Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File: E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier: 44m6WycGkGUm898NM6Wx35Y+/mR2NBAeCZgK7ZlmaZU=
Subject key identifier: CA:69:13:4B:B0:32:D0:E5:39:D7:65:C9:59:F5:28:9D:6B:06:FA:2D
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 0196B85A06CC700B79A9F9AE9FDF27CD73AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number: 126F
Signing time: Sat 10 May 2025 04:00:29 +0000
Manifest this update: Sat 10 May 2025 04:00:29 +0000
Manifest next update: Sun 11 May 2025 04:00:29 +0000
Files and hashes: 1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: 2qa4KuHn7OZgn8y9yrUehlWorIEn1Dhc2uUe1g+4wD4=)
2: zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa (hash: ojS7UDvnpbti0L0m+Z7X9vfIKPOWqVpCsWT632+KxOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:06:cc:70:0b:79:a9:f9:ae:9f:df:27:cd:73:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: May 10 04:00:29 2025 GMT
Not After : May 11 04:00:29 2025 GMT
Subject: CN=ca69134bb032d0e539d765c959f5289d6b06fa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:16:96:3c:bc:58:49:52:9c:ea:6c:91:72:
db:de:b0:94:c6:71:23:5b:a6:90:89:d4:12:93:c6:
af:ab:d9:86:7b:5a:e2:2f:7c:97:cf:33:e8:91:7e:
36:16:fd:64:7d:91:8e:5b:74:61:b4:12:b4:e6:62:
a4:27:87:93:ed:65:8e:19:6e:2f:cd:dd:21:21:53:
48:99:0a:b6:3b:3a:09:db:04:3b:2e:e2:35:36:d1:
cc:de:dc:22:1b:81:41:55:5a:e5:b0:b6:51:90:87:
9b:79:22:46:9e:d3:98:1f:2b:53:bc:ac:2a:f5:37:
e3:4b:2d:7d:1d:cd:0d:39:4e:46:0f:f5:a6:37:d8:
f8:45:db:b9:23:b3:36:8b:91:ba:d7:56:e8:37:a9:
27:d2:c0:a5:04:33:c4:db:9e:fb:8c:cb:59:ac:24:
0c:41:9b:df:52:85:3e:2c:1c:5d:45:2e:aa:62:ff:
73:aa:aa:69:7c:b0:e7:33:ac:5f:23:e7:ac:c1:89:
e4:c4:6d:3f:2e:b8:60:fb:19:48:d3:7e:bb:26:7f:
09:a0:7d:3f:8c:52:bc:f1:63:fe:04:37:6c:0c:d2:
07:c0:4d:76:59:80:8b:5d:0a:4c:4b:d6:ff:85:72:
95:77:2a:70:63:62:b5:60:fa:0b:a8:d4:db:21:2a:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:69:13:4B:B0:32:D0:E5:39:D7:65:C9:59:F5:28:9D:6B:06:FA:2D
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:aa:e3:17:81:3e:55:53:85:54:76:a7:53:53:58:7e:91:50:
b7:46:b3:45:95:21:12:c2:63:11:9b:1c:59:33:00:fb:bb:8c:
ae:ea:3b:15:81:f4:4c:9e:60:13:ff:f5:09:6f:9b:c7:01:0e:
26:e7:04:c7:95:59:58:c2:6a:3a:95:b3:14:5d:f9:d3:9f:53:
23:7c:6d:51:3b:be:ee:01:c7:19:3b:f1:a3:e2:5e:50:f1:90:
17:30:20:a0:1c:6c:49:6e:e3:7d:e7:bb:5e:81:0b:6d:17:8d:
08:1e:dd:fa:f7:7a:5f:37:8b:17:27:04:5d:85:dd:e4:a6:82:
54:b3:23:31:cf:1c:eb:03:44:ae:78:f7:a7:5c:59:f4:cc:07:
b1:9d:99:29:3d:14:a7:ff:a1:82:7c:6b:97:aa:6c:da:af:1d:
66:ab:f8:6c:71:5d:45:36:6a:fd:aa:f5:f0:5f:b5:e6:53:1b:
e5:f4:1a:ff:75:ee:23:9a:d2:d4:b6:17:74:cc:63:75:1c:82:
bd:1b:7c:4a:0a:36:24:92:da:12:ca:b4:76:9c:55:e0:3a:7b:
73:6f:13:7c:97:4e:f3:df:1c:35:46:57:c7:44:a8:ab:e7:c4:
81:78:86:06:73:a9:70:59:f4:ad:11:34:b1:05:23:0b:c8:08:
cc:18:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:05:53 2025 by rpki-client