Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
File: e-714WwUZ9p6AvGSN2U65CsQllI.mft (raw, json)
Hash identifier: s/eDgT+45zva81WaAdMWXIE412Th9+uVoOk/gahl/kU=
Subject key identifier: 29:D0:20:D1:80:83:79:47:F1:1E:99:74:06:21:4C:D9:49:A0:1E:9F
Authority key identifier: 7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
Certificate issuer: /CN=7beef5e16c1467da7a02f19237653ae42b109652
Certificate serial: 0196BB5B5E346A5256FAEB36F3BBF3393EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 18:00:49 +0000
Manifest this update: Sat 10 May 2025 18:00:49 +0000
Manifest next update: Sun 11 May 2025 18:00:49 +0000
Files and hashes: 1: TTLplKYMw3ALMHBQOquflMCv_74.roa (hash: xOzJXshEgFbL72SqfgJ9QFBYYI8Jm5YZHiKPrlqNSRU=)
2: e-714WwUZ9p6AvGSN2U65CsQllI.crl (hash: VXhWfDSXF5w3kUNkezncjUUqma/OLF/mkBJ54ufbKAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:5e:34:6a:52:56:fa:eb:36:f3:bb:f3:39:3e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beef5e16c1467da7a02f19237653ae42b109652
Validity
Not Before: May 10 18:00:49 2025 GMT
Not After : May 11 18:00:49 2025 GMT
Subject: CN=29d020d180837947f11e997406214cd949a01e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:3f:57:ee:be:19:ae:96:25:fb:7a:3f:ad:
0a:06:7f:e3:69:79:07:0d:4f:d5:9b:b7:5b:28:fc:
21:c2:44:52:5c:ad:a6:e6:98:1f:87:d7:a0:0f:b9:
c0:f4:50:8a:24:13:e2:2d:cb:a3:41:c7:8d:a1:df:
7a:64:bc:75:5f:5a:0c:d3:55:b0:db:33:22:c8:d2:
54:91:c6:19:23:e8:f7:c1:b7:8c:f8:14:00:d9:3a:
a7:89:f2:c3:aa:23:57:25:28:5a:b7:56:75:0e:70:
bc:55:20:b1:94:c1:43:02:8d:11:2c:9d:fe:56:53:
1d:c3:84:75:29:0d:fc:43:3f:b9:e7:81:a2:9b:a7:
f1:43:e7:65:33:b1:e2:6a:f2:4a:dc:65:5c:f4:17:
a8:04:7d:6a:9c:11:2d:93:0d:2e:8d:ae:01:5d:7a:
61:f2:5d:77:98:9c:9e:e7:ee:44:f3:74:5c:9c:16:
fc:49:c2:1e:7c:65:9b:7d:c0:07:e7:d6:64:e9:78:
70:5c:13:61:e9:1e:5e:9b:d5:12:50:bd:bf:44:eb:
e9:90:b3:11:20:26:99:4c:46:7e:ec:51:d5:b6:0b:
30:88:85:41:e0:5a:82:a7:c5:64:91:3f:5d:69:0c:
e8:74:a4:1b:88:c3:b9:bd:3c:4c:74:8e:d6:ac:c3:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D0:20:D1:80:83:79:47:F1:1E:99:74:06:21:4C:D9:49:A0:1E:9F
X509v3 Authority Key Identifier:
keyid:7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:00:20:be:23:1e:35:4f:57:69:dc:50:00:93:93:39:8b:0f:
e7:63:4b:9f:36:27:60:4a:f5:f0:d0:41:e2:7f:23:2a:f2:c0:
93:a1:a2:60:fa:45:b7:3e:02:bc:b1:23:e3:08:18:0a:8d:f8:
02:59:d2:9e:45:16:1a:c4:56:41:9d:2b:91:45:d2:02:3e:9a:
3d:d0:8c:bf:7e:46:45:2c:a7:ee:a7:06:7b:c4:10:34:a9:20:
08:9a:92:2b:11:df:fe:13:b7:52:ae:f9:12:a8:83:e4:b3:b3:
30:dd:2a:9f:32:f8:a6:54:f2:d6:15:fe:ca:44:33:50:e9:c4:
d8:2c:a0:6c:29:28:cc:8e:41:d8:80:bf:87:3a:65:29:a9:ae:
7e:a5:dd:a8:57:52:8c:7c:4c:ad:ef:16:26:5f:18:b8:f4:9c:
e2:54:5e:ee:e1:37:08:99:4d:e5:fb:06:af:58:3e:9b:5d:e3:
dc:ea:9d:11:8f:ea:63:9f:0b:29:df:cf:81:e8:54:2c:7e:32:
68:04:f6:53:3d:79:31:64:d5:91:d0:a4:b6:95:f6:a6:9e:79:
86:92:3d:cc:44:8a:e6:f2:4a:38:55:07:33:bd:0e:71:fc:50:
fe:22:65:91:30:64:b3:e7:56:77:01:fd:02:87:a5:43:cd:81:
82:13:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:03:26 2025 by rpki-client