Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
File: E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json)
Hash identifier: HrAPDlDj83tBVQ41Q1jqap8P/jOvcL6+MRSmSmDuOpg=
Subject key identifier: C5:96:47:E6:62:90:23:F3:D8:3C:99:A0:FA:F1:EE:89:10:15:84:01
Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
Certificate issuer: /CN=13701ebe06799de0969899205150e532deffe7b5
Certificate serial: 0196C5DEF2792E6B42A0E4E29E781932219F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
Manifest number: 0161
Signing time: Mon 12 May 2025 19:00:44 +0000
Manifest this update: Mon 12 May 2025 19:00:44 +0000
Manifest next update: Tue 13 May 2025 19:00:44 +0000
Files and hashes: 1: 8gVvFm91f0RDawryW7l9gKrlwps.roa (hash: QofxAMe0K3ECuRtwFP3oD9RJD1otx3XwH2YFtNZT6bY=)
2: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: hTi/UPJ09l4ti3z0WsPzZY67GOaFaKBuEOIC2Rhpn5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:f2:79:2e:6b:42:a0:e4:e2:9e:78:19:32:21:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13701ebe06799de0969899205150e532deffe7b5
Validity
Not Before: May 12 19:00:44 2025 GMT
Not After : May 13 19:00:44 2025 GMT
Subject: CN=c59647e6629023f3d83c99a0faf1ee8910158401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:0a:a8:9d:6f:8f:f7:bb:6c:38:3e:79:5f:
53:12:64:c1:c3:15:39:ad:90:82:87:22:b3:d6:1d:
2c:5d:11:d1:3c:ea:ee:a4:f0:a2:86:fd:34:95:cd:
de:51:6b:fa:62:22:59:04:df:a5:25:76:b7:8c:12:
4d:9f:fd:f3:8d:d9:22:1a:ff:27:ef:2a:1f:28:0c:
5b:2d:ec:12:7e:ff:7f:ca:3b:06:37:aa:f3:af:60:
18:a5:95:3b:97:30:d3:6d:62:c4:d8:93:25:15:56:
85:7a:66:80:66:46:2f:90:39:c7:14:01:b8:00:c6:
9d:05:64:d2:e0:56:0f:a1:ec:4e:d6:a5:d8:9b:4c:
49:18:e0:08:ec:b4:de:06:54:5d:9b:78:21:7e:4a:
5e:7f:b5:85:b0:af:72:37:03:44:76:0b:fa:67:7a:
65:6e:8f:ae:3f:a7:2a:cb:ce:b7:7f:a4:2f:0d:95:
a9:62:de:84:7a:51:b0:78:88:f3:f1:bb:d3:d1:54:
ad:f6:de:48:c4:64:c5:df:6b:36:a2:e3:2b:47:0c:
c4:2b:35:98:66:5d:10:7d:f1:cf:fc:54:35:8e:30:
1b:6d:2a:a2:07:03:42:cd:d8:8e:35:dd:15:bc:3c:
cd:2d:8f:aa:09:e9:7c:33:93:5f:fa:84:c8:09:7a:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:47:E6:62:90:23:F3:D8:3C:99:A0:FA:F1:EE:89:10:15:84:01
X509v3 Authority Key Identifier:
keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a2:c5:85:23:06:5e:be:16:3d:50:d4:7f:c2:85:80:12:a5:
fa:67:24:8c:2a:65:01:d6:f3:6f:cf:f4:b9:d5:d3:a7:16:d3:
f9:cd:25:7e:bb:c3:25:55:4c:c6:e8:e0:b3:63:b5:67:2c:79:
b4:c1:91:f5:8b:22:18:cb:21:0f:2f:c1:ed:28:65:ab:d5:e1:
ce:e0:dc:56:1f:76:e7:36:61:4f:02:aa:65:96:49:ca:5d:13:
8f:83:fd:45:b4:6d:ce:ae:86:21:ab:92:fc:39:16:e9:12:f8:
b5:1f:22:e0:f8:83:0b:b8:d7:38:c6:2f:f5:59:57:5b:f8:94:
fb:03:7c:bd:9c:c2:d9:e3:68:64:0b:f1:f3:e5:79:fc:99:21:
c6:f2:bf:c0:53:87:4c:cd:3f:6e:f6:cb:76:aa:a7:b6:6b:06:
df:71:b4:4c:03:3a:52:6b:b0:4a:91:ee:c8:25:fd:08:dc:f6:
6c:0a:65:43:36:5e:a1:fd:ae:8d:42:eb:53:bd:c5:5f:ec:79:
c7:84:b3:a3:1c:e7:89:0b:3c:5b:97:0a:2c:61:e9:91:17:c1:
75:4e:c7:e3:0e:9d:20:d6:9f:c0:23:5e:9c:be:ac:02:e5:62:
ae:90:6e:07:93:73:09:b2:80:ab:d6:4e:61:5b:2b:62:62:be:
4d:fe:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:04:49 2025 by rpki-client