Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
File: grEuz7IvKdYKPjG3nzYt1gwtTBA.mft (raw, json)
Hash identifier: nVMpKj82QVg3rKKQgWkoUEU6w/2XlSg3KHNfmh6mvRM=
Subject key identifier: 57:A3:D9:F4:93:A1:D0:F9:98:A1:7D:B7:CF:45:F2:53:49:E7:5B:1F
Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
Certificate issuer: /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Certificate serial: 019652368E7E8166EC1317F8034FFF0CD3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
Manifest number: 0C95
Signing time: Sun 20 Apr 2025 08:00:29 +0000
Manifest this update: Sun 20 Apr 2025 08:00:29 +0000
Manifest next update: Mon 21 Apr 2025 08:00:29 +0000
Files and hashes: 1: 1-q5t5dbXJQJPAbEiSYfDN9-Kp_0.roa (hash: jh5W+EA/au2yjcrCCgbD+iZSjQ/AqIbIhccnO7LERWE=)
2: grEuz7IvKdYKPjG3nzYt1gwtTBA.crl (hash: pHG6HUTqid2fa1qx6hbTQCm/wLr7qYg/LKZdrf/hpOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:8e:7e:81:66:ec:13:17:f8:03:4f:ff:0c:d3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Validity
Not Before: Apr 20 08:00:29 2025 GMT
Not After : Apr 21 08:00:29 2025 GMT
Subject: CN=57a3d9f493a1d0f998a17db7cf45f25349e75b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:1a:80:6f:01:42:36:1d:a4:42:a5:27:c3:
40:ce:60:d8:02:0c:05:6a:19:07:78:de:45:4a:75:
c8:d9:ed:a8:76:fe:d0:a6:0e:6e:bc:26:3f:a6:dc:
ee:d9:af:7b:49:49:40:9e:55:97:61:fa:cc:39:e9:
36:d6:4f:d1:e4:99:f0:f1:1d:30:14:72:82:db:73:
15:f9:c6:dc:3d:d2:45:a5:14:ae:99:97:2f:52:82:
49:7f:5d:72:25:df:b4:6b:9c:fb:95:d2:30:cd:b1:
54:73:14:bd:4a:45:30:ba:7c:59:1e:92:ee:d2:69:
35:ed:78:2f:06:4e:07:ab:9b:dd:79:a3:87:c8:5f:
ae:30:43:0a:a5:30:de:f2:67:be:51:b5:1a:43:08:
2f:ed:cf:f6:ec:c6:7e:74:60:bc:d4:a7:28:02:86:
45:4e:e9:cf:0a:09:f1:7f:f8:9c:b5:f0:ab:95:42:
84:4d:f0:b1:00:2b:98:ed:a4:fb:bc:8a:a4:9d:3e:
c6:fa:c8:1d:33:f5:61:13:d4:9b:7d:dc:7a:f3:04:
f2:04:d1:b6:a6:21:e3:7a:57:82:9a:f4:95:9f:cf:
58:59:a9:74:68:f4:fe:60:38:ca:2a:25:4d:01:c0:
34:ac:eb:37:e7:4c:f1:fd:7f:af:9b:a7:74:bb:c2:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A3:D9:F4:93:A1:D0:F9:98:A1:7D:B7:CF:45:F2:53:49:E7:5B:1F
X509v3 Authority Key Identifier:
keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ab:81:b5:03:cc:4d:0c:54:69:3c:69:20:6d:78:39:14:f9:
c5:83:f5:c0:22:1a:81:70:32:bf:47:d6:2b:ef:01:fa:2c:4d:
f8:84:f4:58:e5:c1:0d:63:cb:9e:36:bd:67:74:59:14:db:95:
0c:30:9e:f0:ad:af:9e:62:e1:58:df:1b:cb:98:00:b4:83:cc:
83:9b:c2:4c:8b:c5:f5:8d:06:5f:fd:84:50:34:6c:0d:8f:46:
13:22:27:b5:e0:d0:4e:e0:9d:2a:7a:7d:06:e7:93:3d:2f:c1:
96:a8:c7:a9:dc:3b:9b:58:95:89:5b:8e:c9:90:26:9c:7a:9b:
18:d9:86:04:e3:e0:2d:7f:78:b5:f3:0a:ef:69:28:96:68:fc:
80:c2:82:48:1e:b0:ed:dd:90:c1:ec:bc:a2:37:b1:2f:37:2b:
1d:9a:c7:f6:50:22:6c:97:0c:ea:65:b5:86:1e:20:df:53:16:
76:1f:93:f7:08:f4:39:c6:66:18:b2:4d:dd:b7:cb:d4:43:93:
54:59:5b:ef:46:20:b8:26:9b:33:81:8b:fe:45:42:24:6e:be:
0f:45:f1:73:c2:b0:30:51:96:61:46:6d:21:18:e1:f6:ef:b3:
26:fa:28:aa:c4:8a:b0:49:32:db:7b:a6:db:88:f0:9c:3b:35:
1a:da:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:10 2025 by rpki-client