Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File: 13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier: Dtg1vRYQOdNROeQsOPoRcjPUjQHF/Qnaay92st3Qz4c=
Subject key identifier: E3:8E:A9:D1:95:A5:0B:B5:30:86:5C:21:B6:05:CD:54:C4:6B:A9:4C
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial: 0196E00CB18BAB0025B15BCD5A6C5FBB6544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number: 0267
Signing time: Sat 17 May 2025 21:00:50 +0000
Manifest this update: Sat 17 May 2025 21:00:50 +0000
Manifest next update: Sun 18 May 2025 21:00:50 +0000
Files and hashes: 1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: y+Hot0HLkQ+WWQeTonMl+X3Zmk5/Mkh3HRHR0OEQLMY=)
2: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (hash: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e0:0c:b1:8b:ab:00:25:b1:5b:cd:5a:6c:5f:bb:65:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Validity
Not Before: May 17 21:00:50 2025 GMT
Not After : May 18 21:00:50 2025 GMT
Subject: CN=e38ea9d195a50bb530865c21b605cd54c46ba94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:84:c8:f5:68:d3:78:d5:ba:6f:1f:bf:3e:
82:c7:0f:61:80:81:b0:e6:7f:dd:b0:0f:8c:a0:58:
06:b4:eb:3d:bc:3c:17:4e:54:8e:d5:bb:49:6e:bf:
11:94:d6:cf:0c:e4:7c:2e:5a:15:c6:d2:87:97:9d:
0e:c4:fc:59:0e:d0:7a:52:3b:a0:37:4a:c1:20:1b:
08:1f:27:40:83:70:ed:76:6f:80:62:fe:b2:fd:4b:
41:02:fe:e8:ab:de:e5:f0:33:fc:e1:ba:27:43:8b:
cc:13:3c:30:93:ea:8f:01:27:39:4b:85:8e:04:b9:
00:ec:fa:fa:22:fb:96:4d:46:23:e4:34:3a:5b:72:
71:b5:3b:7b:11:0a:1d:69:28:11:cd:dc:25:49:72:
a0:1b:b4:75:e0:ee:99:d2:9c:a1:64:46:d5:37:3b:
7c:29:cb:2c:5e:6e:06:c8:8a:de:ee:0a:ad:fa:fb:
f6:9b:e6:22:03:5d:c9:0d:51:39:56:0b:dc:d1:46:
a7:03:01:40:cd:39:6d:9e:92:8b:3e:3d:8c:be:9a:
fe:76:72:9c:bd:be:42:9e:b4:1d:c8:d3:26:89:3b:
2f:b6:9c:96:a8:26:26:b4:bc:1e:42:bf:e5:07:0f:
34:5c:e6:8e:5d:b1:db:16:9c:50:2f:fc:f7:32:19:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:A9:D1:95:A5:0B:B5:30:86:5C:21:B6:05:CD:54:C4:6B:A9:4C
X509v3 Authority Key Identifier:
keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:78:0f:8b:c4:96:2e:1b:56:00:f8:ac:be:bc:a6:b1:39:4e:
c4:c7:fe:ba:ae:ef:6e:ec:26:04:a4:cc:c2:a6:dd:05:0b:30:
d7:60:8c:c4:b4:18:e4:32:67:84:ee:07:d6:f1:ab:1f:cd:5a:
e4:4f:e5:f6:26:f4:90:ff:20:3e:ca:6c:5d:25:4c:ae:a1:59:
8f:9f:fd:82:d7:f2:e8:a2:d6:f0:6d:79:a1:01:11:85:e7:df:
12:c6:96:54:2e:99:9a:5e:85:ba:c9:99:80:96:ac:45:25:02:
8e:c2:75:5c:e9:fa:c1:5f:55:15:63:60:21:ab:79:ec:a7:28:
fd:54:7d:ab:93:25:52:b8:34:51:f8:a6:57:ac:a7:16:df:c0:
bf:a3:2a:a2:8e:f5:3b:3b:1a:b7:ee:75:58:8d:d9:1b:67:2a:
8b:76:28:05:5e:12:42:a5:7c:57:be:46:56:90:49:5a:65:68:
99:03:94:69:a6:1e:64:c9:cb:49:96:10:ae:85:f9:f8:b7:35:
c4:33:1a:e1:55:f7:2d:9b:c4:f0:2d:fd:cb:90:2c:56:33:42:
d5:e8:fb:53:f8:3f:0c:54:c3:b7:e8:ff:fd:f4:44:02:60:80:
5e:30:30:48:45:23:39:3c:ee:53:1b:41:2d:f2:07:f6:dc:f4:
9b:b1:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:48:40 2025 by rpki-client