Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
File: E6-mzmVC4btSPh0DvQCk0it_2u0.mft (raw, json)
Hash identifier: kfTD+2aLypVsB2b6zkdXODDUP2rCbz1RDiHpDv8kq30=
Subject key identifier: 74:7B:F9:CB:05:74:C2:2C:AD:B3:AE:61:75:12:F0:ED:14:A6:66:A2
Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Certificate issuer: /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Certificate serial: 019681A2B461087F1DA78593B247D577B164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
Manifest number: 1027
Signing time: Tue 29 Apr 2025 13:00:45 +0000
Manifest this update: Tue 29 Apr 2025 13:00:45 +0000
Manifest next update: Wed 30 Apr 2025 13:00:45 +0000
Files and hashes: 1: 3RGBqUK3Xv0JP7ez0P-m3VNiDHY.roa (hash: yrCq7iHuvCP3ZZOy9TgGhkh7qYKM+uZzphtzhnPZGC4=)
2: E6-mzmVC4btSPh0DvQCk0it_2u0.crl (hash: WwkaVvr6QiBrSN29eeSgarzyyR7uXo1GZKTbZZ/kzWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:b4:61:08:7f:1d:a7:85:93:b2:47:d5:77:b1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Validity
Not Before: Apr 29 13:00:45 2025 GMT
Not After : Apr 30 13:00:45 2025 GMT
Subject: CN=747bf9cb0574c22cadb3ae617512f0ed14a666a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:52:8b:3b:85:2b:1b:1c:0b:f3:f2:72:ad:
29:9a:98:10:5d:3f:71:d6:16:ba:58:79:70:88:25:
42:97:c5:02:0d:c3:03:74:35:a4:1e:66:87:a0:11:
08:27:42:93:8f:2f:ba:a1:54:65:2c:22:79:ba:89:
5f:34:1f:44:0f:8f:7b:3f:0e:e8:6a:25:94:40:c9:
bc:76:5d:b6:bf:9a:86:c8:b5:f2:ee:60:50:18:f1:
12:6a:95:f2:66:b6:9e:82:fa:a0:90:66:2c:28:99:
62:8b:38:8f:7f:66:c6:f7:e2:11:01:ae:bb:a3:be:
04:d0:59:79:a0:d2:35:90:57:08:b6:6f:88:2f:cd:
1c:7c:38:75:17:4d:14:76:36:6d:f0:e9:1a:de:9a:
a2:8e:a0:57:1d:1b:5b:3d:7b:65:3a:ba:fc:4f:d1:
68:a1:8b:67:13:f4:cf:43:0a:d3:c6:3f:2e:e0:52:
e3:53:1f:1f:e4:5b:01:4f:0a:70:24:9b:4f:17:ac:
58:f1:86:72:61:62:41:07:3c:8d:9e:07:ce:ba:56:
41:fb:d4:16:07:15:59:94:de:d7:5f:e4:d4:35:39:
71:37:85:01:ea:ad:a8:ab:7b:ad:69:a9:4c:33:45:
4c:16:03:74:f7:42:4d:70:30:d9:6f:09:ab:9d:59:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7B:F9:CB:05:74:C2:2C:AD:B3:AE:61:75:12:F0:ED:14:A6:66:A2
X509v3 Authority Key Identifier:
keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:de:b7:b5:ed:e3:00:99:1b:76:f8:c8:72:2f:f5:cf:b5:4b:
65:e3:d0:ea:f5:29:ec:81:57:72:e9:4e:45:9e:eb:c4:05:0a:
5c:43:ca:9b:9e:78:b8:3c:b1:8d:db:fd:ef:9a:ef:19:c8:82:
1d:69:fe:84:60:0c:fc:4e:68:d0:53:32:d8:87:87:a4:fa:f3:
78:e9:4a:87:ea:96:b4:ca:e5:9f:eb:45:d4:e3:c1:da:b3:55:
2f:21:c6:1a:88:ae:98:b5:24:d4:1e:2b:60:8f:dd:74:2b:4c:
c9:7a:23:c4:74:5a:a3:8d:e2:b4:c1:07:73:46:6a:58:ee:9b:
d7:77:2f:04:2f:e5:eb:e6:a2:28:59:28:6c:af:f0:3c:2f:1d:
52:32:3a:23:7b:2f:b4:fa:58:68:3b:56:6d:54:52:16:3b:4b:
4f:ea:35:e2:f8:30:77:35:f1:19:6f:ac:b0:81:08:ca:ec:6a:
9f:0d:d2:db:d2:3c:63:2e:9b:9c:39:50:17:3d:28:69:77:71:
95:24:9a:11:a3:0c:1c:4d:7e:6a:92:65:33:71:fa:30:11:60:
7a:6e:3d:a5:fa:0e:4e:b8:55:ea:a5:8c:c0:7e:25:5f:02:1d:
ee:b6:ec:51:78:5a:dc:d5:22:e2:cf:b9:f7:52:5f:77:6d:c2:
ee:bb:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:16:06 2025 by rpki-client