Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
File: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft (raw, json)
Hash identifier: tmUOX80YduiUlMhQoADiwti8yPPfcI0QpDURRzU44gM=
Subject key identifier: 51:F4:5F:90:60:B6:55:15:F8:08:BC:63:DD:C0:C4:24:79:7E:ED:3A
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Certificate issuer: /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial: 01967EA1CEBC29BDBA9F9335DEADD448CCB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
Manifest number: 151A
Signing time: Mon 28 Apr 2025 23:00:55 +0000
Manifest this update: Mon 28 Apr 2025 23:00:55 +0000
Manifest next update: Tue 29 Apr 2025 23:00:55 +0000
Files and hashes: 1: 1nNXrg9kNJmrbwr01_wdlr4zRG8.roa (hash: jP5XT6aNraFgRF1RUdhNykj84LWIdETmEVMazBCC7NY=)
2: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl (hash: FrFkNxBqZ2r/ZKtTrYZYJBYRZEaxozHVkKcJlGBTPCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:ce:bc:29:bd:ba:9f:93:35:de:ad:d4:48:cc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Validity
Not Before: Apr 28 23:00:55 2025 GMT
Not After : Apr 29 23:00:55 2025 GMT
Subject: CN=51f45f9060b65515f808bc63ddc0c424797eed3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:95:ce:9d:46:e5:b1:17:98:cb:16:f1:ee:
26:d9:46:0d:df:c1:70:3d:28:f4:17:2e:0c:2c:df:
91:ea:c8:21:4e:c1:67:df:2e:74:b4:1d:b1:82:75:
c5:85:73:4a:c3:dc:b9:e4:fc:2f:a7:79:23:93:b4:
b1:da:38:d4:7c:9b:c1:1b:f9:2d:d9:02:71:56:76:
e5:61:b6:a5:43:00:7e:93:68:5c:fd:05:47:81:77:
60:e9:d7:b0:fb:1f:72:eb:4f:d0:95:99:81:fb:7a:
00:d0:e3:bf:42:6c:f2:43:5c:03:df:bb:9c:09:a1:
4c:ea:09:69:66:b6:8f:a3:b3:dd:16:5f:11:ac:92:
a2:41:3b:95:46:9d:0b:a6:0f:95:2e:28:ff:87:1a:
40:9b:2f:39:18:0e:31:f5:20:1e:9a:a0:8a:d6:ab:
ee:1d:ce:72:7d:98:4f:81:22:4e:5b:1b:30:33:82:
ba:a2:e3:ed:1f:34:f0:6f:70:04:7a:f8:05:1a:70:
c2:39:bf:ae:4f:65:40:ad:6e:45:d4:5c:96:f0:d7:
47:94:c7:67:9d:d2:1f:01:1b:0d:2e:67:c3:12:c4:
db:63:0d:1f:a3:86:42:5b:40:ba:85:5e:d2:24:bb:
c2:ee:14:83:f8:7b:05:4b:f8:28:0a:11:28:85:07:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F4:5F:90:60:B6:55:15:F8:08:BC:63:DD:C0:C4:24:79:7E:ED:3A
X509v3 Authority Key Identifier:
keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8a:2a:f8:d0:ba:2f:b1:1f:b3:ec:61:c9:61:16:16:ec:79:
31:86:96:40:45:27:04:38:38:21:82:72:a9:81:5e:57:59:18:
09:a0:cf:76:37:f2:8b:67:83:e9:6a:a9:20:88:00:85:28:2c:
48:6c:13:d0:90:7b:d6:05:7d:48:19:7c:17:8f:06:3c:5c:6c:
56:54:52:e8:34:08:89:45:ce:0e:08:d4:5c:c2:b6:3b:2a:bc:
4e:ef:78:9d:c5:ba:c5:aa:0c:82:2a:47:10:d9:f8:92:73:59:
d9:04:77:03:6d:a4:ab:35:6d:cf:bf:82:61:60:8e:46:5b:75:
32:47:bb:d9:cf:50:7d:c8:6a:e8:a5:82:b0:63:df:bc:f5:ad:
c7:de:b2:1c:a7:70:9c:64:57:6e:25:86:cb:9a:93:44:f4:9b:
b9:8f:88:5c:94:a8:9c:3a:4a:ab:bf:74:e1:9a:76:88:3b:5a:
c6:13:8f:ee:08:2e:4e:eb:01:da:a6:7c:e4:7f:cc:31:d8:1d:
7c:94:0f:3b:f7:f4:4a:8a:4f:df:64:93:37:07:b1:15:23:9f:
36:19:5b:57:41:ca:a5:5a:dd:2a:3b:a0:0e:c3:44:9d:4e:66:
62:7c:ec:9f:61:1a:70:23:ff:a6:3a:63:be:2a:21:48:fc:bd:
56:c3:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:09:23 2025 by rpki-client