Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: UL+eXPACwxs0vcQ8JoJllcmstoIFvsEKFHoEMX3g4CI=
Subject key identifier: F7:AF:D3:CE:51:BF:01:46:CA:79:4E:94:D1:28:A5:96:3B:60:DC:89
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 0196A31C2A78DF0C3ECD503CD1A02E154F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 1376
Signing time: Tue 06 May 2025 01:00:54 +0000
Manifest this update: Tue 06 May 2025 01:00:54 +0000
Manifest next update: Wed 07 May 2025 01:00:54 +0000
Files and hashes: 1: 4GeQc9KQXXi6xI1vB_7_1xuddrA.roa (hash: EUSBq2g9uve+neWandDVOfufL8m9jgeOZuElm8BWqRs=)
2: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: vJYh2LyRPkKv3LMmMfU8llktvieY/Aojj7O2bGCs5ls=)
3: mrO_skF5U6ZGJqbgAfNZfugggNM.roa (hash: yfwhNV2BqjohUdfQURFd8JsTx2XS1MSjZ6sAAemAuqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1c:2a:78:df:0c:3e:cd:50:3c:d1:a0:2e:15:4f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: May 6 01:00:54 2025 GMT
Not After : May 7 01:00:54 2025 GMT
Subject: CN=f7afd3ce51bf0146ca794e94d128a5963b60dc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:33:e0:c8:53:3b:ad:33:d2:34:19:71:a1:
67:77:6a:0a:39:05:06:ed:24:a0:96:4e:41:78:e2:
db:cb:e6:7a:30:f0:85:5c:15:8e:2d:ff:43:87:a7:
26:d2:04:40:f9:3f:96:38:3d:30:d6:52:d1:a5:5c:
f1:c0:89:03:3c:2c:41:df:9f:6e:11:00:3c:8a:de:
d7:01:4f:72:b6:8c:93:91:db:3a:92:1c:97:7b:1e:
38:df:bc:9b:5f:0c:5c:13:a0:39:7c:65:76:aa:b1:
54:9a:77:01:95:41:94:c0:b6:e5:a7:71:d3:25:4e:
10:1d:b7:02:69:ea:00:a8:e6:ce:38:67:89:e0:82:
3b:89:0f:36:ba:7e:62:dc:b8:e0:63:4f:15:da:07:
9a:69:09:3f:9b:29:8c:65:d1:1b:3a:90:7b:48:78:
80:55:41:63:1d:0b:8f:4a:d7:3e:08:28:5e:0e:65:
fb:c8:42:d4:da:ce:6f:98:aa:82:7d:63:0d:9f:73:
61:e0:b4:2e:04:cb:59:ff:fa:e0:d3:b1:24:77:47:
2d:c8:cf:0f:17:f5:11:1e:bc:38:02:c0:dc:88:16:
4d:01:e6:cf:63:88:be:05:ce:3b:68:8f:55:39:85:
31:a7:52:d7:8d:c6:4e:1d:07:37:f8:74:77:64:45:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:D3:CE:51:BF:01:46:CA:79:4E:94:D1:28:A5:96:3B:60:DC:89
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a6:5f:00:ed:1b:ce:de:75:6e:dc:40:e0:5e:96:62:4a:68:
61:ac:07:b1:11:6f:92:89:ed:17:fa:7e:38:43:64:de:d6:49:
13:8f:34:04:ad:ad:61:8d:d4:0d:20:e5:71:c8:6c:5f:2b:9c:
c0:47:aa:f4:b5:4e:8f:7d:07:0b:1d:0d:09:c4:2a:6a:e4:46:
6b:2b:1f:ca:6d:1a:5a:a9:4c:99:44:76:c3:f9:8d:3c:c7:e2:
7a:bd:5a:70:39:32:e2:f0:25:fa:90:51:0d:35:ec:3f:ed:90:
8c:7f:99:a8:a2:88:06:90:eb:98:2c:f0:f7:33:e3:6e:42:6c:
51:b8:93:ad:2d:a5:71:4e:5d:0e:c8:6c:0a:f7:84:e9:62:b9:
97:9d:6a:38:df:27:53:90:37:54:5e:d4:f9:fa:a1:d8:76:df:
cc:15:fd:63:5e:fe:7d:41:10:8d:86:21:45:e8:d7:69:20:32:
18:9b:4f:76:96:ab:09:82:1d:ac:8b:51:ba:f2:1b:07:86:64:
ac:55:fd:fd:52:c8:75:68:f5:db:ea:4f:2c:0e:7e:7b:93:83:
80:35:32:45:00:19:95:cf:bd:c5:69:4b:32:aa:d7:43:44:13:
1c:93:33:80:55:ad:9e:61:ee:e7:73:e9:a8:d6:9c:69:73:4b:
38:7e:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:47:20 2025 by rpki-client