3:1b:f1:70:39:97:2a:0c:4c:e5:e7:15:78:1b:01:b7:af:
3b:f8:ff:ba:c1:02:37:86:fa:94:c2:36:d7:19:ca:06:68:2d:
2d:9f:6b:fa:b8:27:15:bb:17:2c:d4:69:18:a8:76:0c:0b:6c:
40:3c:1b:d9:59:8d:2c:df:99:aa:b9:8e:db:8f:96:ae:d3:cf:
1e:11:ff:4a:82:fa:d6:36:28:0b:38:76:29:51:f6:ac:ef:5b:
f8:8a:b4:ec:a5:f9:e7:d6:7e:60:61:69:dc:4a:5e:cc:92:61:
3a:ca:d7:e0:a0:2a:71:81:f4:31:c2:b9:63:93:c3:e7:f2:e1:
6c:10:45:29:f2:d4:54:2e:69:e7:25:a0:3b:aa:b7:c3:76:78:
6c:7f:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:55:50 2025 by rpki-client