Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: SyW3ruZ0tpdbb7w3ScSpJAz+Goh2382hg2vj/sQ4voE=
Subject key identifier: 2B:C4:03:BD:58:2D:D7:E1:98:EE:03:E1:FA:36:46:60:81:E6:FB:E8
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 01964D7E4EACF217D2AD7397EE3E28887B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 107E
Signing time: Sat 19 Apr 2025 10:00:45 +0000
Manifest this update: Sat 19 Apr 2025 10:00:45 +0000
Manifest next update: Sun 20 Apr 2025 10:00:45 +0000
Files and hashes: 1: jvaFexoxtk4rKhDumsQjGLQsBLU.roa (hash: trR6TCS5RgKXy+FTVPF28Tq5uhqKg+8D3gvbODYNaCY=)
2: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: 1uZohrhb1TxWnsvm7X9eCpEPFHA6V+eGLs35hXdQDS0=)
3: zPseRt5WlA5PNoUFkbv3vmUfDV8.roa (hash: Ya/w9mpoqyM5Bw8KTqPuY/qxCTIk7UQN48ES6+Vh43g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:4e:ac:f2:17:d2:ad:73:97:ee:3e:28:88:7b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Apr 19 10:00:45 2025 GMT
Not After : Apr 20 10:00:45 2025 GMT
Subject: CN=2bc403bd582dd7e198ee03e1fa36466081e6fbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:e9:85:a7:27:d2:2b:30:6d:40:19:1e:ce:
fc:a1:1e:2c:46:5d:53:fb:df:e1:47:8a:a7:7d:3d:
bd:9b:71:7c:8a:d0:79:36:6a:d9:3a:00:cb:03:ca:
ee:34:76:16:d6:c3:c6:80:60:86:16:f3:f4:75:3d:
9c:6f:05:2d:a9:50:ef:05:a9:d7:10:94:6a:c1:29:
7a:54:ec:41:69:d0:74:04:9e:46:76:31:9e:99:e2:
8f:d7:77:af:52:c6:18:42:7f:69:80:10:57:8d:c5:
4f:b6:db:7d:b5:9b:39:ba:7c:9c:58:2e:89:ee:9b:
e0:8f:42:45:1a:8e:cf:27:c8:75:0f:7c:18:08:01:
16:a0:e5:eb:70:e4:fb:6e:e8:67:81:bd:ed:41:be:
df:46:e1:de:82:48:11:1a:f3:c0:22:01:2a:46:7a:
62:04:aa:fd:2b:0e:ef:c9:08:c5:f2:83:aa:5d:22:
7d:43:b4:79:de:58:e5:27:72:96:13:2e:66:5e:3f:
78:aa:a6:15:f1:5a:6c:01:51:1f:57:ad:16:a9:8e:
70:c8:f6:96:26:d2:77:21:34:0d:b1:75:80:e5:ea:
e2:99:45:c8:bf:c7:95:65:f6:fa:7f:e3:8f:69:1b:
45:55:8b:61:41:cd:d9:16:f1:9b:8b:11:aa:2a:26:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C4:03:BD:58:2D:D7:E1:98:EE:03:E1:FA:36:46:60:81:E6:FB:E8
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4d:cb:0d:ce:ac:1f:ac:69:27:1f:45:7a:cf:9b:d4:69:fe:
49:09:5f:f5:57:47:aa:ea:ae:8a:1d:fc:eb:8c:04:7e:a7:34:
61:2a:9f:31:da:95:f6:cb:04:cb:da:be:49:d6:91:d1:56:d0:
9e:6e:27:34:8b:68:84:54:c8:dc:54:cf:f3:be:52:9e:4b:d0:
9b:43:5c:87:de:2e:a6:48:4c:be:2e:33:6d:74:41:b5:71:d8:
f4:f0:50:0b:8a:07:1a:1d:de:41:a6:b7:4b:a9:fd:2f:3a:3a:
df:40:64:69:cd:ea:b5:4f:f8:d5:30:05:cc:42:c9:d0:19:c9:
d1:21:28:ec:a9:5e:a8:64:7b:00:f9:23:f4:05:72:7f:2c:78:
85:86:06:3b:f9:37:c1:3f:44:c0:45:e1:2f:52:fc:d4:2b:5c:
ed:61:39:71:a4:0b:b3:78:66:19:51:a5:89:47:b4:98:f3:bf:
96:2e:f3:91:9f:24:69:04:d1:d6:72:eb:15:74:e2:63:0c:b7:
c0:ea:8f:7d:40:06:96:d0:14:33:7f:29:eb:bc:2c:a1:c6:01:
50:05:2c:d5:53:e6:c8:f4:55:64:a1:3e:42:5d:54:d3:ac:19:
5a:e8:90:e2:14:ed:22:2f:9d:b8:20:5a:aa:53:3f:f4:d5:28:
12:91:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:25:20 2025 by rpki-client