Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
File: ENJnhg06QDsA4aYcVDSs_265c5Q.mft (raw, json)
Hash identifier: V95JvzCgZmy1tZu/Hvxi1q4gmxgupaSoBkKaPPUfC+c=
Subject key identifier: 80:89:57:2D:56:E5:56:80:EF:C0:CD:5E:37:6F:68:8C:AF:35:AC:05
Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
Certificate issuer: /CN=10d267860d3a403b00e1a61c5434acff6eb97394
Certificate serial: 0196824719772C06D9DB65D0CF8F8C42723B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
Manifest number: 14A8
Signing time: Tue 29 Apr 2025 16:00:19 +0000
Manifest this update: Tue 29 Apr 2025 16:00:19 +0000
Manifest next update: Wed 30 Apr 2025 16:00:19 +0000
Files and hashes: 1: ENJnhg06QDsA4aYcVDSs_265c5Q.crl (hash: r2EU1qHI+/78NIVzgleGObfMvBPqMzez8GupJC04VXA=)
2: dBEJ6Z4T0iJXRXy3ic-Gmbtq2zk.roa (hash: 2ngGgbsBeXS5oDaHpMWchshDHqxPpAQ3xlLFSQTtD/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:19:77:2c:06:d9:db:65:d0:cf:8f:8c:42:72:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394
Validity
Not Before: Apr 29 16:00:19 2025 GMT
Not After : Apr 30 16:00:19 2025 GMT
Subject: CN=8089572d56e55680efc0cd5e376f688caf35ac05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:8b:3e:95:8e:9d:29:5f:26:d0:37:0d:40:
eb:6f:67:4c:75:82:e7:d2:3e:f2:7d:9d:67:d2:0f:
86:55:60:37:ea:0d:53:d5:8c:0f:0d:e2:87:f7:0a:
17:36:ca:d7:56:45:d4:2e:76:ab:34:e3:7e:38:ba:
aa:4b:85:ba:1f:f6:82:e6:65:7e:2c:f3:f2:be:2f:
9f:cf:6a:88:95:6e:a7:08:67:20:a1:2c:85:15:bf:
08:2e:6a:81:a0:cc:7e:c3:67:4d:3e:3e:5e:89:f0:
ba:12:92:c4:ee:23:4b:8d:37:b4:33:d1:45:e9:0d:
b7:50:2f:47:e0:92:96:cf:70:d9:78:93:66:af:be:
ec:59:cd:12:ca:08:e9:68:2b:b5:5a:24:83:a3:ad:
ec:d5:9d:6c:29:fe:92:d5:af:8f:71:b1:db:dd:af:
23:cd:a7:12:f4:35:3f:77:ac:dc:ce:ae:43:34:0d:
e9:f5:1d:a3:d3:de:12:5e:ff:e2:db:34:3c:db:97:
be:3d:78:39:bf:d0:f3:83:48:df:0f:97:8f:a1:9d:
ad:6b:88:d9:d9:20:78:db:a5:29:34:8c:0a:d6:51:
e7:20:e6:90:46:0b:fd:5f:60:9f:99:8f:ec:38:50:
b7:54:2f:9b:ef:17:c5:b4:3e:1d:04:d9:2b:34:85:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:89:57:2D:56:E5:56:80:EF:C0:CD:5E:37:6F:68:8C:AF:35:AC:05
X509v3 Authority Key Identifier:
keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:34:7f:75:4b:31:9b:5e:de:89:40:1f:79:a1:fb:28:f7:68:
b0:41:f4:ea:b4:24:48:28:7d:1d:18:bd:bd:83:f9:d9:c8:e2:
56:75:f5:49:ff:68:08:99:58:34:b6:ac:dc:0c:b2:37:02:fa:
ef:50:be:b4:e4:67:cd:d6:0e:6a:9c:82:79:69:47:cb:7d:47:
37:56:09:e6:6b:93:39:89:df:27:72:d4:ef:56:07:f0:4b:74:
2e:15:65:46:d3:35:72:23:ed:6d:df:4c:1f:10:e6:26:77:6d:
2b:4c:5b:ce:53:5a:5f:29:ee:9b:58:bc:9b:4a:56:f7:22:bb:
90:24:55:2e:a9:20:b9:11:a7:4e:a0:40:c7:1d:63:4f:98:f9:
65:fe:5d:2e:63:32:e6:de:f8:1f:61:59:6e:92:b0:50:ad:9f:
07:4d:02:77:16:e9:3a:1e:6d:1b:6c:f1:b0:04:e5:4a:9e:9a:
99:cd:93:be:51:2d:a4:b2:55:88:29:43:52:c8:77:5d:8c:02:
8e:04:6e:b2:96:bc:55:d0:dd:a2:b4:41:fa:54:26:f8:34:a5:
96:11:de:7f:29:8e:f2:b2:69:f7:c6:bc:13:fa:fb:2a:cf:b6:
bf:e8:a5:20:0e:8d:3f:ea:8e:ee:38:38:a5:3e:f2:85:f2:97:
03:97:0f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:06:45 2025 by rpki-client