Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File: E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier: XA4MGOumVIoYZ7MncTtI2SyLaJFkiMavIdB/GXpCN4w=
Subject key identifier: FF:BC:1A:F6:49:BE:2C:92:D5:7B:32:E8:64:B7:3A:CB:C3:16:9F:BE
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer: /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial: 019680FDAF9539AC2E189DB8A31814EF621D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number: 105A
Signing time: Tue 29 Apr 2025 10:00:31 +0000
Manifest this update: Tue 29 Apr 2025 10:00:31 +0000
Manifest next update: Wed 30 Apr 2025 10:00:31 +0000
Files and hashes: 1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: ykxyODVrl2hbfzZTUny8QRcqf/GySTAcILG0i3rYcn0=)
2: z7S0Dz882RLcbziuzTp5d0_DNew.roa (hash: KUS+jL9qYhHGYv1E9XE/X3yjSFhxo3sbNNAyJ3Cg4aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:af:95:39:ac:2e:18:9d:b8:a3:18:14:ef:62:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Validity
Not Before: Apr 29 10:00:31 2025 GMT
Not After : Apr 30 10:00:31 2025 GMT
Subject: CN=ffbc1af649be2c92d57b32e864b73acbc3169fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:f0:b1:40:3a:57:ae:3c:27:21:ac:fc:05:
89:00:5f:aa:c8:56:b5:b0:7e:e1:78:d7:f0:ba:60:
98:e9:7c:76:8f:09:a9:e2:4b:b9:e2:97:6f:ff:b7:
51:13:4e:3f:27:b9:db:d4:7a:02:ff:84:65:5f:0a:
78:91:a9:94:5a:c6:97:c7:a5:13:5c:6f:5f:3a:a0:
4a:d9:cf:96:4f:aa:dd:9d:f3:15:a3:9a:f3:af:99:
82:76:fe:0b:5b:83:e8:50:a4:d3:a8:10:bd:21:21:
7e:c5:2e:2c:6e:23:36:f3:21:33:44:97:4d:53:a1:
c4:1a:67:e1:1f:33:74:e1:89:f2:61:e7:ef:a0:f9:
0f:00:da:60:66:e9:cf:d8:96:0a:4f:65:dc:8a:ad:
8e:2e:04:45:e0:3c:97:c8:4b:5f:f2:cb:92:e8:de:
c3:2f:35:6a:14:d8:7b:2d:85:e6:22:45:8a:81:4b:
c2:46:24:25:13:4c:b5:35:59:aa:f4:6f:d9:bd:5f:
11:14:9f:c5:10:f3:68:e8:a9:b1:f0:75:59:36:fc:
fa:ac:43:a1:ad:58:85:68:2b:26:62:0c:96:26:38:
a1:5d:b9:57:13:90:73:a8:05:87:3b:12:b8:82:54:
ad:c3:88:38:77:98:42:13:c9:61:9a:28:69:54:ca:
a1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BC:1A:F6:49:BE:2C:92:D5:7B:32:E8:64:B7:3A:CB:C3:16:9F:BE
X509v3 Authority Key Identifier:
keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:57:ab:03:37:b5:c1:b5:ee:8c:46:96:a0:b1:b7:6f:ce:99:
71:d7:b1:1d:55:a9:99:f3:99:ad:e1:5c:68:93:b0:ff:a8:25:
db:64:2b:1a:a9:55:49:2c:27:92:63:ee:90:a6:a9:14:9e:a3:
ef:d4:31:b2:21:2c:e2:df:77:6c:0b:84:47:0a:55:5c:f0:b7:
73:02:ad:b9:56:1a:2a:fb:c1:b7:a6:33:0c:99:2d:81:17:0a:
d7:15:c9:ea:58:09:cb:cd:a9:45:00:2f:f0:27:fe:f3:e3:ed:
b3:98:c5:36:0b:74:ad:30:24:71:7a:27:f0:b0:dd:49:0c:5e:
10:be:c5:25:28:db:10:50:51:82:49:1a:69:c1:50:f0:71:d0:
23:1d:bc:6b:08:db:12:9f:7e:2b:14:be:9d:ee:6d:fa:ed:14:
e1:ad:a5:27:e0:c8:bc:eb:47:92:59:1b:75:5a:0d:ed:e5:5e:
74:ca:34:08:8f:67:0a:e4:a7:96:e5:dd:45:bd:f2:6c:08:d3:
da:df:06:0f:b4:ee:72:5f:7d:93:2c:7d:95:f6:1b:66:8a:3a:
fb:e5:13:8f:e5:4b:8e:ad:d3:d1:7b:32:43:41:2d:00:e0:74:
63:b5:fb:c9:18:02:7d:52:f5:6c:48:b3:2e:05:c6:03:64:f0:
f3:d7:aa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:40:27 2025 by rpki-client