Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: Xq6A2URYQs0FZkFmNQKKbgGvQNrgp1KjnAPLLr4bNd8=
Subject key identifier: 94:51:D1:BB:99:93:E9:4C:15:D3:F6:7A:AC:9F:EF:B3:1B:10:15:91
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 0196BA7F84C4690E43528660912AD8584C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 88
Signing time: Sat 10 May 2025 14:00:41 +0000
Manifest this update: Sat 10 May 2025 14:00:41 +0000
Manifest next update: Sun 11 May 2025 14:00:41 +0000
Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=)
2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: 3EeW9ftYLnDqGUnB0ehESKyIHnNtvEEyY0zCf0GUBA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:84:c4:69:0e:43:52:86:60:91:2a:d8:58:4c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: May 10 14:00:41 2025 GMT
Not After : May 11 14:00:41 2025 GMT
Subject: CN=9451d1bb9993e94c15d3f67aac9fefb31b101591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:26:ce:ef:15:07:62:3d:5b:d2:6f:fa:fe:
aa:96:06:e8:db:15:63:0d:79:c8:f3:f4:ab:20:33:
a1:ee:67:b8:0b:34:6e:4c:8e:60:fa:de:2d:72:68:
f8:81:ce:c4:b8:b2:d8:ca:c0:9d:e5:40:03:57:f9:
1c:fb:fe:7c:6d:1f:be:10:b4:7b:8e:7d:51:ad:56:
5e:71:47:1b:ca:34:24:ef:03:38:44:43:c8:d4:ad:
ae:ef:2f:5d:13:95:d8:fb:11:15:0d:58:58:66:87:
e1:a7:ee:ce:f6:b0:fa:19:36:16:fb:e8:72:2e:29:
a9:75:8a:e8:1e:2f:b4:f6:81:41:fb:6c:e5:f7:bf:
22:08:05:46:f7:db:e8:26:c2:c4:3f:f8:62:bf:f2:
be:2d:d8:08:55:76:47:88:56:d3:22:6d:57:5c:2a:
8b:08:88:58:6f:fd:de:e8:44:1f:6a:1f:40:08:db:
1d:cd:43:e9:70:bb:8e:ef:cc:cb:ba:e0:b4:6c:e5:
4a:21:8a:34:e0:77:a3:19:df:17:81:40:92:70:1a:
8c:30:09:6a:be:e3:63:87:a1:1c:12:c7:45:ec:81:
a1:ce:5c:cd:fc:ab:f1:f5:a4:cb:7a:4c:be:57:6b:
a6:05:fd:66:88:aa:6a:8b:be:00:dc:7f:ff:ba:c5:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:51:D1:BB:99:93:E9:4C:15:D3:F6:7A:AC:9F:EF:B3:1B:10:15:91
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b2:d1:5a:51:23:90:71:a1:b1:7b:96:ed:86:65:4b:1a:c6:
d1:a1:e7:83:06:80:ac:a7:6c:60:23:5c:2d:9d:ed:a0:f0:3d:
10:31:0c:2e:0a:c2:90:79:d7:8c:cb:08:5a:f5:d1:70:28:52:
81:64:74:bb:a3:c9:74:c3:73:fe:ab:2c:bb:7f:21:1b:86:f5:
fd:45:a1:fc:07:02:03:84:65:21:41:c5:70:6b:26:61:f6:37:
dc:09:a2:04:67:74:cc:bd:98:bc:0e:d4:7a:a6:90:f8:7e:9f:
e7:35:de:7b:a9:73:74:8a:58:bf:7e:9d:0b:6c:fd:d1:6c:e0:
1f:c2:da:63:e2:bc:b7:9d:93:d7:a5:be:1a:6f:33:70:23:32:
6e:99:b4:c3:e6:b3:0c:15:8e:0f:5e:4c:73:88:0c:b8:fc:6e:
e9:d6:ca:b7:6d:9b:a5:e2:4e:ca:74:61:db:38:80:e6:69:b4:
55:9b:c6:8f:0c:35:f4:9e:4a:95:89:49:c1:3c:a3:96:a7:46:
20:ec:1b:4a:95:8b:d5:9d:92:0b:91:f1:9c:a2:8e:26:ff:04:
17:3d:44:95:df:f3:5d:54:5d:18:5d:3b:87:10:f4:88:ef:f2:
c2:e6:48:ab:46:1c:0b:ea:3a:5a:73:45:96:f8:a0:bf:c8:24:
d5:5c:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:04:10 2025 by rpki-client