Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File: E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier: REE5/7PJGBVR7vCFO8FMkXvid5r7NpjNKZRrfge6YEQ=
Subject key identifier: CF:2C:7F:65:01:B3:92:01:4F:24:4B:40:F2:D3:DF:06:AD:67:F7:C8
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 01969F0832A71283E052635A5130F96B794D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 06:00:36 +0000
Manifest this update: Mon 05 May 2025 06:00:36 +0000
Manifest next update: Tue 06 May 2025 06:00:36 +0000
Files and hashes: 1: 0rZo7T7QJSfK-cCHectv5r7maVc.roa (hash: ydGK6Xk1/nHzsPWXGP+mEEVT+bo9klxNhdh+HOQt8DI=)
2: 99X--GN0tUdbB7wXVNOGQxyvW00.roa (hash: DzsMRo6WJ9FJ0Pcv5LVEusYADeP8vZFSYsS2DB6NSss=)
3: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: oMa6gKJrOY29SOW5PcUMUVsaHhhrfHPtyJgMk6JaiXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:32:a7:12:83:e0:52:63:5a:51:30:f9:6b:79:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: May 5 06:00:36 2025 GMT
Not After : May 6 06:00:36 2025 GMT
Subject: CN=cf2c7f6501b392014f244b40f2d3df06ad67f7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:78:13:0b:5e:db:58:1e:7f:50:0d:c9:a7:ca:
65:29:ec:84:5d:d5:33:7f:70:e0:18:2f:1c:45:cd:
6a:0d:9f:93:6c:ad:d3:5f:79:88:9d:c7:53:88:72:
d8:a3:82:91:a5:fb:11:20:24:6b:b3:6b:9e:dd:e1:
63:f7:30:2f:1f:9b:ed:97:c0:45:a6:10:9b:ec:ef:
45:12:54:76:53:ee:ab:38:4e:8a:28:3f:94:7c:54:
ff:29:e5:cb:9d:d8:1d:0b:03:43:f4:3f:69:15:8b:
5d:1d:11:51:ec:00:dd:04:78:31:5c:68:02:d4:aa:
2a:da:8b:9c:84:5e:4f:6a:4e:ed:75:0f:25:03:c9:
bf:ea:fc:f3:2e:62:2b:7f:56:05:df:47:95:f5:ed:
f0:c9:1b:5b:e6:eb:e8:8e:ce:80:81:d0:1d:3e:81:
02:8d:77:a0:5d:6f:0d:55:56:a1:64:dd:e2:47:f3:
0b:5b:2d:4e:8c:6a:6c:98:b5:49:8b:b8:26:bb:c8:
99:ca:06:d8:a3:d2:53:f1:e3:86:68:a2:a7:41:17:
8e:4c:b1:98:40:d5:6e:ac:1a:13:c1:aa:e4:6c:de:
eb:ec:91:97:5a:e7:20:14:54:8d:6b:24:d6:21:f0:
a2:43:e6:da:4a:e6:c3:c2:81:2c:61:53:3e:93:4d:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:7F:65:01:B3:92:01:4F:24:4B:40:F2:D3:DF:06:AD:67:F7:C8
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:07:fa:d8:f7:92:8d:4e:f0:5b:1b:e0:1c:5f:43:09:a5:89:
3d:57:d5:5b:1b:84:6c:a1:e6:63:98:6d:2d:51:d6:dc:8a:a9:
19:a8:6c:9d:3f:2e:26:db:f3:a8:c1:9e:a5:dc:98:07:ac:55:
e5:ab:69:3b:e2:1a:ba:46:79:27:b2:92:cb:98:91:9d:2d:cf:
b6:8e:ec:96:74:0a:bf:76:70:39:88:88:ed:68:bb:8d:96:ef:
70:ce:78:42:78:30:1d:f3:5c:f6:81:58:e7:b8:48:27:ce:01:
27:6e:ea:bc:78:3f:e7:e4:fb:49:be:39:df:66:d6:db:b4:d3:
ac:ea:fc:4d:c6:a8:fc:24:40:e4:02:1b:7d:1d:b1:ae:81:b7:
4d:b5:fc:56:ae:59:b4:c3:7a:7f:53:b7:0f:e3:10:73:ad:1b:
96:99:7d:3f:2e:1b:f8:26:0c:65:bc:d3:7b:45:e2:ce:00:38:
5c:ea:c3:d2:ae:3e:82:fa:01:f4:4b:aa:c4:18:c3:84:4d:3c:
37:d6:ae:a2:21:d5:c6:cf:0b:0d:74:b4:09:6f:3d:37:8d:b2:
d9:da:72:6d:38:92:e0:7b:a5:9a:99:36:f4:28:b5:e8:79:67:
be:a6:80:38:8e:53:2d:33:08:b7:3f:86:cc:e9:69:e5:28:2d:
09:98:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:55:51 2025 by rpki-client