Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier: V8oIlFr1i+wNgApoi7urWEi9vrbfo4ZuB5fW/JJqoug=
Subject key identifier: 02:6B:7F:BB:88:8B:B8:64:4A:FD:38:30:51:79:E8:B8:ED:A0:B2:A4
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer: /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial: 0196BBC8ED96EA6F731762587AFD3D0899EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 20:00:29 +0000
Manifest this update: Sat 10 May 2025 20:00:29 +0000
Manifest next update: Sun 11 May 2025 20:00:29 +0000
Files and hashes: 1: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: 3TLqEWSIpx4zaE1NL/URjmliC69lCXMUE4DwaLBXGgQ=)
2: QCvbSuskCQwLxFQrUoOouHi3diY.roa (hash: sXGvHwha1X8v4xaWgUMHB+2ZrDbhHWTJfZknYl2gSe0=)
3: dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa (hash: B1PLAXt5mt+DEIRs6h0vcjXyP629Yb4hYyTjCDjQz0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:ed:96:ea:6f:73:17:62:58:7a:fd:3d:08:99:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
Validity
Not Before: May 10 20:00:29 2025 GMT
Not After : May 11 20:00:29 2025 GMT
Subject: CN=026b7fbb888bb8644afd38305179e8b8eda0b2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:5d:85:22:db:57:2c:09:e4:37:91:8e:70:
9a:76:df:09:76:8b:db:68:e5:30:e5:5e:f7:6b:85:
ef:3d:1b:63:14:15:22:f8:25:4d:97:bc:7a:43:a7:
ba:46:bf:bc:82:03:70:59:91:80:44:8a:3f:86:64:
e5:0c:a0:1e:59:e7:f5:6d:df:55:34:0f:07:c3:b2:
f4:73:ea:d8:45:6d:ab:24:32:a1:e8:90:ee:9f:6b:
09:74:b5:cf:0b:b4:59:db:4b:42:9b:4d:7a:d6:08:
99:20:c4:7a:38:1c:2c:40:f9:be:56:e6:42:62:7c:
06:e5:82:6e:53:43:70:e5:93:51:fa:fc:c5:75:c0:
80:c9:40:2e:64:30:6b:7e:5a:6e:08:27:82:b3:d1:
7f:72:47:ce:fa:ac:14:0f:cf:a9:8e:f8:96:b0:94:
73:d3:6c:7f:e4:a9:0b:0b:47:08:27:98:eb:f8:4a:
9e:4a:28:62:86:31:4e:ca:2f:2f:ad:10:5e:c9:bb:
89:41:c3:84:ef:8e:45:52:75:fb:d2:d6:27:4b:7b:
b0:c8:23:13:dd:d9:f6:c3:5d:a4:bf:3b:db:16:9e:
b5:be:b0:14:40:12:01:1c:27:10:d1:8b:b6:10:3a:
12:bc:6b:f0:c0:29:9b:f2:b6:f5:ad:e0:16:f7:37:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6B:7F:BB:88:8B:B8:64:4A:FD:38:30:51:79:E8:B8:ED:A0:B2:A4
X509v3 Authority Key Identifier:
keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8a:ee:b8:92:50:4b:17:c9:5f:8a:71:0e:41:d3:30:58:36:
4c:74:a1:e0:fb:7d:a4:20:5c:30:b9:8f:8b:53:7b:20:2b:eb:
05:c4:59:31:b4:bc:65:d2:81:47:3e:b8:3f:c7:26:4d:46:42:
39:d3:92:7f:d6:41:ee:fc:7d:e6:42:64:89:c4:d4:64:8f:54:
ca:d9:12:39:e3:24:49:48:a2:d6:36:6f:e3:42:51:d0:16:2b:
bb:9b:b9:29:ab:3c:df:07:e9:11:1e:e6:fd:aa:b0:88:57:cf:
e2:38:e2:4e:ce:2c:11:3b:df:a7:24:d8:87:ec:27:43:cf:c5:
77:07:de:84:7a:6b:df:f7:16:1a:12:41:d2:7a:f1:90:57:78:
42:3c:ef:e1:0d:e9:a4:14:53:70:d6:97:52:86:df:74:a2:ee:
28:7b:1a:9f:99:d7:e2:a0:22:1a:05:ad:32:87:cd:b3:64:67:
4a:3b:80:08:1e:1a:77:65:ee:3c:cc:82:59:a6:cd:05:da:ea:
d9:76:31:de:ab:2f:30:6b:4d:0c:d0:37:05:3c:e8:08:32:88:
68:1b:9f:87:01:88:1d:01:aa:41:50:40:cc:2c:0d:49:6f:16:
57:b6:1b:3d:8f:9e:8c:80:ca:e2:58:19:82:2b:f9:60:a0:d8:
60:86:1c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:36:13 2025 by rpki-client