Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
File: e1dU5NIIxkNfGr7JN83iAAkgTcA.mft (raw, json)
Hash identifier: I5/N+KpFlNIAtlMOmR9kBfKPqVvXwIVTjZsWo2uZs1Q=
Subject key identifier: C4:06:51:1A:C1:B4:41:CE:F6:40:54:84:3C:32:CC:F2:BB:BB:2C:C7
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 0196C6835B79F3F36144AD77A8E774F95B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
Manifest number: 0995
Signing time: Mon 12 May 2025 22:00:19 +0000
Manifest this update: Mon 12 May 2025 22:00:19 +0000
Manifest next update: Tue 13 May 2025 22:00:19 +0000
Files and hashes: 1: 67OzM8ECZbyoq_BnZX1dgSdsSqE.roa (hash: g9PYZvAqU4JsF+aihO2ckiHQRSBgUe4u8ImvTFXc4Uo=)
2: EsKSgJ8EQmtQ4eatv1jfClm65kw.roa (hash: KfQqwkTsCtwKGnXEQFbFhy/ovkmWCSEcDlc1yTA8r8k=)
3: e1dU5NIIxkNfGr7JN83iAAkgTcA.crl (hash: f8tqzToYBf6Xps5phbQOs8M6IOMKy9Nnc2grrVgJhlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:5b:79:f3:f3:61:44:ad:77:a8:e7:74:f9:5b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: May 12 22:00:19 2025 GMT
Not After : May 13 22:00:19 2025 GMT
Subject: CN=c406511ac1b441cef64054843c32ccf2bbbb2cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:36:1f:fa:f4:c6:e2:c2:8c:fe:51:91:ee:
cb:c0:96:ee:57:1e:22:e7:30:79:c6:8d:2f:33:04:
08:e6:93:fd:48:17:43:7f:36:2b:42:b4:19:e0:10:
f3:d0:e6:4d:32:50:a8:25:53:0f:0f:36:78:1d:7b:
c5:ad:45:22:ca:35:47:13:c7:76:3b:20:d5:62:1c:
e2:b9:68:bb:88:19:86:2a:24:56:89:91:ec:1e:51:
57:23:d8:fa:e6:5a:f5:83:5c:ae:ab:7a:f3:24:2a:
77:62:bd:43:4b:97:1b:35:ac:f5:30:af:3f:6d:c6:
60:46:15:8e:b7:49:b2:35:b7:74:70:65:e5:cb:61:
66:7f:3c:a4:7d:77:a9:07:44:c7:b9:13:9c:9e:27:
3c:3c:78:55:c3:bf:28:cf:70:c7:03:52:df:91:d2:
47:d4:a2:4d:1d:a3:a9:d7:37:38:f4:bf:34:51:34:
0f:60:96:03:52:44:f4:16:f6:43:d4:21:39:86:a5:
01:15:9b:95:64:a4:fe:bb:17:72:19:72:74:bd:53:
b6:37:f1:0d:f9:28:f2:9f:b9:81:55:66:73:8f:09:
01:3c:de:c8:53:a7:ce:d9:d9:b1:79:a7:17:d8:71:
3e:e6:3a:e9:87:9b:30:3b:27:31:ff:66:97:50:e6:
85:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:06:51:1A:C1:B4:41:CE:F6:40:54:84:3C:32:CC:F2:BB:BB:2C:C7
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fc:08:e9:ef:5f:6e:4d:71:54:e6:93:3b:0c:d2:f8:bc:13:
6b:00:ad:37:cb:42:43:6f:78:86:8e:1e:3e:18:ac:9e:56:3a:
9d:4c:6c:1c:c8:f5:98:26:81:88:d1:aa:0e:a5:f7:66:32:fd:
ee:55:1e:57:85:dd:d2:f6:7c:df:ed:ee:b8:0e:20:d5:43:b6:
ec:d0:13:56:a6:17:4a:e7:8a:65:6d:3b:a9:c3:36:2d:a3:1e:
1c:11:3d:bc:c8:91:7c:8d:2c:61:20:fe:de:6a:be:8b:6d:9e:
97:63:c6:29:3f:31:56:ee:64:2b:11:95:5a:11:62:c0:2d:c9:
fd:dd:78:75:79:94:fa:94:79:b7:35:0b:70:62:d7:e7:07:f8:
25:33:0f:33:73:57:d2:ee:9c:28:61:63:be:f4:e5:8b:70:f6:
d5:75:87:73:db:ce:8d:5e:d9:56:69:81:ef:d8:fd:59:f6:60:
f0:57:78:a0:ba:7b:b5:f9:9c:f4:ba:4a:f6:79:a8:78:01:20:
43:89:a4:a0:98:e2:5e:26:17:60:36:7d:8f:cb:c7:f5:2e:29:
e2:12:3a:b2:ed:40:b8:d0:b0:9b:9a:a5:60:1b:2c:13:71:db:
2b:46:a8:73:a6:6a:d9:9c:d6:69:d1:c2:89:8d:ab:f4:71:c6:
aa:ff:bc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:58:17 2025 by rpki-client