Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File: E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier: NaJi4DWhyrMDUehJWgJ58um7xxOADPl4ko4cM7Iv4vE=
Subject key identifier: 1D:F1:AD:73:26:17:67:2A:5D:25:4C:35:13:2A:68:B9:56:93:7F:15
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer: /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial: 0196A35294441ABF8A93018C1FAB3BEBF194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number: 0BAA
Signing time: Tue 06 May 2025 02:00:19 +0000
Manifest this update: Tue 06 May 2025 02:00:19 +0000
Manifest next update: Wed 07 May 2025 02:00:19 +0000
Files and hashes: 1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: mo+uQ2LufDNqE6KgSk3Gx0GMnzBywumZ3n0vB/RY+3k=)
2: HN5Ai7UYMPmItHMFu1UIru4_irQ.roa (hash: uhP51xaan/wVcnPelAPmsRFjLXlTf1vXwd1upBi15zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:52:94:44:1a:bf:8a:93:01:8c:1f:ab:3b:eb:f1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
Validity
Not Before: May 6 02:00:19 2025 GMT
Not After : May 7 02:00:19 2025 GMT
Subject: CN=1df1ad732617672a5d254c35132a68b956937f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:b6:65:a4:f6:16:91:6b:2b:4b:6f:eb:ea:
29:68:6c:75:bd:33:3a:c1:ff:45:0e:d0:4b:1c:3b:
46:2f:5c:0c:46:10:51:15:5c:3a:7c:a4:0c:8a:00:
5f:d3:6e:d0:29:49:b1:6a:4c:11:7e:4a:53:44:1f:
b1:ae:fc:2f:27:ee:59:54:c0:a7:12:38:92:0d:4a:
7b:0c:20:fd:4e:36:10:9d:cd:b4:7e:b6:de:72:e5:
58:e3:2c:0c:33:26:5e:c3:db:42:f1:7e:9d:f6:9e:
b8:1c:7e:57:cc:0b:95:27:15:00:1d:af:29:2e:d2:
16:85:da:27:ca:c1:0e:87:ca:76:66:b0:ca:2c:31:
44:36:13:df:45:29:f3:b6:a5:7f:d9:24:7c:6b:99:
55:35:21:ac:0e:5e:95:60:c4:67:72:c5:31:43:92:
f1:2b:7b:af:90:86:44:f8:51:d9:90:ce:3e:bf:62:
ee:81:e3:ee:78:92:3f:33:37:48:03:4f:43:e7:2f:
67:a0:0c:64:73:cb:f6:0e:79:70:ae:87:16:49:f8:
cd:7b:7c:f7:39:b2:eb:39:df:ab:3d:26:f6:db:01:
f6:61:b5:ff:42:ac:41:1f:ef:d1:6d:cb:0e:47:e7:
35:2d:45:64:b9:9b:f6:55:66:fc:bb:8d:70:6e:d2:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F1:AD:73:26:17:67:2A:5D:25:4C:35:13:2A:68:B9:56:93:7F:15
X509v3 Authority Key Identifier:
keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a6:9f:3d:61:1a:a5:94:a0:d0:1b:0d:2d:b2:32:40:2e:72:
ce:a7:11:b8:03:6e:6b:84:56:c2:2f:b9:e9:ab:b0:50:43:41:
81:50:94:22:9d:d3:bf:2d:b5:b4:4b:64:5b:b7:d8:14:09:7e:
92:2f:7e:6f:90:e4:d9:ab:eb:0d:75:82:e0:b1:14:54:51:b4:
df:20:04:94:fa:3e:a8:08:f1:6e:5c:72:38:69:b3:0c:91:62:
db:59:4b:51:03:7b:91:47:06:f5:7e:90:31:75:08:8a:c0:63:
7a:11:9a:31:61:19:ea:5e:f5:62:80:fb:30:c4:43:24:4c:7b:
59:78:5a:c5:34:81:2b:35:ab:a6:7a:c6:85:8d:cb:2d:75:e1:
08:69:21:f6:22:59:cb:c5:83:67:7b:7e:4b:bb:ad:db:c6:81:
b4:b5:d0:45:7c:80:95:09:73:04:e9:e0:bb:7c:d8:7d:4b:ef:
97:a5:d0:70:cf:5c:74:a8:31:46:b9:46:7f:c6:89:d2:53:fe:
4a:87:cb:61:9a:bb:fd:50:12:4d:c3:81:33:16:26:6a:5b:51:
5d:1f:db:e8:fc:03:32:6d:16:85:75:30:51:47:4b:13:55:09:
7b:9d:83:4c:d2:54:77:cb:e1:c6:6a:3c:06:5b:27:2a:db:6c:
10:93:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:16:22 2025 by rpki-client