Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File: E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier: l1PsjB8x/zcbrUSh/v7tIr+w142lYnPbhFsQ8844Qtk=
Subject key identifier: 30:0E:CB:09:C3:31:26:08:F0:81:2C:0E:46:8D:25:8D:8D:F0:7F:98
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 0196729DAAED2551D895C3093BD63C54F460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 15:00:57 +0000
Manifest this update: Sat 26 Apr 2025 15:00:57 +0000
Manifest next update: Sun 27 Apr 2025 15:00:57 +0000
Files and hashes: 1: 0rZo7T7QJSfK-cCHectv5r7maVc.roa (hash: ydGK6Xk1/nHzsPWXGP+mEEVT+bo9klxNhdh+HOQt8DI=)
2: 99X--GN0tUdbB7wXVNOGQxyvW00.roa (hash: DzsMRo6WJ9FJ0Pcv5LVEusYADeP8vZFSYsS2DB6NSss=)
3: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: iI5aXhqlNmgufz0N4zmAIr8sNDTisiyBFOjrRjf+URo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:aa:ed:25:51:d8:95:c3:09:3b:d6:3c:54:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Apr 26 15:00:57 2025 GMT
Not After : Apr 27 15:00:57 2025 GMT
Subject: CN=300ecb09c3312608f0812c0e468d258d8df07f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:02:d2:2f:0e:c9:67:e7:51:f4:99:f4:c2:
e4:e2:73:14:dd:b1:43:9a:1e:fd:61:6b:3a:14:c9:
8a:bd:97:6b:fd:46:3b:a0:8b:66:6e:38:93:73:f2:
b3:57:1c:02:c5:ef:ef:f9:1c:e2:2e:4a:6b:66:34:
59:e2:00:a7:72:0d:fc:fa:d3:62:e2:f5:4d:c2:cf:
8b:8b:bd:4c:ae:91:9f:af:53:26:bb:f5:cd:7d:cc:
e4:e6:28:a3:11:42:8d:f3:10:2a:60:13:e2:21:18:
48:54:88:5d:0d:3a:84:b4:1b:a1:d6:98:7e:77:78:
9a:be:d0:51:48:8a:60:e4:87:c1:82:66:f4:c7:36:
fd:d6:5e:e5:23:1a:1e:99:4d:b3:29:40:45:15:36:
94:c2:79:9f:17:6f:14:27:be:59:37:96:49:f5:db:
4a:af:39:87:0a:93:a8:40:1d:36:f7:90:fc:df:af:
20:9e:f7:58:95:27:24:a6:38:77:3e:94:f5:87:4e:
cb:78:81:2d:3d:bb:e2:13:ee:f4:e2:bf:96:c3:7f:
74:c2:60:d0:0e:ef:55:3e:a4:e9:09:f1:4a:ca:4a:
4b:5f:1d:f6:d1:d4:36:ad:ce:7e:12:62:42:f5:4d:
e4:cb:54:50:7c:dc:15:e6:10:0d:a4:62:aa:7a:ea:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:CB:09:C3:31:26:08:F0:81:2C:0E:46:8D:25:8D:8D:F0:7F:98
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e6:f0:8e:83:20:07:f5:a6:66:6f:64:60:31:b0:2c:af:3a:
5d:64:1b:d6:b2:d1:37:a9:8e:d0:06:b5:eb:3c:b2:89:b2:94:
50:dd:95:a5:b1:1e:a5:78:cd:63:61:05:87:cf:ca:56:0f:bc:
95:c3:28:1d:1b:9c:78:ca:af:1d:45:7e:9f:8e:13:03:13:c0:
3f:ec:64:d6:55:0c:2f:a6:a8:a7:15:bf:03:b2:f6:f9:85:01:
98:a8:3e:97:ea:58:06:66:d5:04:9a:00:e0:2d:8e:81:71:a8:
47:14:44:f3:64:63:17:0f:36:f8:a4:72:e6:40:82:d9:9f:91:
1a:84:44:8b:78:a2:a0:68:5f:8c:22:f3:a6:53:4f:43:93:e8:
18:e7:16:d7:e0:00:7c:81:b4:c6:e4:56:92:50:a6:af:27:dd:
4e:39:f0:f1:c1:86:21:47:94:82:7f:c0:7b:32:c2:84:e6:89:
da:3d:7b:84:10:2e:37:37:8f:c2:64:5f:10:11:93:3c:e3:99:
0c:94:d0:5f:17:ca:16:36:5f:a3:03:63:94:8d:72:d2:55:5d:
7e:8a:6c:68:5d:dd:6e:6f:e1:2d:37:be:be:0c:0c:db:f8:b3:
73:da:1d:be:b2:53:d2:09:33:cd:60:88:89:02:d4:08:d8:6a:
98:92:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:00:22 2025 by rpki-client