Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
File: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json)
Hash identifier: podvY95goYFDYJl42EmaTVd+nynA79MRoFV2PFDXejs=
Subject key identifier: C9:80:AF:3C:62:89:DF:39:37:25:8B:D5:3A:6E:E2:5E:76:9D:47:55
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial: 0196B7EC7414378175063762D1597BBC8F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
Manifest number: 0BF2
Signing time: Sat 10 May 2025 02:00:48 +0000
Manifest this update: Sat 10 May 2025 02:00:48 +0000
Manifest next update: Sun 11 May 2025 02:00:48 +0000
Files and hashes: 1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: Xd1W7ep95s4aStobi3ZKvKrE11pSBq4ojdxJtYD37kE=)
2: C6VvOJhQ6LO3CnHxJ6KuDcvQH2c.roa (hash: SLDEqSk+tN+j+2o7yXrUPF3ZHKKAK2CSYSuFTkFJRpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:74:14:37:81:75:06:37:62:d1:59:7b:bc:8f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Validity
Not Before: May 10 02:00:48 2025 GMT
Not After : May 11 02:00:48 2025 GMT
Subject: CN=c980af3c6289df3937258bd53a6ee25e769d4755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:8e:ca:ae:8a:83:96:09:9e:4b:9b:8f:0b:
b9:91:9f:98:e1:eb:0d:52:f9:bf:dc:d9:52:e7:6b:
aa:b3:12:c5:c8:8a:56:63:a7:d6:ee:13:c3:a3:c4:
cd:40:02:c5:fa:e0:72:30:0b:10:30:71:f7:59:b7:
aa:9a:bc:04:1c:ad:24:2b:ae:8a:6e:37:88:94:2c:
d8:0c:56:44:95:7d:7f:4b:e3:b0:eb:f1:ec:30:98:
7a:4e:64:43:3e:d3:f3:06:cb:e3:9a:99:13:05:6d:
73:26:b3:00:94:d8:91:81:17:a1:00:de:a4:6c:77:
93:2f:36:f7:38:32:a5:aa:e5:e2:2d:bd:41:f0:0c:
0f:c6:c4:33:e2:0d:74:e8:b3:3a:7e:f8:3c:4b:b9:
c7:6d:6a:c7:58:4c:4d:6c:b7:22:fd:2a:b8:10:03:
88:55:15:25:28:9e:e3:f9:05:d2:5f:c1:7a:90:65:
ce:45:34:33:d9:fe:7e:b5:7d:81:b4:b1:5e:41:3a:
6b:e8:6b:30:58:22:d9:f2:cf:18:ea:a9:84:b7:16:
d1:01:39:a0:1e:06:1c:f2:34:4a:53:47:b6:8c:1a:
c6:12:68:17:29:53:3e:17:d6:ec:4a:fc:38:53:87:
d1:24:a9:5c:ee:e6:22:44:cd:53:60:a5:a2:12:2b:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:80:AF:3C:62:89:DF:39:37:25:8B:D5:3A:6E:E2:5E:76:9D:47:55
X509v3 Authority Key Identifier:
keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9f:f9:ff:fe:e7:5b:c2:a3:54:a9:b1:0c:0d:2c:6f:f6:85:
25:b4:cc:d0:82:f6:54:ef:fb:6d:fd:db:fe:17:70:e6:23:2b:
61:42:6e:44:0f:de:64:b8:d9:c1:ea:16:e6:57:8a:c4:68:d3:
b3:f3:12:9d:d7:db:50:92:ac:a8:a8:9f:93:28:25:bd:8c:6e:
44:79:38:9d:b1:c9:a8:44:87:91:77:49:2a:b3:5a:c2:10:a6:
a0:52:ba:4b:65:af:a2:3f:db:4f:fc:d4:22:11:40:55:94:ec:
5b:4e:3c:65:c1:84:97:f5:4f:40:19:79:14:71:fe:90:9d:5a:
55:c0:0a:73:a5:80:e6:6f:f2:bd:88:d1:7b:70:a1:41:14:44:
8e:ae:81:15:9e:ba:b4:33:4c:a1:08:69:ea:a9:f6:04:ca:21:
1d:e8:2c:8e:82:ad:9a:f7:79:bb:66:3f:e6:b5:fd:e8:e4:96:
d1:74:1b:ad:43:03:57:73:53:5b:8b:d0:b7:68:46:ba:5b:fd:
41:10:2a:c6:d5:cf:e1:33:67:40:7a:37:8d:09:74:97:e4:f2:
8b:ab:8a:66:70:ef:7a:73:69:1e:9e:b9:2f:c3:3d:7c:d9:08:
a3:9f:84:0e:af:fc:43:d8:aa:95:c2:b9:2c:67:55:ef:ac:5e:
d0:0c:2c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:19:23 2025 by rpki-client