Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: VT404ssse1T9lc+ucuoLxvpDYd+ycoXZPUqNaGuDUIE=
Subject key identifier: E4:D3:DB:90:0A:BC:F3:57:5C:E0:5E:41:61:A2:AD:FD:D7:83:83:63
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 0196789F76B98C8EB0A5FB70CE9C846B6241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 19:00:38 +0000
Manifest this update: Sun 27 Apr 2025 19:00:38 +0000
Manifest next update: Mon 28 Apr 2025 19:00:38 +0000
Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: T0DlKnuytafq2BVtP5F2lNWxnSuVb1psmm+xOgMKmhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:76:b9:8c:8e:b0:a5:fb:70:ce:9c:84:6b:62:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Apr 27 19:00:38 2025 GMT
Not After : Apr 28 19:00:38 2025 GMT
Subject: CN=e4d3db900abcf3575ce05e4161a2adfdd7838363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:ed:76:6a:c9:96:5d:4f:78:b8:ab:5f:4e:
82:55:3d:dd:54:27:0e:42:4c:7f:4e:db:20:05:38:
e8:f0:8e:2e:e4:8c:eb:24:b8:d2:62:52:8d:12:8a:
56:e1:bb:66:c6:6f:8a:e4:f5:95:f6:00:69:56:a4:
19:24:b7:18:21:d2:f8:c1:2c:5a:a6:4a:73:13:4e:
f7:53:f4:55:69:35:e2:42:74:de:69:85:83:80:91:
99:5e:b6:46:1e:ee:ad:67:a9:ac:66:f1:39:95:b8:
e6:b8:bd:3f:01:9a:3b:f7:a9:6a:91:b3:5c:df:e7:
6d:cc:0e:e1:91:a9:16:3b:63:ae:07:d6:fe:dd:84:
38:cc:46:d1:52:ef:ce:13:8f:be:9e:80:95:7c:b7:
a6:7b:91:5d:47:4f:9d:3f:d7:14:89:ee:38:dd:93:
ba:19:7f:80:71:06:01:57:f2:4b:d8:50:fc:45:c2:
1c:3a:65:43:7d:33:06:b9:67:e9:45:de:c2:0b:e5:
b5:8f:a3:3e:24:7f:44:b4:14:82:a3:ba:ec:d0:62:
f5:ca:ab:f3:0e:22:31:a0:54:08:c1:c4:f3:63:a5:
ee:d1:5a:67:77:f6:10:52:3f:dd:f4:0b:c5:4b:00:
a6:de:f1:2a:09:b8:e2:7e:34:56:39:33:92:c3:67:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D3:DB:90:0A:BC:F3:57:5C:E0:5E:41:61:A2:AD:FD:D7:83:83:63
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9a:1d:fc:ca:29:a1:3f:54:e4:00:cf:30:20:90:39:8e:2e:
0f:11:0e:59:13:f4:9a:0f:fb:a8:e7:ff:60:39:db:91:0e:eb:
a6:a9:05:6b:5b:88:22:37:40:ad:b3:54:44:44:09:25:ad:e5:
9c:76:a6:91:f2:f9:ae:a8:3a:39:b0:a2:44:9c:b2:6b:8c:e3:
25:7f:f3:3a:f6:db:52:fa:5a:02:9f:77:2e:3a:32:92:13:b5:
25:37:5b:45:79:59:87:9d:54:5b:b3:35:46:10:05:ee:41:0d:
5f:b0:72:3e:9f:8e:b4:29:49:e8:ba:78:67:3f:c7:50:f7:b9:
f7:bd:f2:67:8f:16:40:6c:cb:ce:4f:60:26:c8:08:71:4c:08:
bf:76:0e:56:ac:96:a8:33:fd:df:e5:94:40:f3:70:9b:16:8e:
b4:89:df:52:18:0f:65:cb:77:09:85:35:fd:33:36:89:88:29:
25:79:85:05:4c:74:45:46:b6:dc:13:1a:d7:fc:ba:2d:b7:e3:
f5:3b:86:65:ea:76:49:16:b0:76:98:3d:f2:f5:4f:6a:99:30:
72:a8:c4:68:1d:1d:72:6b:6c:d1:3d:f8:f0:48:e6:a7:a5:f1:
36:40:5a:74:b5:0c:99:64:6f:0c:31:9d:ed:61:88:ca:77:dc:
a2:82:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:15:36 2025 by rpki-client