Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File: 13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier: e61DxoVWWt+UIUOvqQnOc9V9rEeidVJXUNtIkyAnnzc=
Subject key identifier: 9D:25:AF:32:0D:6D:4B:20:88:07:C6:60:7A:CA:E5:10:1B:4D:CF:27
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial: 019690DEBF7FF90451001E4ABF6476C25F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number: 023E
Signing time: Fri 02 May 2025 12:00:39 +0000
Manifest this update: Fri 02 May 2025 12:00:39 +0000
Manifest next update: Sat 03 May 2025 12:00:39 +0000
Files and hashes: 1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: j40iWADoV1mZIFr7Ewwegf7pZ73SU830fuCef8+EMv4=)
2: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (hash: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:de:bf:7f:f9:04:51:00:1e:4a:bf:64:76:c2:5f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Validity
Not Before: May 2 12:00:39 2025 GMT
Not After : May 3 12:00:39 2025 GMT
Subject: CN=9d25af320d6d4b208807c6607acae5101b4dcf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5a:9e:8f:80:a7:82:e7:51:06:12:37:96:a1:
99:64:c8:dd:70:c7:ec:c0:ba:09:ea:2c:32:72:30:
e9:b0:9d:41:9b:22:8b:66:44:ef:b4:18:70:55:6a:
5d:59:00:9a:19:d2:cc:35:49:b6:70:dd:3a:41:f3:
75:00:bd:93:22:3b:89:e4:cc:87:33:8f:d0:15:39:
b4:e1:b0:ef:14:17:00:9c:69:3a:84:21:50:cc:2b:
39:28:2b:2a:9c:f0:a6:cb:3d:d0:b7:ed:78:f4:3c:
3d:76:ba:9c:c9:06:ae:02:59:eb:46:de:38:aa:e4:
c2:3d:4d:ea:22:6a:69:91:4e:f7:77:ef:6f:73:7a:
e1:7e:b0:90:9e:2e:34:02:b0:2d:3f:be:4e:7e:e0:
e6:11:e4:95:36:79:24:83:bd:8f:2a:8a:e6:9c:d0:
1c:85:ba:c1:83:04:9c:1c:d4:42:31:cb:26:92:0d:
5b:47:95:4a:be:e1:cd:22:d3:8c:4b:c7:12:b1:b9:
f0:d4:66:80:ca:01:21:a7:8a:d5:e7:32:a8:27:2e:
c7:43:a7:c6:0c:54:35:4b:6d:ec:24:6a:e4:9d:62:
d7:c7:43:63:99:9c:3f:17:fa:cf:3f:8e:7e:e9:8e:
3a:78:a8:4c:a0:97:de:e6:e9:77:2d:75:9c:73:af:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:25:AF:32:0D:6D:4B:20:88:07:C6:60:7A:CA:E5:10:1B:4D:CF:27
X509v3 Authority Key Identifier:
keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1d:77:8a:33:12:60:10:82:2e:c0:68:b9:59:a8:0e:35:66:
7e:4f:d8:7f:90:16:50:7c:cf:06:32:3c:f6:7e:f7:e2:e0:ee:
d3:0a:42:f7:ad:02:55:96:8e:75:58:11:fa:76:47:f8:82:8a:
56:b3:88:3f:40:88:4f:9d:db:48:64:60:f7:5a:8f:ac:e7:2e:
01:67:1b:f3:09:5c:5b:29:37:ad:9d:60:e9:2d:64:50:0d:b4:
2e:a1:5a:2d:4f:3d:bb:c0:e6:36:69:c4:f6:0e:fb:1c:4a:bb:
9a:af:ce:c2:81:2e:be:60:29:4a:7d:8d:bc:ae:2e:ba:fa:1f:
b0:b5:52:20:b1:b8:a6:a5:1d:bd:e3:f4:9e:26:63:98:0c:ef:
27:22:73:2b:e5:ce:f0:c9:3d:88:80:2f:ef:e0:03:ad:0a:b6:
fa:58:d3:a6:f3:52:d6:be:13:d5:a1:03:9f:0f:90:95:ce:66:
56:0f:40:15:98:4c:ed:71:d4:ad:b5:01:53:4a:10:7e:70:c8:
1f:04:7e:21:25:32:80:07:15:92:0d:c3:e6:38:40:e9:45:c6:
8c:79:d7:ed:55:2f:9b:07:69:af:b7:94:be:91:ee:b2:01:1c:
28:14:51:8c:cd:7c:e4:21:da:51:33:99:1b:d3:5a:e5:2f:fb:
20:00:6b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:32:46 2025 by rpki-client