Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File: E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier: aW6F1ZOyBN2CPo6yOzMacfxeF5fpSz6dL2ldfTIz9S0=
Subject key identifier: 31:AE:DD:C4:73:4C:34:6F:B5:84:69:A0:39:AE:73:33:BF:50:F1:52
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 0196BE5C7CC62F7CB3609ED2E38D359F892E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number: 0CC7
Signing time: Sun 11 May 2025 08:00:54 +0000
Manifest this update: Sun 11 May 2025 08:00:54 +0000
Manifest next update: Mon 12 May 2025 08:00:54 +0000
Files and hashes: 1: 4No-RV70VYPprGbilfZK449S1jE.roa (hash: j/34sFvzUODtw4w1wk5hUpgDpA7ufIGqsXuylXp7/Eo=)
2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: E2h/mI7IPNiAGguPET44O4nZxHC6yv+jS6zkRqG73YY=)
3: s2c2SxTi-Q_8OKeRjqXMrgRto9g.roa (hash: hpDU3rXSA01+9nbpttUv0vXTSKJESULWr8No8ki4IqE=)
4: svsHgTKbSt-q2-rESrjX7HwSyco.roa (hash: Ly7V0InrDHQxrljhfQHH31oMyka8Z0vBaIfhff+n6jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:7c:c6:2f:7c:b3:60:9e:d2:e3:8d:35:9f:89:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: May 11 08:00:54 2025 GMT
Not After : May 12 08:00:54 2025 GMT
Subject: CN=31aeddc4734c346fb58469a039ae7333bf50f152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:32:f0:f8:39:cf:85:cd:cf:19:96:17:cb:
0a:b7:f3:6c:ca:88:03:15:0e:46:39:12:43:81:b8:
98:a5:6d:a8:bc:72:ab:8a:49:4f:0e:61:db:3e:68:
cc:d3:ac:26:e0:c0:96:91:b6:ff:5e:02:44:34:19:
cc:5a:c0:d5:7a:fa:ed:f4:bc:ae:5a:27:a6:9e:33:
69:1e:49:c6:e1:90:05:95:44:01:e2:cf:95:11:3f:
62:3c:f9:57:16:76:d4:2a:81:53:66:b1:40:b2:ac:
76:81:c9:47:82:3f:e2:9d:93:90:03:42:6c:33:c7:
af:75:c4:a9:02:10:67:66:48:98:0b:1d:82:29:cd:
93:02:b6:ba:04:3e:ff:24:bc:b4:77:10:7f:16:21:
fb:7d:3b:55:05:27:e7:61:a9:e0:61:1a:3e:d0:17:
d5:aa:35:d5:2f:d5:2c:68:74:d0:5e:19:e4:3d:48:
65:2c:da:1f:c1:ce:82:12:ef:13:79:e1:96:01:e8:
ab:14:75:02:db:62:e0:3c:c2:a5:09:fe:7a:ba:cf:
fe:b6:07:58:34:38:d7:2c:ee:14:60:9e:e5:3d:54:
cf:b8:c5:e0:07:1f:11:2a:1a:fc:f0:84:25:1e:f3:
dd:11:b9:b7:b4:ff:66:46:9b:ff:df:61:fc:7f:6c:
39:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AE:DD:C4:73:4C:34:6F:B5:84:69:A0:39:AE:73:33:BF:50:F1:52
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c5:7b:33:59:61:e5:1c:91:65:2e:1c:87:d6:c9:2a:b5:5c:
fe:fc:10:d1:2c:43:dd:23:f1:cf:a9:2e:ef:c1:dd:4f:5a:90:
41:e3:6c:45:f4:b8:7b:22:c8:96:73:14:c5:9a:83:7d:39:26:
cd:c2:aa:cb:5a:e3:43:e7:91:8e:fc:5d:3a:10:de:94:44:2a:
ec:3e:3f:1e:71:7d:03:b0:fc:2d:a8:2f:07:c6:93:6b:b9:e0:
4f:50:af:9b:c5:0f:dd:28:52:03:05:c1:90:c4:98:30:d1:ba:
aa:83:f0:24:39:9c:b1:63:c9:9f:01:2f:7f:8a:92:12:66:b9:
36:1b:65:ea:13:a0:ef:d8:c4:6d:f1:01:f3:3d:fb:8e:96:58:
ab:b3:0c:04:61:37:39:fb:52:78:b7:8b:e8:e3:49:f9:e1:c0:
50:ca:1f:5e:e5:1c:74:d1:7f:54:ad:23:1c:48:3f:89:f7:04:
94:f8:bb:a3:7d:31:8a:2d:7d:1f:b1:a8:4c:b4:90:df:b0:6f:
8b:58:2c:b0:9d:1e:49:7b:6c:34:e5:01:7c:bf:81:a9:f9:e4:
52:ba:2e:31:69:52:26:ce:fd:59:6e:27:c9:2b:87:76:ca:85:
f2:a7:7f:56:88:d7:21:b6:c7:73:b7:70:30:8e:7b:1b:a0:78:
16:dd:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:19:39 2025 by rpki-client