Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier: LlNlLtW2XP+kxHBSdXyayOdTdPyfFQytFI6wHOX1+vE=
Subject key identifier: 2A:82:6C:25:2E:72:36:D0:71:64:36:65:59:0A:50:98:0F:29:54:94
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial: 0196403003A0F953FD5A7E0705A1FC80C56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number: 10E5
Signing time: Wed 16 Apr 2025 20:00:10 +0000
Manifest this update: Wed 16 Apr 2025 20:00:10 +0000
Manifest next update: Thu 17 Apr 2025 20:00:10 +0000
Files and hashes: 1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: jmC+k5+x+pRBbIapHw9lGSzoPV9fHkvDzrhKALdWoDs=)
2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:03:a0:f9:53:fd:5a:7e:07:05:a1:fc:80:c5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Validity
Not Before: Apr 16 20:00:10 2025 GMT
Not After : Apr 17 20:00:10 2025 GMT
Subject: CN=2a826c252e7236d071643665590a50980f295494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:8f:3d:f0:67:11:5d:ad:04:fc:b1:46:ba:
44:17:ed:26:db:76:f4:87:b8:cd:da:c4:f2:ad:e2:
c0:d1:21:97:b4:96:ec:23:42:30:3b:d6:38:9f:87:
7b:c6:07:22:88:e3:82:19:0c:8b:a1:f6:45:16:b4:
9d:64:0c:ec:dc:b7:3c:49:29:fd:01:da:a5:44:85:
be:35:80:e0:01:e4:e7:6d:f1:da:f1:b8:09:42:8b:
c0:3b:8e:87:ad:36:c1:91:0d:2c:9f:43:eb:ad:d9:
ce:79:27:d2:15:12:0c:6d:69:b5:7c:34:92:77:ab:
e7:33:94:2a:12:f9:4a:12:8b:85:07:cb:3d:bb:9e:
78:46:30:99:32:c2:61:b0:8f:62:3f:21:77:87:6e:
d7:3f:9d:fa:b9:eb:c2:99:90:5b:bc:50:c9:f2:c5:
69:41:c9:b3:18:f9:40:f6:09:88:ca:a9:ad:7e:9b:
26:3b:18:61:9a:a5:cb:7e:34:57:be:63:89:f6:63:
be:d1:8a:d6:42:4b:c9:fd:80:38:df:53:80:49:3e:
13:80:08:5a:81:80:d1:ba:13:29:ca:9a:71:f4:89:
b6:6c:42:0e:e9:16:e5:af:4a:13:84:46:5c:8b:66:
eb:bd:70:8c:3c:20:e4:04:38:8a:c0:8b:55:79:60:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:82:6C:25:2E:72:36:D0:71:64:36:65:59:0A:50:98:0F:29:54:94
X509v3 Authority Key Identifier:
keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cb:51:ac:80:06:76:36:54:e6:39:a3:5f:c6:eb:e9:67:56:
3b:ff:18:ed:df:94:34:fc:f7:3c:f3:35:c8:f7:92:be:5c:58:
a9:9b:bf:90:11:41:3b:6b:6a:0e:61:8b:50:ac:58:53:91:c5:
b1:51:5a:63:29:09:dc:76:1b:c9:fc:8e:50:97:ec:4f:2e:cc:
5e:6f:b1:3a:05:8e:f2:e3:e8:02:45:c7:34:44:f1:e6:fb:8e:
93:e5:3b:f2:17:63:f9:ef:07:95:df:9a:22:10:93:5b:45:a9:
6b:b0:47:a1:7e:fe:52:1f:ac:23:b2:2b:f8:b4:89:df:88:46:
19:93:3e:9e:71:ad:91:e0:c3:5f:0b:7e:6d:33:b3:08:e7:d2:
b9:6a:bc:b4:e1:40:f0:af:51:ea:97:39:78:13:57:98:d3:65:
f9:1c:b5:a0:ed:ad:fc:85:a6:de:60:52:f2:7c:21:7e:d6:17:
b8:e1:8e:ea:b5:0d:87:34:d6:41:79:38:a7:64:4a:01:86:ad:
53:5e:86:34:e6:13:50:32:d1:f6:4a:0f:2a:0c:80:1c:15:8a:
c1:21:ca:d4:9a:e7:b9:5a:09:34:b2:e6:b7:2b:f8:eb:63:f1:
56:56:cd:a0:bb:dd:68:be:47:5c:d1:69:a2:84:de:8c:af:06:
86:4f:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:57:14 2025 by rpki-client