Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: ln3zKBIj8CVDO+kJrR5t0A4K81j7DtZj7K9JRB4luqM=
Subject key identifier: 86:C0:7B:76:FD:1B:82:E5:AE:67:87:CF:F6:86:4A:EE:B0:14:FC:54
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 019677FAE2259314258F0DD2599D8F72D623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 16:00:52 +0000
Manifest this update: Sun 27 Apr 2025 16:00:52 +0000
Manifest next update: Mon 28 Apr 2025 16:00:52 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: IeR8ymT+QXH+bXLQyplCNUb0UyWut+gI/DSrbhGLciE=)
2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:e2:25:93:14:25:8f:0d:d2:59:9d:8f:72:d6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Apr 27 16:00:52 2025 GMT
Not After : Apr 28 16:00:52 2025 GMT
Subject: CN=86c07b76fd1b82e5ae6787cff6864aeeb014fc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:12:6d:74:65:a8:a9:95:58:2b:fb:be:35:50:
7c:66:39:c5:22:ec:0f:5c:75:31:c0:06:85:b9:68:
90:ee:3d:88:4a:0d:d9:11:07:a0:94:6e:c5:2c:2e:
23:a0:f5:46:44:3c:06:84:96:c4:86:4f:46:11:70:
0f:de:19:b3:07:78:84:1e:05:9b:cf:d3:e9:75:83:
6f:6d:3b:0b:12:79:46:e8:92:45:5f:ce:f6:6d:b6:
dc:85:af:1a:57:f4:ae:42:49:bb:cd:a1:b4:34:8d:
82:7b:10:17:31:35:d4:04:b2:9d:8d:b3:5c:6f:8f:
4c:37:de:e5:bd:54:be:f5:7c:17:61:92:df:b8:74:
6e:08:f1:90:6a:53:0b:68:02:61:e1:e3:2f:75:c9:
e8:3d:e8:fb:81:b4:78:1f:0f:84:d6:ac:d1:b3:a7:
07:3c:ce:fc:ff:7b:8c:3b:fd:4d:bb:b7:6e:34:06:
d3:12:11:6a:86:c0:c4:55:fb:be:01:69:a3:04:0f:
a1:e9:08:2e:b6:cb:95:1e:37:f2:fa:54:d7:16:de:
98:48:ab:53:8a:25:53:b7:4e:c0:3c:64:ea:8e:e6:
8d:22:7d:89:09:9f:c8:b0:ad:33:4c:56:67:40:22:
16:bf:84:00:21:72:82:22:37:dc:93:21:93:e4:2b:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:7B:76:FD:1B:82:E5:AE:67:87:CF:F6:86:4A:EE:B0:14:FC:54
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2d:d6:82:7d:36:8d:da:f8:28:8c:d4:56:77:22:66:4f:e4:
2b:8c:59:dd:f8:6d:21:b1:c4:b8:0f:3b:43:3c:82:e6:37:cf:
28:16:4d:cb:f5:ab:00:b6:19:2b:5d:c8:0f:73:2b:ed:6c:a6:
47:f1:8b:34:dd:0c:9f:b3:d5:9e:d5:31:ad:20:09:cb:68:11:
70:fd:4e:72:2f:a1:b6:74:5d:e6:dd:52:10:0a:a6:31:dc:06:
15:49:fb:3a:06:32:3c:9a:10:db:9c:14:26:74:58:f3:12:b7:
3c:49:fa:98:14:42:49:3d:d9:3e:06:f4:3f:34:36:a0:1c:fe:
a1:cc:07:f4:5c:3a:6f:80:15:b1:fd:57:07:c0:bd:05:a0:8b:
e8:d5:ee:d5:89:ca:24:3e:e5:9f:de:ee:2e:11:d0:40:e4:1c:
ad:41:1d:3e:44:cb:b1:b3:99:ff:4b:7d:1c:75:71:c2:6c:6e:
52:03:22:d8:98:c4:21:01:64:76:ff:55:3f:b3:42:16:2c:bb:
84:1d:6a:b9:14:55:fa:d4:ae:d6:83:d7:1d:e5:f7:f7:43:4d:
b2:93:ba:b9:2a:00:18:d9:39:b8:58:d7:cb:46:3f:64:0e:d9:
1b:20:02:d8:de:fc:eb:b9:cf:f9:50:c6:6d:3d:c5:c4:3a:0d:
7f:6a:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:05:04 2025 by rpki-client