Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
File: I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json)
Hash identifier: 0QFgYOn7dairTroIyLKhsQceq2S8vZgGKLou2Ix3XQ8=
Subject key identifier: 70:E7:4C:56:AA:AF:80:29:A5:6D:9A:20:53:EA:C3:1C:BD:BF:DE:05
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 01969D87AA345C92338E154923E0D347BD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
Manifest number: 1529
Signing time: Sun 04 May 2025 23:00:35 +0000
Manifest this update: Sun 04 May 2025 23:00:35 +0000
Manifest next update: Mon 05 May 2025 23:00:35 +0000
Files and hashes: 1: 7OwvAno2l244O2H5lKoBs2hR5TM.roa (hash: e9tNLBCWuvvFCB2/sKRegknsmXrZcwUi3KAU/8XQUJc=)
2: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: qh4MuERAsQvc8C+iuyPQs3qfC/MguWYQzPyepRD32N4=)
3: k-udsIECVPoVZ4hVJjV1FMS17aY.roa (hash: 76+LdtT2pK7jJlV8hOCIZByBXKgKYoLXUsN/z5PhjRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:aa:34:5c:92:33:8e:15:49:23:e0:d3:47:bd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: May 4 23:00:35 2025 GMT
Not After : May 5 23:00:35 2025 GMT
Subject: CN=70e74c56aaaf8029a56d9a2053eac31cbdbfde05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:f1:0c:ea:e2:b4:4f:da:bc:7c:7d:5f:c2:
e2:8e:e5:55:36:0b:0d:4e:7e:61:82:60:5a:60:de:
e4:4f:65:76:cb:24:46:0f:0c:60:e7:7b:28:b1:5d:
99:ec:73:97:5d:43:bf:2f:81:51:a5:ce:7e:c0:8b:
cd:c9:14:00:76:00:aa:f6:cc:f1:ce:eb:ab:6f:97:
a0:11:bc:e2:72:1c:e7:40:8e:ad:2f:39:7b:12:79:
3d:da:f1:b0:c9:21:5e:40:b4:cd:8b:96:10:96:53:
f2:be:e9:79:d4:48:d4:c3:78:2c:d1:e7:89:d9:19:
af:2b:a5:7c:ff:b6:fb:b2:fd:e2:da:8a:b8:4d:b5:
c4:ee:28:d0:4f:86:71:77:94:04:63:75:8d:b0:e9:
c8:89:d5:11:43:51:4d:00:a9:62:85:19:2f:5a:73:
66:6b:e1:9d:a4:bf:89:4d:58:29:8b:57:1d:ee:19:
b2:78:36:05:51:d0:19:26:25:42:cb:c5:60:81:3c:
e4:15:39:ae:f0:a5:43:4b:e8:74:9c:11:09:12:2f:
c7:f5:77:4b:06:ba:2e:85:f7:4b:0b:c9:ac:9b:ff:
4b:49:4b:b0:5f:40:0f:41:73:00:66:2b:9d:64:c9:
8b:91:60:e8:cb:f5:92:b4:11:bd:ea:6f:cc:b1:e8:
0b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E7:4C:56:AA:AF:80:29:A5:6D:9A:20:53:EA:C3:1C:BD:BF:DE:05
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1b:db:98:e5:5e:b6:d0:61:75:13:4b:59:b7:2a:93:de:15:
b4:fe:a6:05:4a:31:7b:be:c0:bb:fa:d4:48:21:c5:7c:ee:1f:
55:27:8e:24:0f:10:f9:27:5b:2b:9b:0c:3e:84:55:66:45:61:
2d:d0:91:73:83:7e:a9:ee:87:9b:fb:64:73:d8:e4:80:46:1b:
c5:e6:f3:cd:a2:8d:61:02:4e:d6:23:82:7b:cd:f4:b5:7a:e9:
1d:4c:87:e5:f5:f5:9c:e0:34:d2:9b:68:3a:32:10:45:1a:f4:
36:48:0b:96:b7:41:d9:92:5c:9b:25:07:9f:87:f2:a9:e6:f3:
f3:5e:57:d0:6b:1a:1e:a5:32:73:af:72:3e:9f:08:ab:cf:b4:
c3:a6:74:df:3a:6a:92:db:05:a1:2e:65:a3:70:c5:25:a9:66:
f3:1c:52:a6:c5:b0:40:5f:ce:79:a1:08:4d:60:de:83:04:20:
e3:5c:ba:b0:a7:e1:04:f0:79:1b:5c:dd:43:21:e2:a0:e8:60:
ad:50:88:60:50:9d:38:64:a5:64:f2:bc:a3:40:9e:1c:d8:fa:
fa:26:d7:bf:6c:42:ff:9a:0f:cb:58:25:07:16:a2:34:c7:9c:
8b:28:54:20:c9:67:28:b3:2c:82:03:03:33:d5:32:e8:b9:87:
1b:64:fe:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:57:06 2025 by rpki-client