Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File: E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier: xCNmUZ6vPf32qi9ZKVX3x08TCw9GLD5D8FazCbTae48=
Subject key identifier: 89:7C:FF:6D:0C:1A:D0:BE:07:58:F0:91:A4:E4:9E:6E:03:62:C6:54
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer: /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial: 0196741E408BF03A26705B2B2E6194309F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number: 1241
Signing time: Sat 26 Apr 2025 22:01:01 +0000
Manifest this update: Sat 26 Apr 2025 22:01:01 +0000
Manifest next update: Sun 27 Apr 2025 22:01:01 +0000
Files and hashes: 1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: KueytJ3xiwUubiqRgy0K5M0nPgmnqVj/jnoFsM2fvbI=)
2: jr4b-Rf0xfPafQWq2uvd9nWvLEg.roa (hash: Xv/PqNN2xhkW4QGTc+jzafFg6jr4IL/yGvEj1fBOV08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:40:8b:f0:3a:26:70:5b:2b:2e:61:94:30:9f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
Validity
Not Before: Apr 26 22:01:01 2025 GMT
Not After : Apr 27 22:01:01 2025 GMT
Subject: CN=897cff6d0c1ad0be0758f091a4e49e6e0362c654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:16:97:a9:ac:6a:2e:1d:28:3d:b0:5c:8d:
b5:64:d0:5b:ed:04:5b:c6:67:21:e3:4b:eb:74:3f:
11:0a:29:24:8f:75:4f:69:61:c4:7d:ae:99:dc:c2:
10:1a:99:81:75:21:be:a0:ca:fa:c2:bb:db:68:da:
86:9b:d7:54:fa:5c:a0:3c:6b:c4:c0:c4:20:f3:df:
e8:88:11:07:cf:df:ae:ff:72:cf:66:08:09:c1:78:
94:0a:30:74:e9:31:92:9e:89:4c:35:81:78:c9:e7:
e7:ae:2e:40:5c:cc:ca:7c:ec:cb:59:3a:45:87:03:
8d:fa:6a:73:8e:1c:43:cf:5b:0b:96:f1:9e:c1:fe:
61:c8:df:b7:a2:ae:43:ae:f8:a8:d1:b0:cd:ce:3a:
d1:41:6f:c6:ea:f6:f1:cf:d3:a5:aa:8d:94:ae:25:
a9:52:96:65:81:7c:c4:19:d8:1d:a5:6e:6d:48:44:
26:b3:72:c9:38:ec:16:97:ad:0d:29:3e:3d:cc:d1:
9e:e0:73:33:d4:bb:5c:07:7f:55:e1:f5:28:70:fd:
ca:00:33:01:63:b3:eb:aa:4d:cf:4e:6b:ca:da:5e:
3c:33:43:19:69:24:88:bd:ae:6e:4f:a5:80:47:03:
cf:88:1d:af:eb:bc:ec:57:97:4d:15:e1:ee:70:c8:
3d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7C:FF:6D:0C:1A:D0:BE:07:58:F0:91:A4:E4:9E:6E:03:62:C6:54
X509v3 Authority Key Identifier:
keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a5:8f:ae:f2:57:9d:e4:89:e6:c8:47:25:4f:13:cc:70:a8:
6a:4b:ee:1b:7b:ac:50:29:0b:be:45:9c:0b:26:f5:87:bc:83:
24:95:b4:f0:66:80:a7:22:e8:49:04:39:44:27:36:a7:01:35:
89:fc:23:53:2f:5a:94:64:0a:61:7c:97:a1:a5:3b:48:e4:9b:
4e:98:d5:9a:d8:0f:e6:d0:13:e8:35:19:79:4c:f5:55:57:c0:
c8:ff:38:da:53:a7:a0:b2:ec:d1:1b:b2:da:07:d8:61:1e:f9:
da:4a:72:37:4a:31:64:d0:e3:26:cb:23:d2:f5:0f:da:0f:11:
67:17:0b:66:3d:96:d7:0f:bb:99:45:bc:35:e9:e7:9a:47:1e:
01:36:d1:fa:23:52:67:90:6a:95:5d:4f:6e:91:27:e0:7e:28:
8f:93:78:d2:be:7e:01:c7:b1:32:d2:33:ff:4e:5e:94:1d:9c:
3f:08:84:30:e3:bf:d2:eb:d6:ca:84:14:4d:72:6b:19:7b:cf:
c8:8f:f5:bc:f3:01:c5:6c:06:c1:36:67:8e:ca:29:e3:9e:1d:
9a:41:a6:11:83:1c:c8:c5:43:ed:be:6d:da:aa:1e:28:d1:7c:
09:d7:81:15:2a:70:f3:4d:1f:65:d1:0e:0e:87:40:58:b3:08:
ee:0b:be:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:28 2025 by rpki-client