Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: 8xMu1l19VF7okTXFLDLplmrB3GyINyF0BIZnvjTNp1Q=
Subject key identifier: 46:8E:AD:2C:14:34:56:28:0C:8E:84:A0:25:53:9D:78:59:D9:FA:35
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 01963E7930DCC417AD6EA24F6D173CDECD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 11DE
Signing time: Wed 16 Apr 2025 12:00:51 +0000
Manifest this update: Wed 16 Apr 2025 12:00:51 +0000
Manifest next update: Thu 17 Apr 2025 12:00:51 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: WMrM+LPEAGjP/1ItV9j11OdjXDyuqPcLRkAnJl/sMLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:79:30:dc:c4:17:ad:6e:a2:4f:6d:17:3c:de:cd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Apr 16 12:00:51 2025 GMT
Not After : Apr 17 12:00:51 2025 GMT
Subject: CN=468ead2c143456280c8e84a025539d7859d9fa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:f7:2c:9f:31:e2:cc:0c:cb:32:4c:0c:ee:
21:45:8e:d6:9b:bf:93:26:42:9e:cc:3e:12:72:36:
da:e6:28:41:a5:6c:ab:e7:91:6b:cb:24:61:ff:41:
3b:1f:2c:dc:0a:3d:a1:d6:9a:87:e2:94:ec:28:19:
30:bf:1f:98:24:90:e5:aa:a6:ad:8d:42:4d:af:d0:
14:6d:b4:cd:bb:93:e0:a6:8d:7e:a1:2c:5c:1c:98:
73:73:68:14:75:27:0b:a1:31:7e:f0:d7:73:d9:9c:
0e:f0:24:7c:08:f7:8f:98:28:10:cc:f6:50:ae:31:
a1:77:40:6f:ae:4a:cd:19:3f:bf:1c:d4:e0:a7:34:
a7:d8:81:c1:b0:b9:3c:87:a6:12:14:fa:93:85:0f:
d3:14:7f:76:ce:93:2a:b3:ad:89:fb:0d:8c:0d:06:
d0:59:ec:2b:4b:de:c8:98:42:39:83:ac:9c:9a:97:
68:b3:d7:c8:bb:cd:c4:f4:df:86:72:ce:fc:c5:6e:
4e:d8:2b:81:06:46:c3:f2:37:93:6a:2c:95:f6:92:
2b:f7:9c:0b:eb:f8:29:27:ab:06:fc:b9:72:89:cb:
55:b1:e0:99:c9:17:54:ac:dc:2b:87:bb:aa:b3:cd:
4d:52:7c:c9:8d:c3:99:90:a8:dc:88:80:9f:66:ec:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8E:AD:2C:14:34:56:28:0C:8E:84:A0:25:53:9D:78:59:D9:FA:35
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:95:94:54:a2:73:72:b4:eb:08:c4:6e:27:95:e3:99:61:3c:
71:07:21:f5:03:3e:1a:fd:ee:fb:29:08:e9:5f:99:c1:30:a3:
a0:df:9d:1b:62:b0:93:48:f8:a1:c3:b8:db:60:6d:fe:84:ae:
3b:11:fc:a8:42:83:2d:0a:a1:45:3d:f8:62:c4:e1:34:b9:7f:
ad:2d:08:18:d1:c4:3b:3e:a6:fd:76:6f:35:90:74:ea:5d:56:
d8:0c:03:f7:48:ad:6f:44:1c:c7:7a:f2:2a:68:8c:0f:63:09:
31:d2:31:af:3c:a0:b9:96:94:12:00:0e:d5:a2:b7:79:0b:4a:
e2:6e:ce:8c:a6:17:65:d1:e2:ef:8d:40:10:01:50:3c:45:73:
27:10:1a:a3:b0:b5:75:3f:75:f8:d1:5f:ec:b4:b4:42:39:2e:
2b:52:4c:25:39:10:ca:08:d8:d2:1a:4b:bd:de:6f:d0:81:36:
da:90:46:b2:69:8d:62:4c:14:70:26:8a:48:7d:1a:62:86:3d:
71:a8:fd:0b:76:22:4b:be:ad:e3:28:f8:d6:f2:0e:81:00:15:
e7:fc:aa:8d:d2:10:56:c7:21:79:33:06:14:87:cb:3f:7f:c1:
02:a4:72:35:d9:cf:a3:50:9e:4a:a8:a5:d9:0a:e6:7e:b0:35:
14:8f:56:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:46:32 2025 by rpki-client