Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
File: g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json)
Hash identifier: eDhN9FpHZWJMaKMIiwxDcdB9JxBky+9d54tRW5JQW8I=
Subject key identifier: E8:D4:8D:77:97:F2:AB:04:44:66:FB:2F:E1:18:9A:6C:B5:70:B2:C3
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 0196AEB2602FDF64F58809A9C62B9EA76B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
Manifest number: 088E
Signing time: Thu 08 May 2025 07:00:47 +0000
Manifest this update: Thu 08 May 2025 07:00:47 +0000
Manifest next update: Fri 09 May 2025 07:00:47 +0000
Files and hashes: 1: Z7h5qadGJoQ6FUOneZqqbZNwHng.roa (hash: l8WEv/DVA3/x8QQSyaVc6ay+0r3lEE5lR9pYa08V1FE=)
2: fninY7dk4NBx5RTL5R_Wezr9T0s.roa (hash: SwOpz8NdRi+4j0eDktQnp/qAQ8UOrHFKwcilSnSB5hM=)
3: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: Tbm14J5wvdoJoJFn25rRJIvf3/iBgxnVO0uUeOyfI6s=)
4: ktAAidM8yuGSNSk_nWhJUqA9KEs.roa (hash: PukwcAGvFtblvafh80ccf3hyXxWAP6VQ8wyQlvDsA6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:60:2f:df:64:f5:88:09:a9:c6:2b:9e:a7:6b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: May 8 07:00:47 2025 GMT
Not After : May 9 07:00:47 2025 GMT
Subject: CN=e8d48d7797f2ab044466fb2fe1189a6cb570b2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:0b:bd:6a:80:98:ad:65:e6:b2:c2:00:9b:
6e:7c:8b:b6:2b:78:21:5e:88:d1:bd:75:30:8a:af:
a9:75:ae:bc:07:5a:cf:84:d0:11:60:24:6f:02:81:
c0:ed:cc:27:85:f2:be:08:37:ee:93:ec:4e:f0:89:
03:58:12:a3:f0:94:f0:62:a7:8e:f0:e4:7e:88:fb:
f2:6a:f5:d0:57:e7:93:dd:c4:9c:6c:2d:ca:30:96:
ab:9a:cc:91:37:4c:1e:d6:11:84:e5:a0:da:43:52:
7a:8c:3d:4d:c7:d8:fc:67:8e:8d:cf:e3:a4:13:0e:
09:1a:77:8e:2a:cd:96:68:37:dc:90:4f:d9:7d:9b:
73:a7:e6:39:ee:e7:8f:60:1e:48:37:d4:fc:cd:7f:
db:c9:d6:50:86:fc:3b:98:76:de:a0:ee:05:51:80:
cc:53:f3:c4:44:fb:2a:56:0c:40:d6:6f:00:d0:37:
3b:84:3c:1a:8b:16:9a:6a:f0:b0:40:41:6c:0a:1f:
94:13:c2:d2:d4:62:a2:00:1a:67:68:9a:2d:41:23:
6a:27:68:07:57:82:fc:f1:31:a5:4e:40:ae:7e:27:
87:48:6b:65:6e:7a:5c:ee:4d:d4:e6:05:fd:16:be:
27:25:88:0f:a2:ab:db:25:93:7a:ba:d1:1c:bf:3d:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D4:8D:77:97:F2:AB:04:44:66:FB:2F:E1:18:9A:6C:B5:70:B2:C3
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fa:f1:76:0f:45:1e:c6:93:d6:99:32:de:cd:7a:f0:7b:cb:
91:6c:65:f4:8a:b4:8a:5d:d5:0d:aa:bf:bd:98:4c:55:66:b5:
c3:4e:a1:6c:2d:a7:66:d8:fc:cd:6d:2d:4e:91:7c:0d:a0:3e:
ef:b7:df:02:ea:d5:16:c0:39:76:a4:78:2a:aa:b7:d4:78:55:
ea:75:9c:02:3c:67:a0:4f:61:a2:58:a6:00:8b:d2:8b:e0:11:
07:c5:b2:96:6d:b5:ec:19:18:8d:3c:cf:72:87:f5:60:52:76:
23:2f:1d:33:35:ca:1f:fe:57:e6:0c:57:be:35:a2:de:87:54:
c4:f1:5d:99:d4:09:1d:65:0f:56:ca:bc:86:50:7c:7a:66:4d:
d4:aa:d0:80:af:de:29:41:3b:90:1a:e0:3b:f7:72:e6:76:82:
18:1a:61:b2:53:2f:9f:93:3e:41:9d:eb:88:11:02:b9:c5:36:
19:2d:ec:a6:19:9f:77:bf:65:29:cb:6b:ba:6d:a3:27:d6:63:
86:08:87:36:e7:aa:3b:89:70:0c:6d:81:2d:26:7e:f2:c9:5c:
39:da:61:e6:31:49:9d:ca:44:55:b1:b9:cc:9c:87:01:87:15:
61:66:36:84:7e:55:bf:48:44:d9:e9:aa:c7:4c:19:28:a8:a8:
8d:fa:f9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:25:12 2025 by rpki-client