Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
File: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft (raw, json)
Hash identifier: YmF02IZxHbKD2Nfb6MpvDFsdcmv5kXKaYRDbuUxCdM4=
Subject key identifier: 14:1C:90:15:A6:F0:EC:63:78:03:0C:B5:B2:91:80:81:90:D4:B3:8F
Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Certificate issuer: /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Certificate serial: 0196CC85B9C117D30E17F0428BC63E173B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
Manifest number: 1541
Signing time: Wed 14 May 2025 02:00:37 +0000
Manifest this update: Wed 14 May 2025 02:00:37 +0000
Manifest next update: Thu 15 May 2025 02:00:37 +0000
Files and hashes: 1: 1XOKZ2XklGPcq5QMqMVrBtsz3DI.roa (hash: uOLEsbZmCJPEZSYbgL/3UoBOworDcneFhX8ZOrNbRIs=)
2: eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl (hash: CSFmxTFF6e94mofFdZYvjSOq4jaC6+4JvHayUxwyPpc=)
3: gRdA1lvZDwZ4CbwZHHGYk6zWOaI.roa (hash: WIrKKySjlipgbBStUixKdW9xZvtWQuX2bcDWYj9rmX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:b9:c1:17:d3:0e:17:f0:42:8b:c6:3e:17:3b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Validity
Not Before: May 14 02:00:37 2025 GMT
Not After : May 15 02:00:37 2025 GMT
Subject: CN=141c9015a6f0ec6378030cb5b291808190d4b38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:46:a1:ad:ab:ee:42:a4:c3:23:50:b0:4a:
18:6c:97:2f:0e:64:bc:a6:0c:3c:61:19:6e:06:cb:
80:ce:cb:00:44:1c:57:fa:ab:36:46:04:56:07:a2:
49:98:e3:89:a0:c2:f8:83:84:b2:c4:39:f0:4d:4c:
ef:b5:d1:08:52:75:15:23:91:09:ae:26:55:7e:95:
3c:d7:ca:6b:d8:6f:b1:4c:91:e3:a9:f2:7b:cf:d3:
80:e4:8b:ec:a4:33:2e:39:06:06:64:32:de:4d:29:
26:a3:2f:a4:c1:3f:f8:25:52:2e:e2:45:73:d7:72:
a2:c1:40:82:11:42:e7:10:0d:3a:97:e2:b3:c2:f7:
c3:5a:1d:da:52:65:c0:ec:16:1b:d4:5b:f0:c2:02:
fc:33:db:68:cf:aa:ce:5c:7a:de:77:f7:ef:f7:5e:
78:65:0f:6a:3c:55:be:63:11:4e:c9:8b:b7:ad:e2:
3a:b1:c1:1f:cc:11:a1:92:42:73:4e:f0:13:78:bf:
5f:e3:9a:ef:48:c6:02:8a:3d:c4:4a:59:91:9a:43:
c5:65:cb:02:ee:92:41:99:b6:f3:b8:e5:00:30:6c:
67:e4:c8:4a:f1:be:91:ac:98:b7:2b:a7:38:f9:70:
26:1e:78:06:d3:5f:2c:a4:e7:25:26:fe:70:41:b0:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1C:90:15:A6:F0:EC:63:78:03:0C:B5:B2:91:80:81:90:D4:B3:8F
X509v3 Authority Key Identifier:
keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7a:07:41:65:fe:d5:b5:e4:51:3f:2e:5a:2f:82:b1:1e:f6:
3b:33:77:ba:e6:db:5a:a2:a0:59:61:0f:1f:47:eb:c8:7d:42:
74:46:9c:86:a4:29:89:66:f6:56:66:0b:39:98:1b:94:d6:32:
cc:1f:61:c4:43:28:65:6c:1e:d9:d6:67:1e:72:bd:47:d3:36:
f7:fc:e7:5c:18:c2:49:bb:0d:2d:59:be:70:08:ca:56:9e:9e:
62:a5:1d:6f:09:85:68:a8:bc:0f:0c:81:e4:08:76:20:c4:de:
14:ba:a4:f3:46:a0:a1:8a:ff:67:11:f2:48:56:cd:b9:51:1b:
89:d7:f0:25:80:a1:1d:93:4b:51:2c:4b:1c:9d:80:25:6f:7a:
af:a5:39:b0:5b:88:48:12:ec:aa:b8:21:4f:47:11:74:9c:bb:
18:a8:ab:c8:19:d8:2d:fc:9d:d9:c4:ee:21:e3:d1:ee:ee:3d:
40:c8:41:42:b4:4c:c7:65:d9:88:d4:fd:c4:02:53:62:80:4a:
d0:40:27:75:29:b3:62:35:f2:e2:f0:7f:95:86:2e:75:76:cb:
33:e3:c4:24:b6:74:35:47:02:fe:74:35:62:70:50:42:91:69:
76:1c:20:d7:9a:ae:02:c3:23:f9:fd:b2:56:74:8b:07:25:a4:
0c:6c:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:47:39 2025 by rpki-client