Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File: 9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier: mYW6j9vI5tVUx7eJeoqksug8JPwTz7cJ832kdlgBw/Q=
Subject key identifier: 75:3A:CF:F3:B5:87:8E:B1:C8:E5:82:64:8B:80:2E:8F:00:09:B1:E8
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial: 019681A30F0BA09680E95E1A0D5F577DA179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number: 0A34
Signing time: Tue 29 Apr 2025 13:01:09 +0000
Manifest this update: Tue 29 Apr 2025 13:01:09 +0000
Manifest next update: Wed 30 Apr 2025 13:01:09 +0000
Files and hashes: 1: 2iT_kM3PkUEf8NeJ29enDVY5XmM.roa (hash: Dzh4bklpE4pirUMSN3Hq/Ic2ypp5OVgKHU7vTB3ErEs=)
2: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: V07DVKNSmdSjA4H/ZmUJkuM+8ZxKvp2qRuMzsTOUDPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:0f:0b:a0:96:80:e9:5e:1a:0d:5f:57:7d:a1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Validity
Not Before: Apr 29 13:01:09 2025 GMT
Not After : Apr 30 13:01:09 2025 GMT
Subject: CN=753acff3b5878eb1c8e582648b802e8f0009b1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:e4:5a:75:47:f9:81:2d:af:01:34:4e:0a:
eb:f7:ee:3f:c2:6a:1b:a6:ac:15:2b:5a:99:2c:e4:
ef:c7:4c:97:f6:14:c3:40:1c:4d:6b:ea:db:59:4c:
14:fc:bd:6f:b7:52:04:0c:77:3f:cf:b9:6f:5a:e5:
e5:fe:51:25:d0:e7:bc:a4:8e:0d:10:74:de:8f:ef:
60:bf:ed:c8:01:c1:74:1f:b7:be:ca:bc:83:9d:9f:
9e:68:df:4d:ee:1c:22:b2:b3:59:8b:37:9f:1c:1f:
3d:c9:9f:27:54:55:03:7c:4a:fa:f5:0b:f7:7f:f2:
cd:17:ef:e3:39:51:0f:9e:c3:d3:80:0a:e2:6b:48:
bf:ad:11:2b:0e:57:99:72:e9:e0:de:03:75:40:4f:
2b:f1:3c:92:61:38:69:0f:23:25:bc:62:be:3b:4e:
e3:63:0c:e1:9b:e2:e2:b0:f5:72:ae:43:f7:6a:ce:
a6:0c:8b:b8:d7:de:87:14:62:a5:b9:79:56:b6:1f:
cd:10:c7:1a:35:f7:97:b3:d6:ea:bb:d2:fd:17:19:
f1:22:ec:f2:f6:70:53:08:13:74:d4:78:5d:b6:0c:
27:59:cd:f6:91:c0:2c:69:28:5f:e0:91:ad:95:45:
5c:39:c0:38:80:2c:7d:c1:8e:9c:17:48:24:87:9a:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:CF:F3:B5:87:8E:B1:C8:E5:82:64:8B:80:2E:8F:00:09:B1:E8
X509v3 Authority Key Identifier:
keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b8:77:36:33:fc:25:d0:68:b6:92:ba:cd:8c:c8:fe:7b:e2:
e3:ba:08:44:36:49:ef:ee:5a:6a:64:29:a5:88:7b:cc:7f:80:
14:fc:1c:28:ce:a5:26:11:18:49:0c:2d:4d:63:c6:f8:7a:c6:
f5:42:9e:8f:5a:0a:dd:77:8f:b1:f1:b2:c8:64:08:2d:80:35:
c6:59:da:4c:3d:22:ba:f7:4b:4e:19:b3:51:e5:01:cc:bc:4a:
d0:4e:95:f9:38:ec:97:7a:36:d4:cd:e9:33:43:da:9c:49:28:
5d:f3:66:32:fc:5f:dc:41:68:6e:ef:f8:1b:45:b4:d7:17:69:
b0:bc:8c:02:f4:33:59:56:05:4e:55:77:3a:fc:47:fd:25:54:
4d:65:28:ab:1f:5b:97:b6:52:ec:52:d5:b7:40:b4:eb:40:b4:
d4:d3:f5:09:61:17:45:89:21:07:08:71:78:a5:7c:c4:28:fd:
ba:c3:0f:c6:9b:c1:30:4d:6c:e8:a2:64:07:d5:c2:4e:b6:36:
47:d3:12:d9:59:b8:6f:84:a5:08:27:c2:07:8a:c8:0c:7b:dc:
fe:75:c9:f1:0c:9d:36:31:4a:0d:53:bd:c3:67:73:5d:18:a2:
33:67:32:1a:10:43:e9:ef:4a:41:1f:75:3c:84:d6:74:d3:9f:
d8:51:6c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:42:51 2025 by rpki-client