Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: BRHNDUDOs3BLltiXTNVSW+cLIn6PPaseS8jiRKgrVhw=
Subject key identifier: 13:8F:FB:79:E9:2F:71:AC:D3:3A:CF:C6:32:34:EF:BE:9E:F9:CC:1B
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 0196BDEEBBD432FD4311D3C474DC08F50933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 03EE
Signing time: Sun 11 May 2025 06:01:01 +0000
Manifest this update: Sun 11 May 2025 06:01:01 +0000
Manifest next update: Mon 12 May 2025 06:01:01 +0000
Files and hashes: 1: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: Tw1qymaN4ZLnoiiunTf0Ai94tTOjSGLLCW9tL4RLm40=)
2: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (hash: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=)
3: r-plRi1ZpgmWnu-urPIdYNrFFFU.roa (hash: DxecFcu5t+xZ0qqmbJOm2zril/rb62HI5wbo3Djm3yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:bb:d4:32:fd:43:11:d3:c4:74:dc:08:f5:09:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: May 11 06:01:01 2025 GMT
Not After : May 12 06:01:01 2025 GMT
Subject: CN=138ffb79e92f71acd33acfc63234efbe9ef9cc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:71:65:ef:ec:51:f8:fe:28:af:f8:c5:31:
68:5c:40:e0:13:72:13:79:e3:41:96:d2:7a:d9:8b:
ed:d6:71:40:ae:2d:3b:75:e6:8b:a3:6c:35:9d:d0:
05:19:af:9e:76:59:cf:71:76:db:20:e5:75:f3:f1:
84:ba:3a:2b:7f:71:c0:40:13:e7:33:cc:58:dd:dc:
65:e5:37:7f:79:16:9e:39:2d:c5:a1:95:6e:32:9c:
45:7f:f3:6d:1a:d7:85:34:25:e0:b2:15:9b:05:70:
6a:9f:b1:17:56:29:f8:4d:11:46:5d:7c:7b:9d:26:
2a:b6:14:0a:cf:90:88:f7:74:70:68:cf:5c:4d:b5:
b5:df:33:42:68:91:0b:aa:d0:fa:ec:2f:84:1d:12:
b1:3a:0e:0b:24:33:c7:9c:be:5e:a9:e8:d2:27:9e:
92:72:71:33:b9:ec:ba:03:a2:93:e3:9a:90:2f:8d:
e5:e4:0a:aa:4c:bf:3e:d7:09:05:53:73:a9:df:d2:
6f:f0:c2:a6:1a:6c:cc:8b:b9:2c:42:bb:16:fa:94:
d6:99:6c:13:a1:bb:a8:4f:d7:b7:f5:13:7c:ce:06:
e7:77:a5:c5:8d:8a:40:3e:20:c9:79:b3:43:40:d0:
00:63:42:0c:f0:62:bf:c5:fd:ae:14:90:21:54:c4:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8F:FB:79:E9:2F:71:AC:D3:3A:CF:C6:32:34:EF:BE:9E:F9:CC:1B
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:af:ca:60:b3:bb:e9:37:a8:6a:24:2c:24:4e:1e:9a:8e:59:
c6:2d:37:14:ae:6e:63:94:7d:34:98:88:3b:d8:f9:a6:75:46:
c2:a1:eb:6a:71:f1:e5:51:0d:1c:ee:db:e1:ac:65:88:45:bb:
ec:90:ac:6b:c6:13:9b:31:c1:cc:e8:50:b5:cb:4d:41:ed:a4:
99:4e:c1:b0:4f:74:6f:97:68:4f:a7:29:37:c6:e0:19:9d:22:
33:d0:a9:ac:04:1f:c5:27:ed:e8:ef:dc:9c:23:2a:7b:28:d7:
d5:2a:7e:b6:09:32:a0:ae:6f:2d:5b:1a:7b:b7:b7:51:be:54:
95:9d:33:29:c1:6a:cd:ea:9b:1f:df:c2:30:cb:41:18:3d:60:
b2:a2:bd:4e:44:30:e6:8c:b7:26:b8:ce:8a:ab:f5:d1:f1:6c:
3c:a2:50:3e:42:c3:c8:9b:89:77:f0:cb:c7:d5:d0:01:f9:96:
35:a0:74:21:d3:b3:c8:3f:d0:e0:4b:33:6e:24:11:66:0f:f1:
80:5a:01:2e:c1:cb:29:3e:3f:44:92:7c:4d:9f:4b:82:3c:ac:
27:77:d1:89:25:a4:b7:a2:bd:35:41:b6:2c:5e:03:a0:94:49:
34:c5:dc:e3:b8:39:23:05:36:39:ce:81:5e:be:2c:45:2a:72:
ac:74:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:04:53 2025 by rpki-client