Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File: E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier: 4MsyxrOC1njoVYVOP6gQWFjTmZ8MY6cjXkHkpe4VaPM=
Subject key identifier: DD:68:FD:D7:61:03:35:81:C0:7D:3C:40:18:63:C9:7E:FD:78:88:88
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial: 01968B135E57F71DFCFD60679C384F91BCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number: 1098
Signing time: Thu 01 May 2025 09:00:24 +0000
Manifest this update: Thu 01 May 2025 09:00:24 +0000
Manifest next update: Fri 02 May 2025 09:00:24 +0000
Files and hashes: 1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: DKvCa84HsaxJXS/w7IRlBeQPMLBU8gUBh5RqoibR8VY=)
2: EfwdFjXVhRXWX5ii0NrhIm4Va4g.roa (hash: rkgBBwT7155haQFS5qhcb+40oim+InAz1f/X+wiaZP8=)
3: JoUWdKjnvYv36EECrdw-DD3L2JE.roa (hash: A24wnWQHwaxLRVm8zSKIhvI+f81n1EoreHc8UbUVP5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:5e:57:f7:1d:fc:fd:60:67:9c:38:4f:91:bc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Validity
Not Before: May 1 09:00:24 2025 GMT
Not After : May 2 09:00:24 2025 GMT
Subject: CN=dd68fdd761033581c07d3c401863c97efd788888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:8f:29:38:fb:d7:60:e2:cc:fa:2e:30:52:
36:b0:aa:c4:4d:84:cf:90:3d:37:06:e5:36:53:25:
0d:17:6b:0e:34:8e:0b:34:a8:ba:9e:81:e3:73:fc:
a5:6b:ae:95:4f:d1:a3:77:ec:d4:dc:31:bb:4b:aa:
1e:9f:94:0f:3d:df:e2:d2:b7:00:ec:f6:2b:ae:f9:
d2:2e:ff:2c:93:23:78:ab:a8:4f:33:0a:6c:e9:47:
1a:ae:dc:21:80:7e:9b:2c:69:1c:eb:34:0a:16:f9:
00:3e:63:60:2d:c5:05:4d:fb:94:7f:29:d9:02:86:
cc:8a:70:3f:2f:92:5c:7c:3b:29:01:f5:09:9e:48:
95:12:fc:69:bd:c5:d4:34:16:70:da:00:25:41:36:
6e:19:61:1f:43:41:e1:cb:d4:4e:b3:9e:1d:6c:a9:
22:7f:8c:48:f0:b7:19:3f:1d:fe:1c:da:b7:4f:79:
6d:1d:3b:c1:b6:b3:7b:1f:f4:98:81:ba:46:c2:63:
68:89:d9:a5:de:07:ce:ab:da:72:bd:48:5b:42:cb:
18:31:c4:ef:7b:f8:bd:8e:0f:a2:9f:d5:c1:6c:a7:
03:58:a5:48:bd:8e:64:b7:1f:5d:4b:23:ca:01:20:
d0:39:c1:2a:93:5a:41:b0:68:f2:06:a5:0a:e8:5d:
e1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:68:FD:D7:61:03:35:81:C0:7D:3C:40:18:63:C9:7E:FD:78:88:88
X509v3 Authority Key Identifier:
keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4f:41:7b:2a:ee:da:83:a6:ab:61:d3:46:86:72:64:10:e6:
ec:95:77:9b:01:f6:6e:c2:ea:56:aa:89:f5:c2:ee:96:3b:1c:
ec:60:46:ca:d7:c5:3a:df:63:5c:a8:eb:2a:cb:b5:79:4a:44:
80:60:c2:68:07:90:66:26:9e:bb:e7:ba:e7:74:54:f1:ad:75:
41:c6:1e:88:84:79:4c:7f:14:fb:aa:51:f5:cb:7b:56:3f:3f:
78:f0:bc:48:b4:be:a4:24:af:77:90:9c:7e:f8:af:fc:f8:f9:
0b:8a:2b:d8:2d:71:4e:58:d0:3b:8d:55:f4:5e:11:01:3d:11:
ad:55:7d:0e:b8:2c:42:bf:f0:fa:57:60:20:ce:7a:3d:20:e7:
23:51:2a:17:84:94:49:54:2b:b6:22:7c:b1:cb:6a:96:ee:1d:
77:2d:e5:7b:7d:e8:96:9b:9e:36:bb:f9:02:b7:83:a0:b1:2c:
4d:7c:07:b4:fb:99:2e:70:2b:27:0f:01:25:a5:4f:1e:72:00:
56:a1:64:7e:26:49:6f:b2:60:fd:e6:c4:84:cc:ea:b2:46:30:
7e:36:08:7f:ca:4b:2b:62:ab:f0:29:51:35:56:03:37:07:5b:
30:78:b0:1e:29:02:e1:09:8b:dd:be:98:2b:8b:f7:c4:c7:94:
b8:59:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:33:47 2025 by rpki-client