Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
File: En6fnV_UXaAQaVzEISr35nt7NI8.mft (raw, json)
Hash identifier: hlJfE1wNU/QwjyPetFN2wkjAN8U4ggARsOpbUsBfFjA=
Subject key identifier: 7D:24:DD:13:29:BC:93:B3:93:D9:A3:94:12:FB:38:14:B6:9F:DC:66
Authority key identifier: 12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
Certificate issuer: /CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Certificate serial: 0196759E8F41EE0B41AEEC86B74D97D7D46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
Manifest number: 108F
Signing time: Sun 27 Apr 2025 05:00:47 +0000
Manifest this update: Sun 27 Apr 2025 05:00:47 +0000
Manifest next update: Mon 28 Apr 2025 05:00:47 +0000
Files and hashes: 1: 7chXrCB-kcx4BDbNvUre62zCVs0.roa (hash: kM2S2XstoTcg0W9WF7loN86FbRs2E6G/NWJAtjB1G7s=)
2: En6fnV_UXaAQaVzEISr35nt7NI8.crl (hash: ySXNMtofWw35FBxP1eDMFl4Dlmwxoh4QiBCsdT+6UGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:8f:41:ee:0b:41:ae:ec:86:b7:4d:97:d7:d4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Validity
Not Before: Apr 27 05:00:47 2025 GMT
Not After : Apr 28 05:00:47 2025 GMT
Subject: CN=7d24dd1329bc93b393d9a39412fb3814b69fdc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:65:fd:7c:75:eb:0c:3a:0b:d1:e4:fe:68:
d1:10:28:98:0b:22:fc:40:4a:b2:e4:61:a8:a9:b8:
5d:61:20:1a:c3:18:69:52:75:ae:38:26:43:c6:c9:
6d:38:69:2a:7e:19:4f:da:57:8f:6b:dc:f4:94:3a:
20:c9:93:52:2f:d0:52:99:1d:8a:62:6a:7b:36:b8:
72:e1:bd:cb:9a:80:88:f4:43:14:f0:e2:d8:61:be:
5c:2d:04:31:d8:12:ff:40:5a:56:51:79:b7:bc:eb:
c4:d5:37:20:6c:c2:c4:26:0a:2e:99:15:12:69:ed:
7d:20:b2:c0:04:21:01:34:27:12:33:85:ab:14:98:
6a:00:23:20:71:f2:47:2f:48:41:19:88:ff:df:73:
75:24:cf:81:6f:18:3a:32:3f:c4:c6:58:b3:92:a4:
c0:82:45:c5:8f:26:92:3b:81:47:53:7d:d0:22:fe:
16:20:11:07:2a:df:a1:10:e2:ee:91:53:5c:8c:b2:
e4:a1:4a:73:10:8d:78:de:49:5c:8e:a9:d4:34:47:
7e:27:f1:3f:a2:4c:62:47:8c:2f:df:7b:33:2b:78:
e3:1e:04:9c:37:62:eb:2c:b2:d5:04:e4:c2:60:16:
03:1a:2b:d5:ad:cf:1a:57:5b:41:2c:1b:7b:16:f2:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:24:DD:13:29:BC:93:B3:93:D9:A3:94:12:FB:38:14:B6:9F:DC:66
X509v3 Authority Key Identifier:
keyid:12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:88:b4:c7:60:eb:99:43:7b:af:7c:6f:fd:45:ad:01:fc:49:
24:1a:1d:ef:45:b6:77:6a:55:c5:62:74:f3:78:cf:bd:25:a7:
0a:80:90:bc:9f:d9:70:70:8b:3c:5a:07:e2:8d:9d:29:95:a9:
30:f0:f1:f1:f7:2d:68:2f:a2:62:64:0c:3b:d0:53:00:5e:f0:
9a:49:d6:64:b5:68:2c:d5:0c:61:86:48:36:b9:1b:53:39:27:
85:34:ce:d6:21:98:26:b9:ae:b4:54:0e:35:2e:61:d2:10:b2:
59:6c:c1:42:57:3c:9d:be:08:d5:50:8a:c2:7c:ab:d5:78:63:
94:5f:db:8a:35:9d:23:d1:23:73:f6:19:47:9b:68:1c:a2:13:
cc:49:95:5e:58:19:dd:9c:30:e0:63:b0:ea:09:92:e9:9b:61:
2e:b4:0d:04:a1:b5:d8:d9:80:39:b5:1f:35:84:ba:6f:10:79:
b4:c6:7d:3f:d8:31:3e:36:8d:9e:4f:7d:de:d2:55:0d:3d:8d:
4f:82:5b:52:8d:f6:19:de:da:06:41:ac:9a:a9:ff:00:23:79:
6d:07:ff:90:61:ac:8c:f6:8a:0e:fe:94:0b:06:9c:d1:cd:6c:
e3:9c:dd:a8:d7:99:a0:71:af:3f:4b:9d:3a:c8:71:14:9c:78:
11:fd:ee:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:21:32 2025 by rpki-client