Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: 9aOYiyhWS4EWcw+Hu8D/YKOJ0L4dCbZkfH1yanhgv+Q=
Subject key identifier: 96:83:AD:93:B6:70:45:DA:88:9E:50:B1:41:CB:16:4E:FC:90:F3:D4
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 0196790D2676EDC9207D70D2FDB04670AF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 21:00:26 +0000
Manifest this update: Sun 27 Apr 2025 21:00:26 +0000
Manifest next update: Mon 28 Apr 2025 21:00:26 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: e0YAZ8l1waUUAVj/H3AfqAClr68X2/gOl3Qj50xavjs=)
2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:26:76:ed:c9:20:7d:70:d2:fd:b0:46:70:af:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Apr 27 21:00:26 2025 GMT
Not After : Apr 28 21:00:26 2025 GMT
Subject: CN=9683ad93b67045da889e50b141cb164efc90f3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:03:f2:2f:94:8c:5a:1a:3b:ce:da:06:9f:
ad:ed:c8:eb:e9:cb:f9:68:10:ab:3f:78:fd:23:06:
e6:d8:8a:e3:ee:91:bc:89:b8:b1:c2:6a:68:27:6f:
15:a7:25:19:40:7c:b8:78:f7:a7:fc:18:f0:51:67:
e8:64:54:4a:13:70:62:1b:73:fe:3a:51:d4:58:84:
13:98:66:ad:02:20:d0:b2:01:f3:f9:8b:0e:fc:dc:
c0:93:f9:11:c4:84:b8:42:e4:92:9d:3c:b7:4e:ed:
c1:6b:af:cb:ca:90:8a:96:de:4b:57:4e:6e:c9:c5:
5f:44:d4:12:ab:62:aa:3b:8a:3f:8d:e3:19:6b:36:
5a:15:65:7d:c6:f5:cb:11:5b:c7:2a:15:a8:35:16:
d6:bd:8d:33:e6:67:a7:e9:87:99:78:78:06:1b:f2:
b1:37:35:c6:37:ca:5f:72:42:40:bb:01:ad:29:10:
3b:bc:82:48:95:69:48:18:f0:43:60:92:db:69:59:
d0:ff:f1:f2:98:49:75:bd:c3:e2:25:c3:b4:74:9e:
1f:bc:a3:43:19:d0:a3:47:f8:66:49:a6:00:60:1b:
4f:19:07:d7:c3:01:56:c6:76:86:1d:89:05:b4:09:
f0:c9:16:63:60:b5:fd:fe:b3:e0:b9:67:fa:9d:7f:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:83:AD:93:B6:70:45:DA:88:9E:50:B1:41:CB:16:4E:FC:90:F3:D4
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:72:7b:69:ec:7b:a7:35:47:b9:c9:90:0b:c4:a3:42:9d:94:
ad:df:12:2d:e3:09:5a:44:6a:04:2f:1d:32:af:cb:db:b0:a1:
0e:12:30:39:a5:c1:4d:27:b7:7f:3b:ac:3a:1e:a7:af:1a:a8:
36:03:d2:54:34:ce:53:a2:64:32:51:7c:f1:da:f8:4c:4f:e0:
b6:67:5a:61:3c:63:9f:00:51:97:ca:27:e3:c1:56:43:52:d9:
dc:0b:15:28:b0:00:69:80:9b:cc:f8:fc:88:b2:19:2e:37:c0:
f6:2a:53:32:2c:a0:79:e4:88:b8:7c:80:99:37:31:5b:f1:8f:
a2:76:e4:98:91:34:5d:8f:29:23:39:53:eb:88:18:15:7a:05:
2b:b4:53:c0:00:7e:25:b8:ea:c2:af:05:56:61:cb:b9:be:b6:
85:6d:88:bc:56:21:67:95:b7:f7:be:14:0a:9d:19:5d:a4:b6:
fc:2b:88:30:0e:28:b6:0b:05:39:9b:cc:5f:46:60:13:67:c3:
00:3f:3b:a9:80:fc:35:d8:82:92:de:a3:ee:57:1b:99:b8:7e:
48:32:23:d9:c3:3b:1f:c6:72:2a:04:53:91:12:ff:25:44:76:
34:75:8e:c7:75:a6:2f:82:c1:d5:db:80:12:ae:8a:0a:7a:11:
d0:1a:00:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:14 2025 by rpki-client