Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
File: Enr2xpNXOiJwySN4dUVsLfC1A8I.mft (raw, json)
Hash identifier: HpfSqDKGSzR6MTGrVelP4dk633GgIWj+CP4jpni7TDA=
Subject key identifier: 3E:96:2A:3F:4C:4E:E4:10:C8:26:6A:0A:A6:A2:83:47:C2:EE:6F:F3
Authority key identifier: 12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2
Certificate issuer: /CN=127af6c693573a2270c9237875456c2df0b503c2
Certificate serial: 01967DC5CBA6F047E8D50F07AD78FC147A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
Manifest number: 095F
Signing time: Mon 28 Apr 2025 19:00:36 +0000
Manifest this update: Mon 28 Apr 2025 19:00:36 +0000
Manifest next update: Tue 29 Apr 2025 19:00:36 +0000
Files and hashes: 1: Enr2xpNXOiJwySN4dUVsLfC1A8I.crl (hash: NejuMr/sXrkBPpeZNXDyjunD/tTrKlQvemskFTmlPzw=)
2: VDxX1bu_IneAzz4Yg7mHL9qU8nI.roa (hash: wTZ4abffSQNMN+9KEZc/y4JfVZ87xDtbLN5IYZv+F0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:cb:a6:f0:47:e8:d5:0f:07:ad:78:fc:14:7a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127af6c693573a2270c9237875456c2df0b503c2
Validity
Not Before: Apr 28 19:00:36 2025 GMT
Not After : Apr 29 19:00:36 2025 GMT
Subject: CN=3e962a3f4c4ee410c8266a0aa6a28347c2ee6ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:12:d8:e6:4b:34:97:5a:97:92:12:29:9e:
58:20:38:bc:5c:e1:35:53:70:1f:d0:d7:2d:6f:7f:
17:83:a8:0e:2a:08:d5:62:47:02:6f:3b:91:20:41:
11:e1:ce:a2:76:bb:38:72:b6:df:4f:4b:d9:a1:36:
f7:37:29:9d:be:09:cb:0e:3e:a5:34:d0:c2:9e:30:
2b:85:1f:d1:71:24:7a:ff:16:49:58:c0:41:67:c9:
32:f7:63:b5:78:32:8e:9f:c4:78:fa:68:ed:47:ff:
76:1f:3b:d8:46:f1:4c:7a:d0:a1:06:5c:9e:a8:6c:
c5:d3:ad:8d:02:80:f1:fa:74:3a:72:e6:fb:ec:2d:
df:a8:ba:d8:a8:9d:bd:fb:f3:a0:42:d5:99:d2:f8:
c9:1f:ad:84:5c:59:a3:7c:7c:61:d9:41:37:9f:da:
a1:04:fd:c2:d2:09:68:34:67:3f:cd:31:fa:c3:88:
49:f8:27:05:84:d7:00:25:93:e0:45:5b:0c:f6:44:
5d:b7:df:f4:b6:9d:5e:40:63:73:ef:e7:d6:65:30:
59:1e:e7:1c:39:e3:d4:7e:ea:f4:fe:ab:51:ea:57:
72:df:34:d0:35:18:8e:c2:34:ba:79:67:8c:3b:9f:
67:1e:69:14:c1:72:55:f0:3b:a9:e5:f2:32:d2:55:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:96:2A:3F:4C:4E:E4:10:C8:26:6A:0A:A6:A2:83:47:C2:EE:6F:F3
X509v3 Authority Key Identifier:
keyid:12:7A:F6:C6:93:57:3A:22:70:C9:23:78:75:45:6C:2D:F0:B5:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Enr2xpNXOiJwySN4dUVsLfC1A8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0d362c-f863-4d40-80bd-85fc5fd90fd8/1/Enr2xpNXOiJwySN4dUVsLfC1A8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6a:e0:94:6f:62:06:ae:70:61:2f:d0:b3:24:c2:7f:7e:28:
34:fa:43:d4:12:d2:e1:c7:19:a1:4f:54:00:6b:ae:0c:f6:0a:
1e:46:3e:a2:10:2f:30:33:06:77:71:92:ec:bf:e6:e1:6b:f3:
59:e9:6f:bb:2c:e7:87:df:88:e3:d9:be:8b:fd:8f:23:da:7e:
f3:16:d2:26:87:31:e6:cd:ac:b3:35:f3:7d:07:2a:da:cb:a9:
b2:22:d3:80:07:24:9f:64:77:a5:7c:b6:25:4e:e7:1b:e4:e6:
52:32:b4:40:fd:94:e8:52:fb:98:1f:41:8e:26:b8:47:55:c8:
23:0f:a1:63:6f:17:a3:a1:fb:e5:3f:e5:4a:84:59:24:da:99:
9d:ab:20:67:84:ab:08:e9:bf:06:99:51:a1:36:50:f8:01:ac:
96:03:c4:bd:84:0d:4e:64:c3:49:22:b5:36:e1:74:07:cc:5d:
bf:5a:2e:45:ec:dd:5a:e1:c0:4b:fd:40:bd:25:12:43:10:0b:
2c:74:94:0b:16:09:d5:76:a0:ca:d7:92:1e:b1:20:96:17:4a:
a9:a5:0c:b0:2f:50:a1:e3:99:70:2a:8c:b9:f9:67:10:2c:13:
e1:00:3e:13:02:b4:16:3d:d8:5c:5d:35:0c:7b:78:08:55:33:
b4:2c:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:10 2025 by rpki-client