Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File: E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier: XMCYXghceQEMUzGrbm4sPtPTsLQdW1elBvjcdqjCr58=
Subject key identifier: DD:2F:7B:01:11:7F:7A:DF:1E:27:7C:4C:82:47:07:A8:BE:23:73:3F
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer: /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial: 01967AC5085124171FFDB836515F892D7579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number: 0B95
Signing time: Mon 28 Apr 2025 05:00:55 +0000
Manifest this update: Mon 28 Apr 2025 05:00:55 +0000
Manifest next update: Tue 29 Apr 2025 05:00:55 +0000
Files and hashes: 1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: ++s+1LVGoawQ3XZ1plOTkIsDYJArhVu4gF1uiG/mLvo=)
2: HN5Ai7UYMPmItHMFu1UIru4_irQ.roa (hash: uhP51xaan/wVcnPelAPmsRFjLXlTf1vXwd1upBi15zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:08:51:24:17:1f:fd:b8:36:51:5f:89:2d:75:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
Validity
Not Before: Apr 28 05:00:55 2025 GMT
Not After : Apr 29 05:00:55 2025 GMT
Subject: CN=dd2f7b01117f7adf1e277c4c824707a8be23733f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:75:4b:25:04:67:82:ba:73:4f:98:d6:f2:
64:9f:04:50:10:21:6f:0a:3e:7e:b8:bd:80:b5:fd:
e9:3e:25:78:63:29:e2:ee:4b:f5:82:92:7e:57:df:
63:69:eb:61:66:e2:93:bc:22:31:51:fe:36:34:70:
c9:9b:1b:ec:3c:15:1f:76:bf:f3:3f:e4:15:0e:55:
2c:2a:26:b7:de:70:57:a6:9a:4a:78:64:d0:59:95:
78:4c:24:38:12:e9:46:23:7b:41:80:d6:d8:bb:bc:
1b:6c:bc:85:c9:c7:a1:e5:f0:05:c2:ef:71:4f:5e:
ed:4b:17:1d:1d:08:94:07:af:50:d7:f3:54:9f:62:
f1:aa:bc:0a:8b:6c:6a:e6:74:44:1a:51:64:e4:f1:
1c:31:cf:c1:b9:13:ba:79:79:c4:62:90:81:d9:3f:
8d:b7:5d:97:d3:e2:aa:b3:f3:a3:2e:98:fd:cd:46:
5f:6f:9c:ce:03:8d:19:63:75:b8:12:82:07:c4:3b:
e2:d2:40:b6:a3:94:c8:38:19:d5:a0:02:a1:40:ff:
de:4d:57:7d:45:7a:80:8c:09:1c:a4:e2:86:f0:31:
3c:c2:3f:0c:d8:5b:8f:1f:0d:c1:07:98:df:64:a4:
31:14:37:fb:d0:cc:c3:41:52:b6:9d:62:ca:00:e2:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2F:7B:01:11:7F:7A:DF:1E:27:7C:4C:82:47:07:A8:BE:23:73:3F
X509v3 Authority Key Identifier:
keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f7:2c:8c:5a:a1:02:c0:d3:8c:e9:bb:78:c9:16:4f:5b:a9:
37:5c:7b:00:bc:15:88:7e:05:90:57:c1:89:76:21:bc:0b:16:
10:bd:4c:1d:45:29:2d:1c:80:21:d0:1d:96:04:da:b0:0c:7d:
ec:26:16:4e:cb:dd:37:3b:18:1f:0e:e5:26:11:75:3c:f5:13:
f9:f2:a3:8b:35:c5:cc:f7:a3:1a:be:15:0d:55:1c:b3:f7:92:
c0:c3:54:fa:54:6d:50:07:ca:8e:e5:a0:77:8e:b4:f8:eb:26:
c2:7a:6a:d5:31:41:7d:63:ab:4c:a3:d8:30:f1:22:27:05:ca:
bf:a6:8d:bf:6a:b8:32:26:1e:bc:2d:be:1c:b1:80:81:3b:41:
31:ff:eb:5e:21:d4:1f:f4:b2:41:76:15:d5:c0:ff:e9:58:c8:
46:6a:26:b0:41:5d:f3:82:e2:09:9b:2e:a0:56:63:fe:2a:dc:
e4:3d:42:5b:a8:e2:d9:c1:9e:37:02:02:cb:ab:52:7f:6a:2b:
13:fc:ad:24:7c:25:e0:1d:3f:0c:6b:e1:cd:8c:63:2c:6a:ef:
d6:2d:6a:d5:a4:03:90:60:81:79:29:4d:41:5b:86:ef:1d:bf:
17:cc:52:cd:2b:f0:cb:78:92:6c:8a:64:43:7a:b0:e8:d2:93:
6a:34:a0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:32:58 2025 by rpki-client