Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier: 2Hjh92lp+3U5p5zrIr6q+vsuiVvjZjDRt9jDqssQAlI=
Subject key identifier: EE:F9:3B:C9:87:A6:76:56:F6:F0:DC:97:3B:68:AD:E5:C0:B7:15:F2
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 0196B17C7B0C2E66178CEA98F0DE1BBF3F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 20:00:47 +0000
Manifest this update: Thu 08 May 2025 20:00:47 +0000
Manifest next update: Fri 09 May 2025 20:00:47 +0000
Files and hashes: 1: 5ocobjXAQN7qODPTjOuuWzc3Drk.roa (hash: 14+OU8AbCkgUWRx9CUz2j/OQprhkWMpdBdWPi/5l58Y=)
2: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: d0B/52WKXCsluhHrtyE/7KyPkR3OB74vLz4vfSR6wbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:7b:0c:2e:66:17:8c:ea:98:f0:de:1b:bf:3f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: May 8 20:00:47 2025 GMT
Not After : May 9 20:00:47 2025 GMT
Subject: CN=eef93bc987a67656f6f0dc973b68ade5c0b715f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a8:38:a8:b6:68:86:85:7e:c2:17:42:08:5f:
7d:85:b0:e3:15:17:a8:e6:6e:44:78:7d:97:d3:42:
83:77:08:6b:93:96:02:43:9d:0b:6e:86:b4:ef:91:
d4:fa:87:78:dd:36:a5:11:5f:93:d0:c4:0a:14:41:
f3:e1:f6:fc:96:da:14:38:53:df:9f:ad:60:a4:23:
d9:9d:dc:8b:37:84:0d:94:1d:70:a0:d1:71:b2:4b:
4f:e8:f4:97:9e:a4:f9:80:50:c5:a1:95:22:23:39:
fc:df:40:ef:5f:9f:c9:d1:82:d0:eb:a2:6a:8e:88:
1f:4f:98:90:3c:7a:c8:b0:36:94:dc:d2:ba:3f:d9:
9d:6b:7a:61:f9:ad:b2:0d:f9:c0:ab:4d:ba:14:c4:
13:62:7d:be:02:d7:06:af:05:aa:63:83:20:6b:8d:
a8:92:2b:ce:24:ff:da:81:25:bf:aa:b0:1d:86:68:
f1:6f:fa:a2:ff:dc:61:5c:83:fd:e9:ac:3f:14:3c:
3d:77:a3:3f:04:63:a4:bc:1f:b0:8a:a8:5b:20:a8:
55:8c:f9:ad:b8:56:10:dd:c8:d6:ca:47:16:d4:f4:
db:85:fb:b9:db:00:b9:67:72:32:7e:3a:db:4f:80:
fa:3e:5b:b1:8e:31:5e:e1:2c:b6:f6:1b:d3:7e:78:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F9:3B:C9:87:A6:76:56:F6:F0:DC:97:3B:68:AD:E5:C0:B7:15:F2
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f5:a5:4a:ab:7b:f3:18:4f:c4:11:56:72:be:0f:df:59:56:
20:ce:13:92:01:4d:5a:9e:14:83:cf:73:36:f4:14:99:69:44:
dd:12:8b:dd:83:cb:46:1f:4c:3e:bb:f8:76:0d:3f:75:09:23:
d4:a8:71:55:53:bd:57:04:dc:33:49:a6:c5:a1:a4:53:dc:e2:
aa:3b:1d:75:93:6c:9c:d2:23:df:a2:c3:a6:79:ae:07:ac:25:
4d:75:29:3f:56:d2:09:9b:46:31:6b:db:e8:7e:9a:24:9c:45:
62:6e:ed:07:c2:06:00:59:2f:77:64:6d:2d:b2:a6:86:ad:fd:
49:ff:f2:df:67:47:e0:12:3c:9f:2e:dd:e9:44:58:32:8b:32:
a3:28:9f:17:ef:29:4b:0c:f4:fa:5d:58:78:e9:66:a5:b9:01:
d5:8f:dc:27:47:8b:6d:1c:62:ce:0a:99:32:c2:e6:ab:a9:1d:
dc:57:ca:f1:ad:62:76:44:4f:92:05:91:1a:a3:14:e2:ca:e1:
e6:5d:96:e8:e6:bb:cd:a8:47:ad:f2:9a:38:fb:f8:c4:d8:cb:
67:9b:9b:42:37:e4:fb:e0:b5:ad:59:c7:85:30:72:8a:c7:e7:
e0:d0:57:ac:93:98:95:65:bf:6c:b6:e3:41:9e:5d:d1:4b:03:
7a:96:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:25:04 2025 by rpki-client