Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: KMgkkTqkTURhETFkrqTcq0Ll5kzo4LfPQfc075YO/o4=
Subject key identifier: EE:B6:87:B3:CD:7C:25:BD:F7:4D:D4:09:B5:78:33:B0:26:F7:56:0D
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019655A604C25A52F01900CA71299A556ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 05E9
Signing time: Mon 21 Apr 2025 00:01:05 +0000
Manifest this update: Mon 21 Apr 2025 00:01:05 +0000
Manifest next update: Tue 22 Apr 2025 00:01:05 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: PGKPuiD0dBI6h8Mp66m37yF8dGFTwxBAvgYC3kfG6G0=)
2: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=)
3: tFuBusypscfP0op8t0fbvhVLTp0.roa (hash: pms99WF44PQkWw+lLwCckChT1mv5Etpr0MeX5NnHJWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:04:c2:5a:52:f0:19:00:ca:71:29:9a:55:6a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Apr 21 00:01:05 2025 GMT
Not After : Apr 22 00:01:05 2025 GMT
Subject: CN=eeb687b3cd7c25bdf74dd409b57833b026f7560d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:7c:6f:be:ac:d2:fe:82:f9:ee:a5:9c:7a:
a3:34:0f:6d:6b:03:33:e0:27:40:e5:23:46:74:6d:
7b:1f:d9:54:16:0d:8d:7c:47:1d:a1:52:27:a0:ba:
22:a8:bd:00:60:3e:a5:52:ad:af:ea:66:60:01:48:
f8:cf:ba:a8:4f:01:0d:db:88:46:cb:20:9f:66:82:
da:71:07:ff:99:dc:53:aa:68:2a:9a:48:46:e9:a6:
0a:5b:ff:3e:20:41:c1:77:12:7f:27:e4:63:c7:c2:
e4:e6:46:c9:90:f2:6a:33:79:b1:dd:73:85:e7:9a:
e0:4c:01:39:96:f4:bc:f5:be:b1:e8:d9:0f:bc:74:
1e:6a:1d:d2:38:21:ee:14:75:19:90:53:1e:d0:b8:
86:e6:2c:97:d5:bf:67:29:b3:89:d3:8a:69:af:71:
37:4b:ec:3c:11:a8:9f:57:a0:89:30:f6:f0:b4:e8:
26:45:dc:fd:c9:8b:d3:44:94:5d:cf:ed:4d:cc:97:
82:9c:46:68:88:46:bb:34:cc:98:4a:a4:83:a6:7f:
ae:02:06:d9:fe:31:f0:d1:27:a6:07:39:d7:65:d2:
8b:ff:44:b1:24:eb:b2:62:c5:0b:89:bc:b5:0e:f2:
b0:fc:b2:9a:49:3c:19:66:0e:3d:c8:6c:0f:3d:de:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B6:87:B3:CD:7C:25:BD:F7:4D:D4:09:B5:78:33:B0:26:F7:56:0D
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:41:4b:e0:22:0f:dd:fc:8e:67:77:91:d7:e5:de:b3:35:8a:
a5:3a:d1:1a:5b:cc:5c:0d:ab:68:bd:e3:f2:88:28:1b:be:46:
64:ee:dd:13:7b:ed:df:0a:6d:ef:f7:ad:2e:f4:ff:88:93:ef:
08:e0:08:4d:3a:10:2c:5d:38:49:b7:39:9d:70:cb:02:08:73:
66:80:c7:7f:99:57:1a:5f:64:71:96:71:6d:7f:c6:38:e3:f6:
39:c4:3a:f4:36:5b:c0:6b:6b:d8:c1:02:48:4d:35:4d:6c:0d:
73:a3:33:15:03:59:e6:89:86:ab:30:16:a9:ef:f6:eb:0c:c7:
69:5f:88:77:93:0a:d7:bc:7e:a2:59:60:aa:7d:c9:18:98:de:
21:5f:c9:88:7d:2a:26:53:03:77:96:fa:61:ad:6a:9d:47:e3:
f3:a0:f9:92:6d:ab:8c:8c:e9:83:87:0d:54:1a:28:39:a9:cf:
31:10:dd:3a:fd:8a:33:1d:31:ee:e8:5e:52:69:0b:ce:a3:c1:
ff:b9:54:26:2d:e6:ca:9d:44:91:54:53:99:27:97:d6:8c:82:
31:15:2d:aa:c1:ff:0e:7e:74:82:40:83:b6:71:22:9f:da:b3:
5f:e1:4c:e1:dd:ee:dd:3e:79:55:c0:f0:65:7f:d4:3c:47:1a:
b8:27:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:49:01 2025 by rpki-client