Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier: k2YSKqTC5tA2TH5eIZJNSkc2cCzqlJIQtGoUMwyvC7s=
Subject key identifier: D7:E2:EE:E5:8B:84:82:3A:38:1D:3B:C5:27:06:59:F9:1C:40:83:DD
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial: 0196C081C603D30CF39FA06BC94ED4D9FE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 18:00:52 +0000
Manifest this update: Sun 11 May 2025 18:00:52 +0000
Manifest next update: Mon 12 May 2025 18:00:52 +0000
Files and hashes: 1: TTn8sD8XVXKDyT7akuDl-7NaiVA.roa (hash: G+wfHyyl2e/lbOKV3OV3aaADlcnryO/8kE2PLZtYozg=)
2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: pTSJKO3RjKkTcC5wcMog0kdhtQM70NF5eiN/nnuY+UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:c6:03:d3:0c:f3:9f:a0:6b:c9:4e:d4:d9:fe:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Validity
Not Before: May 11 18:00:52 2025 GMT
Not After : May 12 18:00:52 2025 GMT
Subject: CN=d7e2eee58b84823a381d3bc5270659f91c4083dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:25:5a:80:03:6b:33:51:c7:dc:cf:22:1d:57:
5a:74:90:e0:75:d5:8a:b9:fd:92:cf:94:06:cb:9c:
75:30:38:7a:62:9f:6c:9c:f0:9c:1c:5d:c4:c9:4f:
32:5b:aa:a6:4e:b5:5b:63:3b:48:cf:b2:39:b7:3c:
94:06:5f:fb:e8:cc:18:94:ae:8f:e2:53:0c:6e:f7:
75:9f:c0:47:24:04:38:2d:a8:70:bf:fe:7f:cb:78:
99:04:ac:aa:b3:9f:34:2d:01:b0:04:6f:6e:df:e9:
36:51:70:fa:f1:7c:4f:e8:31:e5:f1:29:7f:6b:ac:
0b:0a:ae:ee:1d:46:bf:60:16:4f:f9:69:bb:24:05:
75:d5:71:b8:00:48:61:71:c7:79:fb:40:e3:b9:e2:
09:87:73:49:b4:4e:50:44:5c:fe:a7:d0:55:55:a7:
3b:5e:d4:6b:6e:17:93:75:e7:44:65:0d:89:48:07:
01:8c:1d:28:e0:ec:8f:66:d7:d0:13:3e:fe:48:52:
68:16:62:bd:f6:f5:79:bd:8f:2c:f3:61:7a:80:45:
60:e0:e3:42:6e:6f:42:cd:0b:2c:33:47:b1:bb:d4:
71:49:d5:5f:8a:3d:49:51:ac:05:6b:0a:a5:b6:1d:
09:a0:82:32:63:79:a3:e3:42:d4:e7:ae:00:4d:87:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E2:EE:E5:8B:84:82:3A:38:1D:3B:C5:27:06:59:F9:1C:40:83:DD
X509v3 Authority Key Identifier:
keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2a:9c:ee:4e:93:b8:f2:6f:d7:40:eb:a6:05:22:8f:ee:bf:
59:80:3d:46:67:41:aa:39:65:99:9c:fd:02:9b:88:86:00:80:
a6:90:7a:de:96:e7:6b:56:c2:d2:02:76:48:41:33:e2:56:bc:
01:7b:de:a7:ef:d1:04:1d:9e:13:67:a7:56:1b:02:7b:c4:27:
52:d6:a2:4e:83:b4:16:16:84:5a:fc:b6:af:6a:9b:5b:20:02:
5b:73:db:e6:b2:78:72:bd:04:a8:74:4e:4a:17:6b:93:78:a0:
50:8f:0a:5d:c3:49:96:1a:38:9a:07:26:e6:63:41:f8:02:63:
b2:d0:3d:c9:78:0b:a9:50:29:51:eb:c4:9f:09:e3:90:f4:c0:
a7:8e:3d:c6:a6:f7:8d:21:a6:b8:18:d1:1c:a1:a3:16:9f:16:
e5:ca:ff:67:a5:1c:c8:a9:06:81:da:e9:f8:c4:07:de:e3:3f:
db:52:0d:29:2b:14:9c:ad:e4:6c:71:ef:12:58:d1:e4:b3:82:
0d:bf:17:a4:9c:36:7e:64:08:46:b2:2d:14:aa:41:d3:89:1d:
0f:a7:fc:c0:45:bd:08:2c:8e:d9:f1:67:71:56:5f:e4:26:66:
fc:c2:c9:7b:49:41:75:4d:fe:70:4a:13:7f:11:97:00:0d:93:
3d:37:40:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:07:18 2025 by rpki-client