Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: sRGLc0QfZaPwf1PV117OiGEC/C08czv35bwS3BonGS4=
Subject key identifier: 20:71:6D:F0:51:45:04:50:A9:7A:7F:34:E8:B4:9D:EF:B5:C7:B0:76
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 0196C3145BB0AE057E44EB78BCD4EBC15385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 1012
Signing time: Mon 12 May 2025 06:00:13 +0000
Manifest this update: Mon 12 May 2025 06:00:13 +0000
Manifest next update: Tue 13 May 2025 06:00:13 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: 3qhrxrTRpLPs/x5DA3Uv0YzIcVMdht8J1qCLGNg8W8Q=)
2: nhlklxbuDjVUor5UO5tkTgBHggk.roa (hash: gIRioTZ0taIJVPWEwwqMgECoL06InpQGuJtYcu8J+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:5b:b0:ae:05:7e:44:eb:78:bc:d4:eb:c1:53:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: May 12 06:00:13 2025 GMT
Not After : May 13 06:00:13 2025 GMT
Subject: CN=20716df051450450a97a7f34e8b49defb5c7b076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:a0:a5:72:21:ba:2a:4c:c3:6f:ca:50:b1:
b8:96:56:85:eb:3e:9b:59:d4:c0:d3:4a:94:01:68:
8a:5b:4a:a5:0d:c8:a4:d0:03:68:55:ff:0a:4c:03:
03:1a:f1:11:60:99:fd:21:e2:a5:71:c1:9e:7c:10:
10:9a:46:46:a4:ab:0b:2a:09:a7:f3:a8:d9:94:57:
1a:77:9d:02:4c:d8:29:ba:12:82:27:a9:26:48:d2:
6a:67:a3:92:7c:71:97:6f:bd:6d:04:16:4d:ff:36:
97:b7:23:8e:b7:f9:c2:c8:fd:f3:47:bb:5f:a7:b2:
a0:96:f7:b1:f1:17:2b:74:df:c1:36:73:77:e1:08:
4c:2b:10:ee:93:c6:fc:63:da:32:82:e6:1e:8f:bc:
6a:5a:a7:0e:be:89:d3:ec:c9:a6:db:13:6a:47:50:
bf:1e:e6:c7:92:79:0a:bd:c7:ef:00:66:19:17:af:
08:c8:41:26:40:14:45:c8:c0:d9:51:bd:fd:cc:bd:
57:1e:e0:9a:3e:7d:91:3e:1a:28:58:47:f7:71:ec:
52:c5:db:17:3c:2e:fc:ad:b3:56:e4:3a:3f:1b:7e:
4a:b4:b4:b5:53:3c:7a:8d:ce:f7:77:0c:ce:ac:c2:
d1:e0:53:7b:f6:d1:18:2e:77:57:bd:f2:e6:05:ad:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:6D:F0:51:45:04:50:A9:7A:7F:34:E8:B4:9D:EF:B5:C7:B0:76
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9e:eb:cf:3a:cb:43:56:2d:10:d2:23:4d:44:88:04:57:2b:
7f:94:7d:bd:ba:e5:ca:ef:1f:0f:c0:7a:16:a9:20:a8:e3:3b:
dd:a1:cd:28:be:08:fd:df:22:b2:7c:8e:91:48:47:19:96:3d:
76:31:f9:63:f4:f4:37:f2:e0:ad:78:4f:f9:b8:58:5d:f8:55:
97:2f:4a:53:1c:9b:e5:50:21:a1:24:2f:18:9c:61:b6:d1:d7:
e9:2f:b9:6d:52:f7:3a:2e:01:79:36:ea:3a:29:a2:cc:5f:1f:
a1:9f:4c:04:b1:94:15:23:b1:f7:f8:c2:26:2b:4a:38:de:01:
51:11:12:40:45:89:e3:ab:04:3e:58:6e:a3:f2:e6:38:7f:d2:
a9:06:59:d1:b2:b5:84:a0:38:86:99:fb:ff:2f:a9:cb:cc:30:
6d:ae:6e:a0:4b:b2:1e:88:d4:f5:0f:75:17:ff:a6:60:2f:c6:
fd:6a:e5:1d:08:f1:e6:84:07:58:64:89:88:2f:89:7f:6a:00:
25:3c:b7:71:31:a5:e5:c9:82:00:0e:d4:75:a1:fc:08:b4:0e:
4a:69:1d:b3:af:ed:ad:2e:38:8c:ae:93:64:e4:a9:9d:4a:dc:
ff:e8:89:ed:29:f4:a6:d9:a1:18:18:12:fa:d6:4a:32:38:d9:
b0:b3:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:41:00 2025 by rpki-client