Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: 5YSQMrBb9gmhNTq9hBylBEr9642xWGEmQi5M05t99r8=
Subject key identifier: E7:E4:25:0C:A9:32:1F:32:6F:4D:38:63:64:69:63:6A:3A:42:E3:87
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 01974A0CDD160AC8E57105435EBCB4EEB10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 0E7B
Signing time: Sat 07 Jun 2025 11:00:46 +0000
Manifest this update: Sat 07 Jun 2025 11:00:46 +0000
Manifest next update: Sun 08 Jun 2025 11:00:46 +0000
Files and hashes: 1: 7KQuRRixFRD2InAA41vDA8b46Ss.roa (hash: pqy5x79CuZKPgbD27qu8dFnC6qLbsZEYs512o7B8AtE=)
2: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: pGNykmz4B1ZfIL/7GhBgMRP1YSVUrOH4u0ysS+nTIPQ=)
3: vM1WQhwz3cRdhRzRWZYRS2EG35U.roa (hash: 6cZcrnHWZ9ymPZFFF87v+vfASbgITAqQf6OR2I+DcbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:dd:16:0a:c8:e5:71:05:43:5e:bc:b4:ee:b1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Jun 7 11:00:46 2025 GMT
Not After : Jun 8 11:00:46 2025 GMT
Subject: CN=e7e4250ca9321f326f4d38636469636a3a42e387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:51:c3:9e:94:25:49:7f:c8:6c:36:03:13:
73:1b:59:00:11:15:5d:cb:37:fd:7a:d1:d4:96:21:
4d:ae:4c:74:34:90:74:5b:a3:f2:72:00:0c:e4:f3:
aa:e1:a3:87:76:a1:26:26:37:03:da:de:d0:6e:76:
56:43:6b:e9:8a:95:3f:78:e7:4e:f8:17:56:3f:1e:
f3:3b:03:34:91:6e:81:13:e6:53:ec:2f:40:60:7f:
62:c3:96:ee:d3:3e:76:a3:81:7f:ab:17:4c:94:f9:
c1:57:13:bb:98:94:8f:c2:41:90:f7:94:37:c3:12:
f7:9d:11:be:59:1f:c5:d5:c1:f9:81:7f:55:4f:e2:
94:20:87:37:c9:fe:1b:90:04:09:e6:95:af:83:7e:
f1:d1:6a:33:02:66:4c:a9:9e:21:bd:02:6a:bb:0e:
a9:a4:2f:fa:de:85:d9:6b:03:8d:35:a7:39:98:d6:
7b:6d:01:70:45:c4:05:39:1f:cd:a3:a9:05:8d:ab:
f8:4e:35:19:06:01:9c:9a:9d:84:d5:51:6b:a1:94:
d9:34:95:ef:9b:52:32:e2:78:35:3a:64:2f:9d:a2:
17:cf:b3:a6:62:b3:5a:f9:88:35:7a:99:00:c8:0f:
2b:30:28:76:4d:e5:4d:12:a8:87:4c:74:f1:59:f8:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E4:25:0C:A9:32:1F:32:6F:4D:38:63:64:69:63:6A:3A:42:E3:87
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d8:ca:41:f7:4d:eb:cd:f7:1d:af:b8:9b:ff:f0:82:33:d4:
b7:00:77:57:c7:b1:ff:fe:17:86:22:99:bf:6e:21:08:76:cb:
ec:65:35:eb:eb:7c:46:2d:a4:ff:51:cc:04:56:2a:64:2e:ae:
b2:ad:49:ab:40:dc:72:d0:54:c2:31:32:eb:7a:1c:99:11:fb:
39:37:0e:f9:99:ef:9e:5d:db:03:22:2b:a1:bd:a4:03:a1:6a:
3f:ed:36:7f:1e:b8:35:3a:67:d6:b3:2d:8e:dc:8f:a8:83:dd:
f8:29:bb:fc:02:bb:4f:2d:a8:cc:76:3f:bb:b6:95:16:6a:48:
9b:52:9c:57:ca:99:7b:0e:c5:e2:72:58:95:cb:8c:da:9f:14:
e7:d1:a6:d0:dc:8e:03:40:ab:b0:77:51:e3:83:03:72:10:b4:
a0:dd:ba:6b:e4:e5:e1:e9:6b:8c:1c:5d:78:1a:fc:1b:91:4e:
0e:68:1e:5e:c0:8f:b6:9b:c1:c4:a8:1a:c6:ec:13:d8:94:6c:
b2:91:c0:aa:a0:7f:e0:55:09:e0:1e:69:6b:8d:61:52:c3:86:
4b:3a:00:2a:f9:ef:d9:56:b0:a4:35:a1:81:90:29:8a:1e:b0:
a7:7c:70:9c:40:76:56:f7:b5:54:51:71:15:d6:9d:3a:4b:25:
af:0b:d9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:26:39 2025 by rpki-client