Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
File: 26EkBVXYbI296Dbt0WTNMo-uY7U.mft (raw, json)
Hash identifier: gMmU5v6xQmSqvFE/Wbsis4HZt4OJTtRotuWXxAfuD50=
Subject key identifier: E0:C9:FA:DD:65:FB:BA:E4:18:20:58:04:BE:8D:F7:06:34:8D:A2:C3
Authority key identifier: DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5
Certificate issuer: /CN=dba1240555d86c8dbde836edd164cd328fae63b5
Certificate serial: 019683FF24C2B1C6DC750B9D865CD8ACC826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
Manifest number: 018F
Signing time: Wed 30 Apr 2025 00:00:58 +0000
Manifest this update: Wed 30 Apr 2025 00:00:58 +0000
Manifest next update: Thu 01 May 2025 00:00:58 +0000
Files and hashes: 1: 26EkBVXYbI296Dbt0WTNMo-uY7U.crl (hash: Apv5qU+Er8GG8mc5kxptO6BAt5wRCylVgPE/pfM48fM=)
2: UjW7yWELLZ4wmIBJun9f47O3M5s.roa (hash: BN8elBK909fGWcFpTeqxq0IE/blqpykN7942105/TNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:24:c2:b1:c6:dc:75:0b:9d:86:5c:d8:ac:c8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba1240555d86c8dbde836edd164cd328fae63b5
Validity
Not Before: Apr 30 00:00:58 2025 GMT
Not After : May 1 00:00:58 2025 GMT
Subject: CN=e0c9fadd65fbbae418205804be8df706348da2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:23:43:ef:4a:e2:2a:79:b0:34:ab:b1:32:b3:
66:f7:ca:7c:be:f4:7a:b9:d6:c8:9c:b8:e2:2d:23:
ab:b2:44:59:5f:62:46:dd:b7:b1:9a:63:c8:2d:01:
ea:f4:87:ae:c6:69:64:12:00:f4:d7:db:1f:6e:96:
df:e9:37:da:6f:fa:67:fd:64:1b:d9:70:60:2f:a1:
19:cc:0b:e8:da:24:19:bb:bb:f9:fd:5a:d9:a5:0e:
16:97:8b:ec:11:92:fe:93:30:8f:c0:0a:9b:92:9c:
01:a7:4e:14:84:6a:be:62:b0:e7:fa:04:e9:5f:4c:
21:46:2c:7c:0a:b8:42:3d:b4:0d:41:f4:b6:2f:bf:
16:5d:0b:45:48:25:b0:db:5a:15:e7:e9:b3:c8:ce:
6e:04:a9:33:f8:7a:7e:31:43:03:81:8b:68:b4:f8:
0c:24:80:78:d8:47:e1:9c:12:14:0a:e8:66:65:50:
f0:24:1e:9e:ae:1c:6e:de:e3:e1:f4:b8:85:17:ce:
14:82:c0:2e:8f:3a:fb:ac:fa:45:66:9b:91:83:bc:
a4:fd:fa:fe:ad:f9:c2:b4:cb:be:96:03:9c:f0:41:
84:38:da:c7:1c:07:b5:5d:ce:fd:23:7c:92:77:6c:
bc:96:57:9c:ca:a9:b9:4e:f6:df:60:95:3e:50:50:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C9:FA:DD:65:FB:BA:E4:18:20:58:04:BE:8D:F7:06:34:8D:A2:C3
X509v3 Authority Key Identifier:
keyid:DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:28:c8:b8:12:02:6e:ee:7b:04:5d:47:ad:f4:37:67:0c:1a:
ec:ad:7d:db:0a:29:dd:66:be:dd:d2:18:15:31:25:5e:e0:9f:
74:c1:cc:41:ce:7a:19:4f:87:00:d3:bb:85:60:24:63:d1:9d:
9f:ce:14:ea:49:bf:9c:d9:5f:67:b2:2c:e4:fb:a7:e5:87:3d:
e6:bc:f3:2b:4b:95:c7:80:db:67:ca:fc:54:17:7b:db:8e:09:
e5:5a:f6:56:fd:7f:6c:0b:99:a2:23:33:6d:53:a7:b4:ad:ab:
04:d3:3c:72:97:0f:a4:cb:65:a6:ae:d9:0f:7a:1d:fe:5f:bb:
0b:85:95:96:5b:61:17:b9:5e:13:78:d3:58:bb:a3:a7:a5:87:
e3:56:6e:4f:e2:dd:42:fd:05:08:8b:40:7a:1f:f9:8d:f2:c1:
14:0c:a8:56:9e:ee:de:f1:76:6b:ff:9b:c9:33:68:53:f2:d2:
ee:75:2d:54:34:97:a0:40:9a:98:b5:0a:29:07:15:62:7d:a5:
89:54:e7:4a:af:fd:a3:ad:e7:e8:28:f5:23:0f:a0:6b:83:6c:
f1:76:6e:e3:2b:81:00:ab:3a:be:27:33:a5:2c:da:3d:b7:4b:
f1:cb:29:28:9d:8b:70:30:ae:7a:23:cb:6f:05:dd:f0:69:47:
63:0a:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:36:07 2025 by rpki-client