Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: sO2WyD+ix8t01WHP7OudAdNReoYcZ06ZsTZCzwHr74M=
Subject key identifier: 7F:CF:F1:D9:35:58:7B:1D:B0:9A:F0:26:8F:C6:CC:D5:E0:DE:09:75
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 019651C88E76C063A3FE03A8E2CC8707C4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 0E2E
Signing time: Sun 20 Apr 2025 06:00:20 +0000
Manifest this update: Sun 20 Apr 2025 06:00:20 +0000
Manifest next update: Mon 21 Apr 2025 06:00:20 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: 3C1Fq5erNKxPkQp7ggnj6lvSDJGJcNa0uT2jLkdye1U=)
2: _9tck5mtbi0xO7Fr7Y11NL5EZIM.roa (hash: UXCxozlRWrWF5uvq8QkTh0T+21/yBrNobwddT7TkTjM=)
3: ft2dBL2dxWtdVnnU4dlHVTXL4C0.roa (hash: HQtGMREFODQOAzloACeTixd5hA5RT+3n/TffbecMmN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:8e:76:c0:63:a3:fe:03:a8:e2:cc:87:07:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Apr 20 06:00:20 2025 GMT
Not After : Apr 21 06:00:20 2025 GMT
Subject: CN=7fcff1d935587b1db09af0268fc6ccd5e0de0975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:05:ae:26:4e:a1:71:6a:2e:c2:d4:38:63:
1d:2e:68:43:88:26:75:29:a7:c7:a9:6e:51:b2:9d:
c8:8e:02:34:60:4a:a9:6d:06:92:6f:6b:1b:28:12:
1d:c4:d7:af:1e:1a:6f:94:fe:85:a8:ad:f5:0a:ee:
dd:f1:2c:f1:4f:50:9e:80:07:f1:da:0c:bc:21:42:
c5:9c:0e:09:00:9d:f7:83:fd:b1:b9:e7:28:a0:b7:
86:b7:77:da:23:ca:a0:90:fe:64:68:2c:8d:c1:4e:
8e:6e:1b:0b:a0:0b:ad:34:50:09:4f:b7:35:ec:f3:
31:c1:cf:c1:ef:9d:e5:89:f9:e7:b8:45:2d:a9:82:
e9:17:c1:15:70:c8:ad:a0:9d:d8:11:c2:59:c8:45:
2c:a9:a2:f2:4b:68:42:41:b0:ef:4b:60:f8:6b:01:
ff:55:74:0e:c8:76:ad:04:1c:23:8e:2c:ee:ec:31:
8d:c4:86:26:a7:a2:19:4c:68:e7:1e:66:cc:c6:8a:
d6:d3:56:96:6c:b2:0f:a6:0f:3f:ac:b5:ab:b0:98:
35:96:e8:c0:04:84:d7:ea:f3:a6:1d:eb:62:c8:a8:
fe:d5:7c:59:76:e4:68:33:18:48:81:f2:aa:da:2a:
8f:66:48:8a:5b:b9:a4:7e:db:a5:55:f1:d8:95:5a:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CF:F1:D9:35:58:7B:1D:B0:9A:F0:26:8F:C6:CC:D5:E0:DE:09:75
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1f:e9:44:71:7a:a3:ce:63:db:63:73:8b:c8:be:b3:99:2a:
fc:13:cc:de:21:dc:85:f7:47:e5:7e:0c:87:a3:82:19:65:d0:
ce:42:e0:65:cc:46:54:41:aa:fb:e6:04:d2:4e:cb:3a:6b:6b:
75:e4:70:9c:14:fd:35:1a:4c:9d:88:ad:3d:59:b6:1a:39:89:
d0:3f:15:6c:9b:d1:20:1c:49:cf:e5:3c:a2:6f:a5:56:d3:59:
22:ea:99:36:d2:b8:f8:74:ea:f6:94:e6:66:fe:87:72:12:69:
ce:d9:06:3a:f2:e3:01:3d:d1:d6:cd:d0:1d:64:9e:47:c0:ea:
6c:a6:dc:1e:dc:b5:cd:d1:a6:97:b0:fd:2e:51:0b:48:3b:3e:
95:df:eb:bc:e3:b3:d7:5d:38:d9:62:a9:98:ae:f0:51:c6:4f:
ce:48:01:39:86:b3:44:2d:b9:81:db:d4:c9:cc:26:64:df:95:
49:b7:cf:56:d1:44:c2:c7:33:43:f3:cb:8f:0a:6c:18:22:84:
c7:35:7b:9c:91:87:fe:aa:da:86:e5:2a:40:64:cc:ce:aa:23:
39:cf:c1:3b:36:5a:48:af:91:0b:d0:f4:1e:42:e8:fb:9c:76:
b8:a8:14:02:d3:b4:35:b2:25:68:fd:77:1b:f0:e3:d9:b3:0e:
03:12:12:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:33 2025 by rpki-client