Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
File: E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json)
Hash identifier: C9VeE0zWZF0HAHDGOT6WZqhCCxIdYJMAJj5Wj+GPvck=
Subject key identifier: AE:90:F2:80:23:1A:4E:39:25:A9:83:2F:86:A9:A3:1B:FE:FF:02:AB
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial: 0196C194156D0FF8613E72CDD78E215C0E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
Manifest number: 14C7
Signing time: Sun 11 May 2025 23:00:29 +0000
Manifest this update: Sun 11 May 2025 23:00:29 +0000
Manifest next update: Mon 12 May 2025 23:00:29 +0000
Files and hashes: 1: 9htWy01pg2D2zYDPH366mUte-18.roa (hash: EzJGaZ3hn2rEMiPwCBKqVw/ZKa/ezLWPSIlGniopSlk=)
2: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: bFLmNoYJOa9I2pzeO8wV3QiFXzF6TND5RWfF7yorJ/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:15:6d:0f:f8:61:3e:72:cd:d7:8e:21:5c:0e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Validity
Not Before: May 11 23:00:29 2025 GMT
Not After : May 12 23:00:29 2025 GMT
Subject: CN=ae90f280231a4e3925a9832f86a9a31bfeff02ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:93:68:26:ba:a2:92:15:7f:24:cc:ef:1f:
9f:73:d7:e8:ce:43:72:16:d1:4b:90:fb:89:5f:0e:
5a:8a:00:3c:c1:95:88:1f:31:0c:63:63:54:95:60:
54:a7:b8:1a:58:cd:fe:1d:d7:9a:28:60:30:4f:7e:
c4:24:ea:84:2f:77:64:ca:16:b8:00:ba:2c:b4:d3:
78:13:c5:d9:29:18:73:29:1c:0d:ad:b7:9e:43:aa:
b0:02:9e:90:6b:91:87:ce:52:93:a5:2f:1d:2f:1f:
d8:79:c0:b6:84:d0:f9:a3:f3:0f:02:20:7a:20:fb:
4d:48:c5:5c:18:9c:8f:11:23:40:e8:81:75:56:98:
06:3b:0c:08:de:04:ec:41:f3:b8:13:1e:d8:a6:d6:
c4:65:ab:87:ab:68:3e:51:86:bc:ee:c7:2f:69:9c:
ea:b2:00:5c:be:de:36:40:b4:c7:64:04:a0:72:6b:
d1:02:b1:cf:d9:b9:e6:c6:40:77:90:9a:08:df:a6:
31:8f:53:ca:7b:68:b6:61:80:65:93:c6:b7:f5:d5:
61:11:02:bb:bb:90:38:0c:b1:a0:4a:6d:6c:d6:8f:
21:49:7d:17:39:32:93:f4:f1:e5:e3:be:c4:a0:83:
fc:20:50:23:a0:e2:66:64:f2:a1:ab:64:98:c6:77:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:90:F2:80:23:1A:4E:39:25:A9:83:2F:86:A9:A3:1B:FE:FF:02:AB
X509v3 Authority Key Identifier:
keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1a:8f:30:11:7b:7b:60:05:10:b3:80:f7:d7:14:bd:76:0b:
95:ec:01:f5:9c:55:e7:d6:42:4d:ee:f3:2f:0c:4e:d0:fa:97:
b7:41:ea:4f:00:28:d2:5e:c1:07:3d:0e:05:f0:fe:cb:cf:b3:
08:16:83:d3:a7:fb:74:01:76:ed:eb:1d:05:2c:cb:8a:e9:ef:
bc:f1:60:45:c7:86:12:45:97:f0:1f:c2:fc:22:63:80:d0:be:
c6:8f:86:ca:b1:2f:fe:4a:d9:01:c0:c8:e9:e9:e6:24:09:a1:
98:3a:56:e6:1a:4c:b3:af:d2:36:65:b1:9c:1d:b0:fc:c3:57:
9c:19:a9:47:30:31:a2:96:17:73:0d:e6:c0:49:86:dc:da:f6:
23:d2:6c:93:c1:9e:a3:36:19:d3:43:04:24:78:8e:41:24:f9:
61:6b:ee:34:37:2e:7f:b3:b0:3a:da:df:9e:4c:e7:9c:e3:b7:
c8:be:08:dd:f8:78:08:04:77:39:6b:e7:ab:ca:ce:df:4e:0e:
2a:6e:f3:d8:e0:8d:bb:ae:3b:58:d4:2a:63:4e:e4:38:4f:c0:
0a:78:81:94:98:2b:be:11:75:d7:95:74:3a:f8:27:4b:52:b7:
29:e3:44:11:fe:12:fc:cc:48:32:45:df:71:f7:15:3f:5c:5d:
dd:2b:b7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:30:20 2025 by rpki-client