Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File: v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier: 9/EzBuYRe5YuOIFrPZPbym9YIb0fS3tYCC2BTubATok=
Subject key identifier: EE:52:21:E6:F3:9D:40:21:E3:72:FC:1F:11:BA:AB:C8:50:2C:50:5E
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer: /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial: 019652000066D347A7CFEA56E833B085B652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number: 04D8
Signing time: Sun 20 Apr 2025 07:00:53 +0000
Manifest this update: Sun 20 Apr 2025 07:00:53 +0000
Manifest next update: Mon 21 Apr 2025 07:00:53 +0000
Files and hashes: 1: Z2OOQN_xvDinvSk0PjmWHnzGsnE.roa (hash: +MwSX4X4GjxkZcy+4f+CH7/gMqlsDpwDxxCncAgans4=)
2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: nA4d9MPIM5xLZyGZuOokc+O/5O3oYmrU2q930LLB7Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:00:66:d3:47:a7:cf:ea:56:e8:33:b0:85:b6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Validity
Not Before: Apr 20 07:00:53 2025 GMT
Not After : Apr 21 07:00:53 2025 GMT
Subject: CN=ee5221e6f39d4021e372fc1f11baabc8502c505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a6:1a:8a:96:c0:47:64:6a:e6:86:da:18:2e:
0a:bb:ff:42:78:99:a5:5d:18:72:74:f4:10:8a:df:
4e:b1:05:c8:78:d5:4b:68:0d:f2:99:53:04:d1:66:
9b:e5:a6:08:ed:99:f8:e9:2b:04:d2:b9:8f:65:29:
f6:c4:f5:c0:a8:f1:50:80:26:2b:29:45:60:12:d3:
f1:14:da:cc:1d:4d:61:ff:7d:ba:16:33:a0:29:73:
05:8d:08:76:7b:55:f7:4a:e4:b9:2c:cd:b1:17:25:
ae:19:3f:3b:16:c5:6e:c2:e7:01:55:56:34:59:11:
b8:34:e7:5a:04:58:08:d0:7c:93:02:ba:72:91:b9:
a3:49:96:6e:1f:d8:c0:74:bb:a6:0e:ce:d3:c5:5d:
ae:6d:cf:14:80:49:28:e2:97:8a:32:c6:62:1d:ce:
8e:dd:1e:1b:e3:38:be:be:31:74:89:c2:19:82:4f:
7f:2a:17:38:19:67:b9:a1:e0:d9:9b:3c:1f:e1:8c:
7c:f9:35:c8:34:a9:71:c9:e1:cc:4a:4b:78:b4:a9:
2d:0c:e0:f9:e5:e2:a3:2c:3c:7c:ed:3c:f8:00:a7:
bf:9a:71:2a:e6:7c:09:e5:82:7e:85:7b:cd:28:b9:
20:71:a0:03:ba:8a:53:ee:79:c7:67:b7:bf:8e:d4:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:52:21:E6:F3:9D:40:21:E3:72:FC:1F:11:BA:AB:C8:50:2C:50:5E
X509v3 Authority Key Identifier:
keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:de:63:89:43:04:f5:8a:31:be:e5:e9:a1:a7:3e:26:15:6d:
e3:22:7c:d2:5b:48:32:2b:ad:90:b2:a4:af:d3:7b:54:54:75:
07:ec:ed:5c:5c:e6:1c:33:5c:34:88:c4:57:37:34:93:8d:61:
4b:c5:19:2a:9f:6e:d1:95:f4:1e:84:6e:f9:3f:69:76:12:ad:
75:cd:46:93:75:52:75:56:a2:a2:39:c6:9d:d6:5e:47:b8:68:
a2:f8:c9:6b:3b:30:67:2c:2b:7d:a5:66:d0:70:53:1a:fd:1e:
69:85:ad:87:eb:23:20:34:28:94:7a:fe:c7:d2:81:e2:00:46:
0b:3d:cd:38:c7:5b:43:d1:24:10:49:ca:88:e3:88:71:27:4c:
db:17:ae:87:54:54:bf:70:d4:a1:ae:44:f0:e2:44:b3:e7:20:
b0:f6:5f:69:c3:33:2a:96:78:f0:64:76:a0:61:26:c2:01:d6:
c2:b0:c9:32:44:0c:a5:f8:2b:d7:44:96:9b:e3:fe:b5:33:4d:
cc:94:96:39:a0:c6:74:1c:85:9f:b4:0e:b1:b5:5f:e5:0e:2d:
b2:9b:f4:67:4d:c3:38:74:da:6c:10:b4:84:3a:24:5f:60:8b:
97:37:b3:41:3f:2e:f4:da:81:35:45:ce:00:30:f1:ec:45:19:
da:2e:dc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:52:01 2025 by rpki-client