Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json)
Hash identifier: +U1SINDyNkp8NLySKoq/oPFpF3Z5TUsnpYnvfTr3lf8=
Subject key identifier: 42:6B:93:DC:79:52:32:81:49:12:C5:C0:B4:80:94:1B:4D:95:61:9C
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial: 0196CE3CD517643B0DB6AED356CDB9742E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
Manifest number: 153C
Signing time: Wed 14 May 2025 10:00:15 +0000
Manifest this update: Wed 14 May 2025 10:00:15 +0000
Manifest next update: Thu 15 May 2025 10:00:15 +0000
Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: MV4vQ1Ku4TZb7T+LhJrQOO7UodWSRXrkHC9mi7C78BE=)
2: K7Dh8rSSQ0ZuRcpwx-Nw9hu6d6Q.roa (hash: MJLuNSDvw5gsLLjMvCyGbPkYHoPaPI+8SDMojGjNJzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:3c:d5:17:64:3b:0d:b6:ae:d3:56:cd:b9:74:2e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Validity
Not Before: May 14 10:00:15 2025 GMT
Not After : May 15 10:00:15 2025 GMT
Subject: CN=426b93dc795232814912c5c0b480941b4d95619c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:4f:f8:79:bd:79:77:6d:23:2d:4c:e7:76:
fc:94:2b:d4:a3:95:d9:9a:cd:49:8e:86:f7:79:8b:
49:bf:f1:7c:b5:39:77:ad:40:17:d8:9a:fe:27:5a:
3d:fd:a0:d2:d1:40:ce:00:72:b1:6b:81:52:dc:96:
e3:51:4c:f8:c5:ba:44:1b:a5:79:36:48:1d:bb:97:
99:d8:91:bc:48:22:c1:7a:5c:74:3c:cb:da:25:b4:
a0:ce:f0:30:8a:58:57:13:e1:17:83:2e:a5:05:37:
ae:3f:91:b0:8d:0a:b9:85:a5:27:e2:6d:e9:db:bc:
88:a6:6c:c6:d2:b2:56:10:42:9d:62:fd:f7:48:05:
d6:d2:9a:a7:66:29:38:3b:db:82:26:1f:63:7f:b6:
53:6a:76:2c:9a:42:70:94:60:2a:43:8d:32:7d:d1:
35:09:52:d9:df:41:b5:01:68:c6:03:3d:d3:69:d8:
0e:4a:61:bd:83:64:63:e3:38:ac:f1:7d:86:7f:6a:
23:96:01:b6:d8:55:fe:ba:c8:ce:e1:f2:8f:fc:c2:
56:69:93:84:a4:6a:31:95:7d:4c:c9:5e:52:c2:ca:
a8:5d:31:7d:9b:06:28:17:a5:26:b3:0e:76:38:f0:
a0:b4:52:27:41:37:61:61:13:75:9e:50:3e:4f:39:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6B:93:DC:79:52:32:81:49:12:C5:C0:B4:80:94:1B:4D:95:61:9C
X509v3 Authority Key Identifier:
keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:80:46:c7:c9:b8:f1:38:25:5e:21:1c:84:e5:45:21:c4:07:
28:39:90:5e:a7:b3:b3:5c:71:33:06:79:fc:53:60:01:37:72:
c9:0f:e2:15:52:48:7e:76:5a:f5:12:85:ad:e0:9e:a3:4d:82:
15:e6:28:30:52:f1:c8:98:bb:90:2a:82:29:7f:46:f3:ad:4d:
3d:f5:ef:93:db:cc:7e:aa:aa:4c:a5:82:49:a8:21:88:bf:99:
5b:c1:b9:8b:b0:50:e7:72:00:cc:b4:c7:13:88:51:70:5c:25:
f5:7d:60:6f:ba:31:02:1a:f5:3a:6b:b8:47:90:26:2a:22:03:
a7:46:e6:49:50:2a:b3:1b:fb:52:b2:bb:bc:54:1d:75:61:a6:
a3:01:d1:5f:99:79:60:eb:a3:73:42:34:8f:0b:ec:fa:b1:67:
b2:5e:c2:e4:16:c1:0f:8d:2a:a6:a6:4f:7b:8b:37:30:09:61:
3f:7b:08:eb:7f:0d:62:c2:53:cc:d9:f0:3d:8f:8d:cd:6a:f3:
ce:24:04:c7:99:b2:f1:dc:e2:09:4c:69:96:53:d1:1b:98:b0:
1e:1b:fc:79:98:96:59:a1:75:2a:d7:42:7e:de:7c:b3:07:b0:
23:56:cc:90:aa:08:76:af:9d:df:3e:e0:aa:48:55:84:22:42:
5e:d7:1b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:38:12 2025 by rpki-client