Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier: dsv6qS9R3ygrSaktVQ4AgxH0BoRDoBozeHy8PJzh2ZA=
Subject key identifier: 3B:D0:94:4B:2A:02:67:93:26:B5:F7:16:1D:5B:49:38:10:6B:C2:B8
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial: 019675679573E9175F0B5866A4CF603E5263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number: 148D
Signing time: Sun 27 Apr 2025 04:00:44 +0000
Manifest this update: Sun 27 Apr 2025 04:00:44 +0000
Manifest next update: Mon 28 Apr 2025 04:00:44 +0000
Files and hashes: 1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: 9yLPevvT6TRoTda/YYNwPKi/btL+fZC4tckbJVUzKa8=)
2: aTQzWebpqg_T1Vz72K8wYxcCH9E.roa (hash: sU4u/yCI9RN4etvN429ld52OXctixi8Cp3brB5244bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:95:73:e9:17:5f:0b:58:66:a4:cf:60:3e:52:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Validity
Not Before: Apr 27 04:00:44 2025 GMT
Not After : Apr 28 04:00:44 2025 GMT
Subject: CN=3bd0944b2a02679326b5f7161d5b4938106bc2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:4d:53:a0:a1:66:0b:c1:8f:dd:91:24:3a:
41:ea:8a:77:41:4b:9d:9c:e6:e2:49:4c:f6:d8:e4:
65:d2:23:10:da:b9:d7:27:29:24:5f:71:1e:bf:86:
83:7a:8d:f0:f9:56:db:66:a0:c3:f7:5b:af:f1:ae:
91:ac:9f:8a:cc:6d:fe:97:35:af:a8:4c:e2:1f:97:
cd:4a:c4:b9:08:da:41:eb:b4:27:60:fb:48:2e:46:
0f:f2:0e:f0:75:87:66:36:3e:7a:82:72:b9:fe:ea:
35:f2:e1:9d:f7:13:4d:9f:c0:22:93:78:ef:09:8d:
39:d6:f0:15:76:a5:d4:d4:49:e6:9b:29:2e:59:8d:
8e:0e:3b:30:61:4f:d9:f0:94:67:cf:2b:36:d2:2a:
e6:c9:d9:98:c1:0d:c5:37:8d:00:85:74:1a:51:76:
d0:bf:fe:2b:15:56:56:57:d2:f0:ee:7b:3e:83:8b:
65:fa:a6:f5:a0:10:c4:df:51:c9:cf:14:37:9d:44:
a4:83:5a:9a:c6:27:5c:5d:44:58:d4:c4:82:b6:95:
90:73:a6:2f:64:6f:19:76:d9:48:24:7e:6b:aa:c8:
5a:a1:c9:8b:ac:63:c3:83:98:fb:e5:c0:f9:a9:e7:
ba:57:d2:43:0e:a9:d9:6d:80:b0:ae:ce:2a:5a:60:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D0:94:4B:2A:02:67:93:26:B5:F7:16:1D:5B:49:38:10:6B:C2:B8
X509v3 Authority Key Identifier:
keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cf:4b:0d:4a:5e:f1:f7:db:4b:f1:f3:7f:97:4d:be:a5:f4:
fb:99:63:b9:99:b0:ea:ae:e6:de:e5:85:d8:d2:06:89:34:75:
fd:a2:86:a1:38:db:70:10:e5:ef:47:3a:ab:50:ba:84:60:86:
0d:d9:91:cb:d3:c3:63:95:39:d4:1e:38:91:47:83:ae:e8:9a:
a9:19:a8:a6:3c:e2:45:88:93:c4:75:a4:90:f0:38:10:32:c6:
a8:cd:ed:fa:e8:32:c2:28:3a:6a:86:fe:39:f3:1c:0a:32:56:
3b:fc:01:cc:31:63:52:a2:db:05:ad:73:96:e7:d1:51:a8:00:
eb:ab:29:0f:4f:75:96:b8:c9:d3:10:5a:8e:d6:09:b0:0b:c1:
38:27:26:15:1c:5b:57:87:fa:9c:37:06:2f:72:bd:00:8f:70:
12:7a:43:82:c8:81:3e:82:9b:3f:26:0a:cd:f5:3c:f9:eb:57:
ae:d9:f5:32:eb:3d:f8:32:1e:59:f1:e9:1e:43:c4:04:f7:87:
8e:f5:30:14:69:0b:00:93:ba:92:5e:b2:dc:bb:29:85:38:87:
44:07:7d:c4:86:45:a0:1a:0c:ae:60:a3:b4:b3:59:69:ea:75:
66:b1:5a:f4:60:37:3d:b0:27:e9:19:b8:2c:32:c6:e9:34:f1:
38:72:40:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:17:43 2025 by rpki-client