Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: 1/R4fV7ALGUTAjbT83Mfbk76Ly69Vk+6xDpsKF3SEWA=
Subject key identifier: 90:71:2E:EC:65:25:8E:96:0A:D0:D3:2C:CF:38:FE:71:0B:28:69:FF
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 01964BC6E3FFE202DD34782E987C6532BBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 02:00:47 +0000
Manifest this update: Sat 19 Apr 2025 02:00:47 +0000
Manifest next update: Sun 20 Apr 2025 02:00:47 +0000
Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: Ps182JgUCo95b8RYUerl4MPWiPzvlN3DAFZaehNQVsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:e3:ff:e2:02:dd:34:78:2e:98:7c:65:32:bb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Apr 19 02:00:47 2025 GMT
Not After : Apr 20 02:00:47 2025 GMT
Subject: CN=90712eec65258e960ad0d32ccf38fe710b2869ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:2c:89:4d:87:9a:68:31:1f:fe:ea:8f:3f:
e5:82:b9:d6:d9:18:b8:3a:f9:26:f1:f4:24:45:68:
b1:9e:6c:1b:a9:8b:25:1f:5e:12:66:cf:60:5d:24:
5f:42:59:00:86:df:86:31:af:14:af:8f:eb:14:3b:
99:04:95:5d:e2:dc:55:2d:96:c0:a6:c1:cc:aa:c9:
fb:06:f0:2c:37:a1:8a:00:57:c4:2a:a1:ab:4a:f2:
f8:cf:ed:ec:0f:ca:97:a6:08:c1:b0:9a:a2:cc:03:
f6:8d:95:f1:f1:ba:d0:0a:c9:6f:0b:a6:3e:95:34:
a2:19:34:8f:8b:c2:67:18:6a:6f:e4:3c:7b:22:82:
f6:1e:64:92:d7:21:a7:81:c4:48:64:4d:a6:fc:56:
af:93:16:87:43:7e:11:49:8f:9a:8c:74:01:5c:35:
35:99:87:8f:62:3e:c5:bb:01:36:41:2e:27:de:d7:
08:b5:7b:10:33:d6:7a:95:8b:0c:7f:d1:cc:7f:bd:
2a:3b:43:4f:c7:ea:19:90:fd:f1:ed:14:64:58:aa:
6b:df:bf:b5:ff:05:52:9a:b0:27:c0:18:00:cd:5e:
65:c2:a1:68:0f:d8:eb:d6:dc:50:f9:0f:fc:e0:3f:
b4:21:69:71:53:1e:10:da:3f:6e:37:c9:69:2a:48:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:71:2E:EC:65:25:8E:96:0A:D0:D3:2C:CF:38:FE:71:0B:28:69:FF
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:85:3d:47:85:0d:97:0a:11:39:0c:d8:4c:2c:7d:cd:8f:45:
f3:fe:8d:03:75:04:e9:e5:b0:de:a1:de:ec:6b:de:0e:67:ee:
bb:8c:d0:a7:ca:ef:26:db:54:d8:ff:51:26:7e:89:40:db:71:
de:81:18:b0:f4:e0:e7:93:06:9a:a9:98:bb:96:a5:45:97:b1:
54:fe:f0:98:df:23:97:55:82:e1:70:3f:87:1d:12:2f:46:b2:
9c:be:f8:37:17:8c:74:cc:1e:be:48:9f:6b:15:ca:c6:c0:94:
fa:ed:53:44:ac:ed:21:a5:b5:9f:36:67:65:96:85:fd:fa:94:
47:7c:1b:65:a2:85:83:75:e1:36:0d:f4:a0:4a:68:9a:2a:5c:
a4:a1:64:45:dc:21:64:d4:da:d7:31:ab:c5:16:21:37:41:eb:
47:8e:cd:2a:ad:95:fb:9c:5b:27:29:1c:f4:42:d2:83:8e:ea:
95:86:58:00:74:31:39:61:af:80:c2:a3:34:e9:48:6d:9e:4f:
60:5a:0d:70:67:55:2a:8d:fc:ec:45:f2:f7:f2:37:7c:68:1f:
7e:ba:97:1c:4e:b2:25:46:c6:e7:93:45:73:a4:86:bd:41:ad:
f5:72:ed:fc:97:46:b8:b2:3f:eb:9f:dc:18:bd:56:39:f6:9e:
7d:50:ef:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:10 2025 by rpki-client