Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
File: e1dU5NIIxkNfGr7JN83iAAkgTcA.mft (raw, json)
Hash identifier: VdGmr8E01fzwwvz28HWkkipl4vGemW9dLcMWGvgK6ic=
Subject key identifier: 4B:79:CD:90:BB:52:78:68:63:3E:A3:CB:5F:F0:D8:58:E2:84:69:38
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 019680FD9CB3D4DD564327450A97E444773E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
Manifest number: 0971
Signing time: Tue 29 Apr 2025 10:00:26 +0000
Manifest this update: Tue 29 Apr 2025 10:00:26 +0000
Manifest next update: Wed 30 Apr 2025 10:00:26 +0000
Files and hashes: 1: 67OzM8ECZbyoq_BnZX1dgSdsSqE.roa (hash: g9PYZvAqU4JsF+aihO2ckiHQRSBgUe4u8ImvTFXc4Uo=)
2: EsKSgJ8EQmtQ4eatv1jfClm65kw.roa (hash: KfQqwkTsCtwKGnXEQFbFhy/ovkmWCSEcDlc1yTA8r8k=)
3: e1dU5NIIxkNfGr7JN83iAAkgTcA.crl (hash: 2i4a55fh/5poM8NE1NfJqFxdfgsOfS8gQry4lEpMDuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:9c:b3:d4:dd:56:43:27:45:0a:97:e4:44:77:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: Apr 29 10:00:26 2025 GMT
Not After : Apr 30 10:00:26 2025 GMT
Subject: CN=4b79cd90bb527868633ea3cb5ff0d858e2846938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:3a:67:1e:9f:c3:13:25:3b:e7:36:83:f8:
d3:76:b6:b5:77:b6:9f:dc:36:69:dd:47:0c:dc:fa:
52:a6:6c:91:e0:03:53:9f:d7:a1:0c:b7:14:aa:58:
a3:8c:5a:1a:dc:e6:d2:4d:9a:2f:de:15:0e:c8:b0:
71:a8:5b:55:66:fe:6b:26:5d:11:c3:a0:54:be:d5:
8a:58:fe:04:4a:a1:01:13:73:55:c1:15:00:b2:da:
b1:82:8f:68:17:b5:95:e2:41:94:77:5d:f1:ed:9e:
f0:da:ce:ae:8d:08:ae:bf:4f:85:26:a5:8b:04:b2:
31:72:30:3e:de:53:b3:9b:a4:a6:40:8c:a4:5d:05:
23:a6:db:5f:c8:ac:8d:8f:5a:b3:d0:4e:f0:fd:c4:
9d:8e:e0:91:60:6a:4e:7b:49:23:28:85:f5:cf:2b:
2d:fa:ea:22:c1:08:91:70:d1:9e:3c:79:f5:5e:8c:
27:74:12:d3:24:4d:26:a4:8c:31:e2:b1:96:3d:07:
23:d6:f8:c2:6d:6b:e3:a9:2c:a3:c1:74:08:a8:06:
06:f4:72:6b:87:d0:6d:be:24:3d:5e:6e:8c:c0:40:
33:55:41:05:76:7e:98:15:38:97:18:fa:f1:f4:8e:
0e:7a:e2:2d:70:7e:89:45:50:de:a0:15:cf:fc:0d:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:79:CD:90:BB:52:78:68:63:3E:A3:CB:5F:F0:D8:58:E2:84:69:38
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:53:4f:5f:38:11:08:4a:11:ec:77:44:b3:20:82:c3:2e:b2:
57:2c:0a:44:98:10:5e:7c:eb:a7:a0:58:08:35:53:be:12:9c:
1d:96:db:c5:d2:1c:0e:7b:bc:f9:b6:d1:f9:6d:8f:68:97:5e:
02:d9:5c:d1:f6:40:42:81:02:6d:d9:1a:b1:45:71:5f:28:4d:
a9:0f:e4:67:61:01:9b:4f:0c:2c:bc:f4:83:9d:db:50:98:20:
85:95:ac:22:57:a7:0a:87:df:1a:37:ed:13:56:5c:42:4c:5b:
f4:62:7b:51:50:0b:72:f9:ca:28:0d:fe:9e:e7:62:7a:f5:a0:
a0:1d:56:e8:80:c9:81:e8:d6:57:aa:45:f3:a0:b3:b0:46:46:
9a:d7:df:72:c1:3e:71:60:44:64:d7:41:6d:4a:66:3a:d7:e5:
31:c2:2c:1d:62:44:50:6c:49:db:03:22:8f:87:49:ce:d7:ca:
d3:b0:dc:2e:db:c4:d8:23:82:f9:4f:9b:6b:16:3b:65:6c:34:
96:10:f3:a3:8b:3d:7f:6d:bd:76:15:74:64:a8:76:23:32:8d:
83:2c:14:e7:7c:bd:9f:48:a9:b7:97:77:b1:f3:63:27:87:0c:
21:b1:9c:c4:31:1f:cb:15:b8:42:34:bd:4c:1d:3f:94:ce:e7:
ad:af:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:13:24 2025 by rpki-client