Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier: b5LbmE93qbwoiRqKVgVAw76aje3cjbXP2YJ1P4KFG7I=
Subject key identifier: 21:25:93:31:2A:6C:E9:61:F1:2E:03:3B:D3:64:9D:78:34:07:F8:92
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial: 0196741E5891D049B553F6BB279D69406E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number: 0322
Signing time: Sat 26 Apr 2025 22:01:07 +0000
Manifest this update: Sat 26 Apr 2025 22:01:07 +0000
Manifest next update: Sun 27 Apr 2025 22:01:07 +0000
Files and hashes: 1: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (hash: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=)
2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: tji57mE+J5ZUkSKssnMlE8wFUKCSntmzc07sNZCbW+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:58:91:d0:49:b5:53:f6:bb:27:9d:69:40:6e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
Validity
Not Before: Apr 26 22:01:07 2025 GMT
Not After : Apr 27 22:01:07 2025 GMT
Subject: CN=212593312a6ce961f12e033bd3649d783407f892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:e2:f2:12:d8:cb:1b:1a:6a:99:cc:1d:d0:
79:c2:e4:42:62:dd:93:01:fe:cc:a6:c2:5f:8b:53:
c3:28:56:dd:6b:f1:ae:5e:da:71:79:82:ba:8d:a5:
8a:29:c5:c3:4a:d6:e4:af:69:e0:34:e5:53:ff:ce:
d0:42:e7:1f:b4:49:bc:94:9b:9b:5e:f9:05:30:c6:
00:11:f0:3c:c9:53:d8:dd:ce:97:6b:78:4b:27:97:
fa:7c:dd:4f:af:62:be:f0:e7:53:e8:4e:38:c4:b7:
1c:de:bb:e4:99:fd:12:e1:db:c4:60:11:47:bc:3a:
2d:b2:c3:e4:30:78:3a:b5:66:9d:14:6e:f5:8a:db:
70:d6:81:c8:79:69:6d:32:53:f7:74:a5:30:fb:1e:
ee:6f:cc:15:26:d5:35:2a:59:c5:19:36:ea:fe:b5:
56:90:2c:00:32:04:a3:ab:9b:36:02:35:a2:84:84:
5e:5d:fd:90:81:0e:e9:c4:dc:c7:cc:3e:87:fc:9b:
b9:32:27:4c:41:75:b0:e7:45:97:d8:97:15:e5:74:
0f:31:f7:ad:78:5b:76:4a:a2:3c:09:60:5a:88:be:
1e:cc:6d:23:d7:9d:66:57:ff:41:57:40:8b:68:a2:
06:71:80:6b:75:6a:35:af:85:bb:4a:5b:7f:14:b6:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:25:93:31:2A:6C:E9:61:F1:2E:03:3B:D3:64:9D:78:34:07:F8:92
X509v3 Authority Key Identifier:
keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1c:5f:ce:6b:b2:5c:e2:b7:ed:87:74:be:64:3d:0e:e3:f5:
d7:a7:a6:e3:8d:6a:9a:05:b3:b4:61:25:43:c9:a2:07:50:12:
82:ee:cc:a8:6c:b5:23:a7:ee:01:69:7f:c7:11:bf:8c:6a:d1:
2e:38:7e:d0:2b:98:4b:d1:6f:69:57:b2:66:1f:be:59:4a:80:
d4:14:ca:05:28:40:45:e5:49:37:ea:2c:11:d9:5d:35:51:25:
48:b0:43:6b:49:ac:d2:b6:74:6e:48:5f:25:78:85:e5:dc:0e:
f9:ec:61:eb:0d:bd:e8:65:be:32:ac:0f:c8:2e:f7:8f:38:3e:
9a:8e:d8:a3:4b:b5:5f:63:c2:fd:fb:f5:ab:7c:e0:98:b3:ad:
b8:5a:0b:f0:f5:fc:7e:9b:36:cc:77:d8:f6:9d:8e:8a:7c:d0:
0b:e8:2c:8d:02:40:4a:03:04:79:de:e3:d9:87:a2:fa:4f:7b:
ef:54:96:ac:b7:33:62:f8:d5:57:0f:59:01:77:ce:a8:64:f1:
f2:3a:3c:bf:8c:b7:bf:bb:eb:18:1b:ee:da:d3:b9:8d:75:08:
35:49:69:f5:b0:12:f6:21:57:38:37:a0:be:44:d7:39:00:b1:
68:1f:ce:4a:ae:77:79:74:5b:69:2f:76:38:63:c6:11:36:98:
5b:1c:75:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:21:36 2025 by rpki-client