Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier: qavWqcLpZrOdzO5M2Hco9Yc+4oVFh9g977wkwyM5f0I=
Subject key identifier: FD:34:D2:2B:5F:06:18:AA:D8:1C:48:DD:F8:8D:A9:6E:32:1E:03:58
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial: 0196AFC4ABFBD48E0975D5793ABAD4E2DA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 12:00:23 +0000
Manifest this update: Thu 08 May 2025 12:00:23 +0000
Manifest next update: Fri 09 May 2025 12:00:23 +0000
Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: nK/f2AD2brVjI6SnA9U9LHi0+sdG31I7vFoUDkQu6YQ=)
2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:ab:fb:d4:8e:09:75:d5:79:3a:ba:d4:e2:da:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Validity
Not Before: May 8 12:00:23 2025 GMT
Not After : May 9 12:00:23 2025 GMT
Subject: CN=fd34d22b5f0618aad81c48ddf88da96e321e0358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:89:bf:fd:91:23:38:92:e4:52:de:0d:73:
36:b1:d6:21:d9:1e:22:f9:1e:b5:c4:49:ce:a7:01:
53:10:94:33:a6:0b:04:c2:bc:08:15:68:1f:20:84:
30:ce:ac:17:16:4d:bc:44:dc:f8:f3:a8:36:af:b5:
b7:b8:72:e4:7b:1a:0b:a4:74:f9:ca:0e:6a:d5:be:
29:3a:7f:44:c8:08:db:22:6d:bc:a2:19:b8:34:13:
75:30:7d:e4:08:f4:7f:b8:dd:3f:cb:fa:c5:8a:0a:
51:fe:9f:18:c7:a7:ab:0e:91:6a:9a:34:b3:46:8e:
59:ac:a8:29:5e:7c:8d:dc:1f:b6:9f:e5:d9:c1:c2:
db:15:56:d9:35:f3:4f:5d:16:78:40:7d:7c:18:5c:
5c:6a:cc:7d:a4:ab:bb:78:eb:df:b5:01:f9:c9:ad:
b2:42:83:99:ed:eb:87:51:85:bc:19:b9:d9:7d:b6:
85:65:b9:35:e8:f9:c8:d1:14:e3:4e:18:b1:4a:ca:
72:2e:0e:17:3f:f2:e2:8a:3a:7e:29:c7:fd:5a:0d:
4a:61:48:ba:b8:92:9f:41:df:9d:39:3d:b4:1c:5d:
bd:45:5b:c1:14:a9:f8:55:20:69:fd:a5:62:dc:f3:
4f:6c:e2:86:c8:24:3b:3c:d9:a5:d9:c9:01:c9:c1:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:34:D2:2B:5F:06:18:AA:D8:1C:48:DD:F8:8D:A9:6E:32:1E:03:58
X509v3 Authority Key Identifier:
keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a8:d7:ba:7c:e0:0f:11:91:d1:1a:0e:e8:40:ae:c7:50:26:
3f:a9:53:27:32:85:92:e2:1a:a9:c3:df:72:94:21:24:3f:3a:
22:2e:42:c7:c9:24:33:2e:3f:4c:32:0d:c0:68:77:30:1f:72:
3f:23:a0:ab:5e:0f:79:97:69:97:6a:f4:db:a0:fc:04:f3:b9:
28:a7:43:9b:0c:2d:62:41:a0:29:64:2d:fc:f7:82:7d:ca:81:
2e:d4:88:da:16:28:f4:2c:ca:1c:7b:2a:da:78:35:b9:22:d6:
6a:ee:cd:4d:a8:15:2c:0d:04:6f:cf:cc:6e:a0:fe:f2:1f:81:
91:76:29:65:a0:f5:65:15:87:c0:a1:99:f8:35:66:86:73:40:
fc:46:4a:cf:e5:cf:d7:4e:da:1f:01:73:07:15:fb:ef:d8:ee:
dc:9f:44:a8:33:d2:bc:0b:57:44:3a:24:45:b9:7d:bb:6d:24:
b8:f8:d8:a3:c9:4c:90:9d:a7:98:86:51:e3:60:5a:20:93:03:
a3:05:f2:ac:44:81:39:0d:cd:43:28:73:08:12:b4:33:51:4b:
6b:cb:2e:f3:d8:a3:cf:53:d0:aa:3c:e0:a7:b5:00:87:13:39:
58:06:0e:e2:c4:52:a7:d1:a1:0b:f5:6b:04:57:f5:42:da:34:
68:a5:46:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:54:42 2025 by rpki-client