Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier: VqbVX/Ka9/8vB+aoUnpVD1OTGnUOuXwsrZePHKDneMA=
Subject key identifier: E1:81:78:1B:0F:A1:85:DD:3B:CE:B4:C2:3C:23:D0:A4:31:88:2D:CB
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 01964A46109B9FA61134E7A08C9CAC56084D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 19:00:27 +0000
Manifest this update: Fri 18 Apr 2025 19:00:27 +0000
Manifest next update: Sat 19 Apr 2025 19:00:27 +0000
Files and hashes: 1: OgYJc9A280CynujJhuzMa0BI-4Q.roa (hash: MiNQpI1WP7M4DChXTEl99hg+v/DrVYZq8o6Yc8vjTOw=)
2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: TNv3w5v8wyRjzCp4UZA5oxYGmqXS5YVpV8/4DUoUxyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:10:9b:9f:a6:11:34:e7:a0:8c:9c:ac:56:08:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: Apr 18 19:00:27 2025 GMT
Not After : Apr 19 19:00:27 2025 GMT
Subject: CN=e181781b0fa185dd3bceb4c23c23d0a431882dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:ba:d7:22:3c:6c:5b:cd:23:29:07:c6:c6:
1d:b1:11:3d:52:ea:a7:81:41:c9:a1:8f:54:02:1e:
04:f9:c6:21:d3:1a:fe:bf:b3:0e:7b:eb:8f:94:c5:
01:6f:2a:18:4b:6e:8f:25:c4:cd:65:01:62:06:86:
06:b2:9f:87:85:48:f0:cf:07:7c:61:e7:db:20:c8:
e6:78:38:3a:c5:e5:5f:f5:a1:b1:ce:44:41:60:ca:
f4:f6:79:db:bd:52:da:b6:e3:36:9d:3d:fe:6f:fa:
8c:ef:11:b1:12:02:bb:e3:88:10:36:0c:96:b4:75:
8f:ce:05:1a:74:3c:4e:1b:2c:68:e8:e6:d1:2e:6e:
0b:36:72:7e:d8:fd:e4:f7:cb:cc:82:bd:37:21:75:
b7:ab:2d:ed:3b:75:ac:36:11:ad:56:a8:c2:00:18:
44:25:09:ba:bc:27:cd:27:dd:bc:c0:03:44:37:40:
39:82:f0:fb:22:fc:d1:79:b4:9b:5f:2f:c5:d7:71:
b5:5f:08:27:76:b2:38:ba:30:41:5f:8c:c5:4c:e1:
d4:f6:13:b0:c5:09:a1:38:49:30:c3:63:98:1c:98:
24:45:33:10:b3:1f:77:ce:d4:f2:95:79:2d:70:7e:
3f:1a:b7:a2:34:1e:3c:25:8a:46:8b:0f:78:e7:7e:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:81:78:1B:0F:A1:85:DD:3B:CE:B4:C2:3C:23:D0:A4:31:88:2D:CB
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ab:c3:2f:ce:88:b4:d6:53:f3:2c:53:b1:2f:a6:63:fd:96:
d9:80:c1:93:52:09:4d:f7:58:a0:57:6d:30:99:ff:85:6e:bb:
17:44:94:a3:c1:77:7e:d6:8d:1e:c2:32:89:e1:3c:9c:f1:6f:
96:66:90:ce:e5:0b:d5:5f:69:c6:e3:56:fe:4d:16:71:14:09:
5e:d1:9b:34:71:43:f1:f7:a4:9e:97:dc:b6:59:ee:26:1c:a2:
3f:a4:2d:b7:77:01:94:f7:72:57:8c:92:49:cf:ea:c2:09:cd:
45:df:d3:ac:d2:e3:cd:46:f2:cf:56:18:ea:92:b5:ae:98:31:
12:2b:40:ad:ef:fb:07:e7:cc:eb:e1:92:c6:4d:f7:f6:01:56:
d6:19:97:1b:8b:f7:cc:a2:51:f5:c0:e5:f0:aa:63:47:7d:7a:
e2:b4:99:bc:43:55:9f:5c:69:dc:fe:db:f4:f3:9a:bc:3a:f0:
18:c9:0c:53:f0:67:88:d9:12:00:ed:3e:57:1f:ed:dd:23:f1:
0f:7e:a4:63:51:c6:2f:b5:cb:7b:9b:fc:62:6c:18:23:56:c1:
93:0c:e1:12:da:fb:07:e4:0a:b9:2d:f2:93:47:3c:b0:6d:08:
23:99:64:6d:8f:86:af:02:68:d4:29:8a:a8:04:7e:ad:9d:6e:
93:c2:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:36:53 2025 by rpki-client