Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
File: E3W0CTjYfNMycmqqSBqnGubphxc.mft (raw, json)
Hash identifier: rTkSQPucWReytFTWPrpde8h1W2qY6wRWcdh8/KgJgTE=
Subject key identifier: 82:C2:16:22:2F:29:F7:0E:35:15:B0:1C:3D:06:44:46:2A:B6:94:38
Authority key identifier: 13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
Certificate issuer: /CN=1375b40938d87cd332726aaa481aa71ae6e98717
Certificate serial: 0196911654B66081645AD3F914A3D35AC1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
Manifest number: 0E1B
Signing time: Fri 02 May 2025 13:01:21 +0000
Manifest this update: Fri 02 May 2025 13:01:21 +0000
Manifest next update: Sat 03 May 2025 13:01:21 +0000
Files and hashes: 1: E3W0CTjYfNMycmqqSBqnGubphxc.crl (hash: 7pXK+IQ3oypNDqvrSGIPPzkpFPuvQIbZWkeVpHMV9E4=)
2: mCL_9-CtuY-87CF98-9c33rXIUE.roa (hash: wOWeLe9RAlzQTuA4jLsQKE3f+PG+mmJoHLvKrWcnYc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:16:54:b6:60:81:64:5a:d3:f9:14:a3:d3:5a:c1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375b40938d87cd332726aaa481aa71ae6e98717
Validity
Not Before: May 2 13:01:21 2025 GMT
Not After : May 3 13:01:21 2025 GMT
Subject: CN=82c216222f29f70e3515b01c3d0644462ab69438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:0a:5b:00:92:e1:bb:68:f2:97:8e:bb:95:
83:96:21:b8:3d:ff:ae:04:9b:cf:7a:5e:70:f9:9e:
77:9d:6f:75:c5:a5:ea:74:ca:d5:0d:98:ad:eb:e2:
5a:8c:ab:63:61:e8:aa:7c:6f:80:0f:4c:4c:d8:d3:
bc:88:43:c7:97:59:ad:a0:a4:f4:7a:aa:aa:94:a5:
57:7e:bf:27:2e:bc:33:71:44:da:3c:bf:df:56:5a:
f9:4a:07:b4:a4:ab:04:25:72:38:de:d8:12:ec:98:
3a:19:6c:20:7f:7b:72:03:ee:cd:bd:d5:86:ad:98:
d8:4f:bd:9f:38:6c:89:62:a6:65:c3:98:1c:20:c1:
5e:cc:22:26:98:d6:f9:0e:87:bc:d5:9b:bc:55:50:
4b:22:8f:c8:33:8c:19:eb:66:47:dc:0e:75:32:51:
93:91:87:12:c1:c1:5e:3a:c2:ad:46:29:12:9b:bf:
3c:9c:5d:7e:fa:61:16:76:00:e8:a6:e4:db:4b:47:
4d:dc:97:1d:86:59:23:31:c6:5e:8a:7b:a3:5f:6f:
5d:de:45:6f:cf:4b:de:7b:45:76:65:b7:27:ef:b5:
60:f8:84:df:ed:a4:29:0e:fe:2e:25:d8:bf:00:aa:
84:a7:cc:71:84:76:f5:24:f4:b7:86:d2:93:c7:3e:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C2:16:22:2F:29:F7:0E:35:15:B0:1C:3D:06:44:46:2A:B6:94:38
X509v3 Authority Key Identifier:
keyid:13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f3:62:fe:65:c6:dd:9b:18:9b:30:45:71:b0:8d:2d:3b:38:
de:c9:b8:6e:df:53:13:c5:a3:0e:80:3f:1c:91:8a:12:da:d4:
70:5d:8c:7f:f8:e8:8e:39:a2:33:6f:0f:b3:09:ce:db:81:1d:
28:37:7d:4b:be:ee:73:16:5c:d9:28:52:c8:c6:e5:88:2d:1f:
17:17:db:60:15:44:e8:b3:52:2b:79:6f:81:49:de:10:3b:aa:
f3:95:85:42:db:37:8a:e3:cf:3e:96:32:53:0f:15:f8:66:58:
3f:19:fe:47:d9:fc:ef:a8:56:ff:7b:29:72:b2:5d:a5:77:a9:
dc:0e:34:12:ef:19:d4:4b:b7:89:8e:0a:59:6a:88:e8:e7:37:
4c:bd:ff:27:4b:5b:7b:8f:55:bd:04:2a:a6:d2:d6:8d:70:d3:
ac:d6:c6:30:dd:ba:22:b7:05:63:c4:5b:80:75:e5:79:b0:b6:
43:c3:a8:27:fa:36:0b:bf:01:91:0f:95:54:e1:4d:2b:10:c5:
00:5d:9d:0d:f4:86:08:58:13:08:24:38:87:22:44:24:ac:77:
f4:b3:08:e4:8c:ae:ef:bb:c6:41:bf:cc:52:fe:82:35:9d:23:
a8:01:21:1d:4e:37:a5:be:9d:b9:48:fb:7d:ab:40:99:96:b0:
fc:e6:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:24:18 2025 by rpki-client