Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier: BIcl/COoPB6OOnwAM+sCgJy+MwSWIfpUEEiSA93CuaA=
Subject key identifier: 1C:F9:0F:11:15:B2:CE:5C:4B:25:DD:76:76:61:0E:0A:DA:87:01:1F
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 0196B96C8045C3B9618C412FF30AEA930A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number: 1261
Signing time: Sat 10 May 2025 09:00:17 +0000
Manifest this update: Sat 10 May 2025 09:00:17 +0000
Manifest next update: Sun 11 May 2025 09:00:17 +0000
Files and hashes: 1: CELUTpBmSuqhjwRRI1l2uOlW34U.roa (hash: uUfGyY6bU1KfNs8RkdPxHIiu6rkpi1xDzqQB1urLRGQ=)
2: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: u6TZBLyHz8OJ9C8BX9mNM5FM23A0/9zUrljViQiGVVg=)
3: IeYSfMoEUOpL9zvYa7nI3z9IUtk.roa (hash: Jx4O2YZjJ11KtiwcsJQSqlxvszabRiJ7Q1v0Y4B3N6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:80:45:c3:b9:61:8c:41:2f:f3:0a:ea:93:0a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: May 10 09:00:17 2025 GMT
Not After : May 11 09:00:17 2025 GMT
Subject: CN=1cf90f1115b2ce5c4b25dd7676610e0ada87011f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:c3:96:f8:62:70:63:a6:38:f1:12:87:6b:
21:d3:63:08:de:69:4b:99:9f:cf:20:8f:62:09:3b:
73:36:39:39:db:74:3a:3a:a2:9d:b1:01:4c:e4:48:
27:54:48:73:61:a0:bc:84:82:51:5e:b0:a8:0e:c2:
46:0c:1e:5f:aa:fb:38:01:d7:3a:94:d2:bc:8f:91:
fd:32:83:c7:fa:8b:0a:8c:57:29:83:01:e2:fe:53:
7a:a1:09:7c:9a:c2:19:20:af:6d:6a:54:97:51:3e:
27:f0:3f:1f:97:4d:d3:09:d9:f0:5f:28:56:8c:b6:
d8:da:0e:87:22:7a:03:60:a8:54:16:34:45:4e:75:
d0:d8:c8:fc:f9:58:c0:59:d4:51:89:0e:59:3a:fd:
33:5a:df:14:f5:2f:e7:59:96:44:6e:fe:98:56:32:
9a:42:79:f2:8e:a0:85:a6:20:70:2a:a3:3f:2d:69:
b0:48:83:0c:66:3e:28:5f:73:31:de:d8:10:50:41:
84:59:ab:5d:15:14:31:ae:c7:1f:7a:47:16:0b:ff:
73:15:2f:b0:23:8a:bc:bd:83:f0:b4:c0:85:30:04:
24:5f:65:b5:b9:14:0d:4e:bb:bd:f0:76:cd:03:81:
87:5a:e3:f2:63:80:9a:63:f9:a2:33:92:2c:1e:e0:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F9:0F:11:15:B2:CE:5C:4B:25:DD:76:76:61:0E:0A:DA:87:01:1F
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fe:7c:18:f1:25:22:d6:ad:1c:b1:db:e1:77:7f:4b:dc:90:
91:4e:0a:1f:d6:29:e4:d5:63:d7:c4:b2:f6:51:c4:70:ba:ba:
8d:5e:6d:84:20:4d:64:00:c0:d7:8c:b9:3c:b4:e0:72:40:92:
4f:24:d2:b7:cb:27:aa:a0:bd:c7:96:b3:e2:02:2c:8c:83:26:
6d:ee:f6:f2:d2:d6:28:e1:e1:8d:e6:5e:28:0f:cb:19:fd:84:
32:9a:90:88:ec:34:e7:f2:07:52:b3:12:07:5a:54:82:a6:02:
12:29:5c:aa:fa:c3:3c:05:f7:b7:0c:7d:73:68:0c:87:e0:2c:
37:0c:a7:0d:92:3d:b3:2d:aa:60:5b:03:f3:bb:78:14:66:5d:
86:4e:52:04:81:12:8d:2f:15:41:3d:72:b6:c9:c2:ad:8f:46:
bb:6f:1b:6f:b8:10:24:50:6a:ca:07:ee:1e:c6:13:4c:ad:c8:
3b:af:22:05:22:e3:b7:3a:cd:27:6f:6f:0f:81:e6:48:0b:c6:
a0:65:16:27:39:e5:ac:56:17:1d:ac:f0:63:90:17:6d:c1:24:
41:d0:0d:df:17:0a:58:ab:e2:c5:92:4d:04:94:6c:9c:b2:c6:
37:35:e0:d3:7a:5d:f4:99:c1:7d:9d:01:e0:8d:bc:34:66:db:
e1:a4:e4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:07:54 2025 by rpki-client