Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: lYglBlRqRkVWunE/UU9PM5eTSDKT4Tyq18gTN61lldE=
Subject key identifier: 62:99:79:23:2D:1F:B2:FB:E1:76:2F:36:29:8E:36:07:75:E2:A6:0C
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 0196CB72AF1B12C7B33BF14C057DF4ECE5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 14CE
Signing time: Tue 13 May 2025 21:00:12 +0000
Manifest this update: Tue 13 May 2025 21:00:12 +0000
Manifest next update: Wed 14 May 2025 21:00:12 +0000
Files and hashes: 1: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: jb+an9JnjIm5k9CxMg8bFz9xxBUbPHvoR8U4zRtbqyo=)
2: ge348cXUyfn-a0uMZAg0yuW4_4I.roa (hash: 03wgahHEv0LtvPbFr0SJwLu/Pwx7T9tZQCD+de4AGPQ=)
3: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (hash: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:72:af:1b:12:c7:b3:3b:f1:4c:05:7d:f4:ec:e5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: May 13 21:00:12 2025 GMT
Not After : May 14 21:00:12 2025 GMT
Subject: CN=629979232d1fb2fbe1762f36298e360775e2a60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:67:e3:ca:3f:36:e7:2c:de:fe:be:96:a6:a0:
ea:9f:1e:1d:29:25:94:b0:11:b1:e9:24:ce:31:c5:
01:46:27:73:36:a0:62:28:e8:da:23:c9:cc:ed:bc:
18:e1:8d:bc:09:49:a8:a1:6b:1f:3b:a0:bf:1e:75:
ce:8a:82:3b:c5:6f:a9:3c:bb:98:99:d0:e8:60:6b:
e9:a1:95:41:6d:e7:95:2b:d8:9a:30:d1:7d:30:86:
93:3e:1f:9c:81:23:6a:d0:fd:fc:30:f1:99:10:15:
4e:86:3c:65:2b:4c:16:8a:a6:4a:61:c9:22:2d:64:
35:d2:89:67:db:5b:39:54:52:0b:31:29:9d:cb:68:
ad:2f:55:e8:b5:83:49:c1:93:75:15:75:04:ee:96:
3c:97:98:3d:69:5f:0b:2b:2e:87:34:93:f3:d7:37:
77:86:37:8b:9d:d9:78:5f:0f:9d:37:ff:f1:94:c3:
43:a2:f6:45:00:e8:72:fc:88:52:aa:b4:d7:f5:94:
75:3f:3f:ba:c3:94:e6:9f:ea:73:10:72:0b:02:0c:
ad:99:04:1d:e9:70:9f:6d:31:6c:2f:15:80:1b:69:
6c:25:2b:43:ff:3d:ff:66:e1:28:02:d1:c4:c2:e1:
4b:38:bf:9c:55:c4:eb:de:53:4f:2e:fe:bc:e9:2d:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:99:79:23:2D:1F:B2:FB:E1:76:2F:36:29:8E:36:07:75:E2:A6:0C
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:86:d2:1f:6e:77:1e:15:b1:14:4d:de:ad:0e:9a:4a:01:b0:
ca:90:a8:5b:f6:00:72:6b:b3:de:9d:2d:6d:7b:49:01:2c:9a:
68:e1:37:ae:01:e6:fe:e2:2d:cc:e0:71:cf:64:e0:2c:c6:46:
65:e7:13:eb:8a:08:49:d4:d8:3a:a6:f0:38:ad:bf:2a:a4:db:
00:fe:49:77:9c:ca:76:cb:15:78:f7:74:d6:7c:13:63:9d:b9:
6d:24:09:bc:db:7d:3d:db:e8:0c:cf:4f:2b:86:a4:ad:52:44:
35:da:8f:6e:f3:8e:1c:fd:73:87:29:d3:73:95:aa:17:d6:8c:
df:4c:db:3b:5c:f2:e6:29:82:e1:ad:03:bf:8c:c6:0b:f3:c8:
a7:56:43:9d:cc:d1:02:e7:ab:e9:07:10:ab:fa:96:c0:a9:34:
6a:03:bb:e3:5e:91:d8:75:70:e0:b7:62:6b:ee:df:f5:ab:7b:
fe:21:83:b6:af:e8:53:a5:ef:47:54:e8:f0:59:aa:dc:70:32:
2c:70:49:d5:1c:b9:eb:f1:b5:12:77:b7:69:6c:af:82:3f:f8:
48:db:59:b9:4b:fd:11:cc:db:d2:c6:31:2f:2d:80:8a:f2:15:
35:b3:7c:a1:f3:39:f8:a4:87:1f:f8:0e:21:05:66:7e:d6:45:
a9:5a:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:09:01 2025 by rpki-client