
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
File: E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json)
Hash identifier: 21FEPIiKvNlh3Evlu8l9iaLDsFB6pNaIM5XFHDcUpeA=
Subject key identifier: 00:5A:61:03:EC:4E:6B:66:7A:D7:43:62:A0:AA:97:CF:D6:0D:E2:8B
Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
Certificate issuer: /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Certificate serial: 01967DC56C4B6CCE96B025699D11A7640543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 19:00:12 +0000
Manifest this update: Mon 28 Apr 2025 19:00:12 +0000
Manifest next update: Tue 29 Apr 2025 19:00:12 +0000
Files and hashes: 1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: WzlqTQN3ecuY6lQInsINuHzU7mRAT1KADwH7ylYHlDE=)
2: jzVDE20GlCgVCg-KhJB_QzsLMCg.roa (hash: LaydqvlZJmK18FahUwbjtSgT6W86Q5gZmcNPgCbbqe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:6c:4b:6c:ce:96:b0:25:69:9d:11:a7:64:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf
Validity
Not Before: Apr 28 19:00:12 2025 GMT
Not After : Apr 29 19:00:12 2025 GMT
Subject: CN=005a6103ec4e6b667ad74362a0aa97cfd60de28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:a5:07:a0:35:0c:49:fa:13:57:cb:b5:92:
eb:c8:6a:8c:c0:b5:f5:97:69:65:be:01:06:84:2c:
a2:51:43:65:cb:df:11:17:49:f0:d8:d6:74:2d:55:
00:62:91:02:8d:13:7b:80:96:d2:63:b9:aa:7b:1c:
ff:f3:98:f4:65:58:2f:d1:a5:cd:c9:9d:54:c0:29:
44:62:6f:50:0e:b7:e3:6f:57:8d:7b:0c:85:bf:49:
20:00:b3:b3:c3:d5:f8:90:43:48:46:ce:6f:32:02:
5f:f6:70:35:b2:14:ab:e6:47:ef:22:63:40:27:5d:
ed:54:71:d9:d5:2a:a6:fc:08:70:a1:11:c2:53:38:
7e:8d:2c:39:8d:41:2b:9b:44:0a:bd:34:bd:4e:59:
63:da:63:79:49:4c:9b:ac:c5:f3:2d:17:6d:d2:fd:
e7:1f:a1:1f:8c:15:3e:87:6c:51:31:3a:75:2c:8f:
13:e3:8a:54:ea:c8:76:ba:fb:5a:07:3c:11:99:bf:
81:17:f7:db:72:f1:2d:2b:91:68:8c:39:93:59:8c:
3f:1b:cd:52:40:c0:6a:8f:11:68:58:20:97:c9:56:
7a:d8:1d:9b:fd:c0:2b:ae:86:bc:c6:2f:33:3e:e8:
23:24:66:38:00:91:5a:3e:c8:60:b4:71:44:1c:dd:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:61:03:EC:4E:6B:66:7A:D7:43:62:A0:AA:97:CF:D6:0D:E2:8B
X509v3 Authority Key Identifier:
keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:93:0b:b8:52:93:aa:11:aa:b3:e3:ce:64:28:24:04:21:8b:
5d:bf:85:be:61:76:3f:b8:05:9d:58:d5:19:4c:b5:25:10:2a:
7d:50:6a:fe:16:4b:63:43:d3:58:89:27:76:58:0f:da:84:30:
96:b9:39:5f:b7:8f:ed:41:08:9d:4b:70:c2:94:54:51:8f:2e:
56:57:14:28:24:82:11:c4:21:6c:44:fa:ab:d4:4a:1a:e6:53:
6f:d1:7f:43:fb:cf:6f:62:d8:d5:dd:be:8a:2c:2e:97:a1:19:
11:81:83:73:9f:9f:dc:7d:90:b5:4f:b9:dc:33:b2:6f:f3:a1:
3a:92:79:7d:72:25:78:36:54:e2:91:0d:8c:46:e2:74:3a:ce:
6e:75:18:68:4b:d0:6f:00:81:f7:3d:60:f8:f7:3f:45:0d:7b:
f3:f6:7a:9c:d9:65:11:25:49:41:c8:df:8e:5e:b3:2f:e1:99:
6b:ee:95:ae:51:41:b7:d4:10:83:02:0d:fd:bc:3d:d5:2a:19:
75:ef:60:15:6e:de:3c:95:17:e9:3e:9d:5c:56:3a:e5:e4:24:
a9:df:41:ba:c5:13:61:67:89:91:19:88:75:f9:fd:d6:10:33:
8a:9a:b9:a2:2e:d5:0b:78:61:e2:e6:94:15:06:ab:89:0e:cf:
94:99:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:16:54 2025 by rpki-client