Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: 4Do4TM1pBiiNUDuRmbK5Ivjf/eczIELQMC7z7td/zG8=
Subject key identifier: 38:92:3F:82:65:82:A3:2F:B7:2D:F6:78:68:11:3F:AE:F2:47:0A:E7
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 01969F07D0274818AFBC0BB957F8C68D90B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 097D
Signing time: Mon 05 May 2025 06:00:11 +0000
Manifest this update: Mon 05 May 2025 06:00:11 +0000
Manifest next update: Tue 06 May 2025 06:00:11 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: OY98/3uc7TVYv+5LZPqKCh+jV8RR8PELTqsVUp3j3mM=)
2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=)
3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:d0:27:48:18:af:bc:0b:b9:57:f8:c6:8d:90:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: May 5 06:00:11 2025 GMT
Not After : May 6 06:00:11 2025 GMT
Subject: CN=38923f826582a32fb72df67868113faef2470ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:25:40:a1:f4:35:f3:ad:ae:ce:33:20:63:
53:26:19:98:16:24:a4:6a:27:b1:bf:ee:14:46:37:
4a:0b:82:bf:eb:a6:00:5d:90:af:7b:f2:8e:54:32:
4f:38:f6:9e:3a:c7:99:56:81:a1:72:59:46:b9:92:
18:c9:27:ea:05:27:0d:e6:ed:54:46:93:b5:51:c0:
4d:13:6d:19:1e:98:39:b9:0f:ee:64:75:1d:50:9f:
20:ff:97:92:20:41:5a:9e:d0:6d:1a:b6:30:3b:28:
7e:a3:0e:99:53:fa:5b:26:09:99:b2:f9:a8:25:cc:
df:38:21:b8:df:07:28:9d:cb:25:4b:92:de:42:29:
ed:6a:9f:1b:b5:0d:f0:f1:90:34:a7:a2:36:cb:ed:
98:61:a4:08:14:e6:5f:49:e4:ff:da:9f:4f:1d:ec:
92:77:f1:4b:16:ce:85:a3:c0:2a:f1:eb:f5:41:0a:
d9:92:47:8f:d0:00:8d:62:f3:04:ae:1c:7e:7c:20:
be:6d:79:d2:8e:04:b6:64:db:6d:42:5b:49:fc:ec:
39:e5:55:f8:1a:0a:2d:4e:d7:ec:68:17:90:66:e3:
8b:88:5b:90:96:4a:a6:64:0b:f1:0d:d3:cf:c2:1d:
6e:08:ab:e6:6d:8a:7d:b8:0e:91:f6:77:31:b3:01:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:3F:82:65:82:A3:2F:B7:2D:F6:78:68:11:3F:AE:F2:47:0A:E7
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ed:33:c6:3a:e6:cf:a4:aa:b0:d3:7a:8b:5e:8b:24:e0:7f:
43:f9:d3:f1:68:36:c9:0a:35:67:02:95:ed:fc:7c:fd:a8:41:
00:47:d5:1a:35:fa:b1:ad:a9:f9:b5:db:86:39:2b:59:37:30:
ff:ae:49:ee:67:07:90:3b:59:e2:5b:fd:d1:44:e5:21:03:50:
bb:16:09:6d:bc:81:62:73:ae:11:9f:17:c1:f4:40:14:54:b9:
17:6b:15:8c:08:c5:1f:af:e9:cb:f6:cf:dc:b9:6a:d6:eb:f0:
e2:9f:69:fa:b2:a8:37:9a:86:2b:fa:57:9e:ab:01:78:17:4e:
2a:00:87:da:5e:1c:b7:11:9d:ab:2f:24:f1:60:2a:f4:39:9a:
b5:b9:ac:98:b6:f7:15:62:6f:ef:0d:07:95:a8:07:db:66:ed:
56:52:1f:80:a5:8a:fe:34:cc:99:d8:6e:b3:06:84:5a:e3:33:
e2:10:93:87:29:4e:0f:b2:64:19:71:90:4c:2b:db:da:04:e0:
1c:62:ab:a8:19:59:49:95:ab:e9:72:eb:85:63:12:aa:b1:08:
e3:57:72:77:95:d5:fb:fd:07:39:23:1a:f6:0e:04:c9:27:53:
de:1e:86:99:d2:14:cb:c7:82:6a:10:04:89:2d:b7:f9:8b:62:
23:66:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:55:04 2025 by rpki-client