Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: kPrzpB/RBF74MAJ7S+8HkUsfw2LukofwkLnwiCVW3jI=
Subject key identifier: 7A:D5:2A:8C:04:0A:8E:22:39:D0:56:88:F8:F0:B1:41:D2:43:19:4B
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 0196BC008989992F05FAB1BC100DDD49F602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 0829
Signing time: Sat 10 May 2025 21:01:13 +0000
Manifest this update: Sat 10 May 2025 21:01:13 +0000
Manifest next update: Sun 11 May 2025 21:01:13 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: xPaXMsSX4seBG1VAyo05q9DPhZXtw7d8QwUF6IgUScY=)
2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:89:89:99:2f:05:fa:b1:bc:10:0d:dd:49:f6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: May 10 21:01:13 2025 GMT
Not After : May 11 21:01:13 2025 GMT
Subject: CN=7ad52a8c040a8e2239d05688f8f0b141d243194b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:18:78:c8:5d:7d:f1:70:f5:d5:e8:0f:93:
d8:2e:f9:ec:2d:dc:98:5d:da:e1:32:f3:8b:89:5c:
59:3b:7e:b3:e2:cf:5e:3f:a9:0d:80:4f:8d:ec:95:
7f:0b:0e:37:be:e5:27:80:6d:39:9f:f2:4d:7d:f2:
c8:32:91:cc:e8:74:9b:7d:77:15:9c:65:17:ac:79:
35:6e:b9:90:55:ac:02:6d:fb:3f:04:e0:bd:e3:b2:
66:45:56:a1:ae:74:18:e3:6e:97:11:53:2a:73:47:
37:85:0b:08:ca:45:e6:24:ed:5f:61:88:23:eb:52:
06:ea:46:a8:97:74:15:92:a8:3e:71:7a:ae:7a:4d:
e1:36:26:cd:ec:d3:00:ad:ea:2b:0b:74:f9:51:f7:
d5:aa:4a:90:0a:95:ce:64:8f:12:4e:a4:29:2a:0d:
14:52:3a:a4:22:24:c7:a5:77:58:ad:b9:6a:60:4a:
e0:92:86:28:ad:3b:61:2f:35:89:fe:6d:d5:d8:97:
67:30:2c:1e:63:d4:76:07:22:20:2d:a4:f5:6b:ec:
cc:78:a1:da:c7:bf:ee:95:63:f9:50:49:8c:09:9e:
28:ff:2e:2f:7c:64:bb:49:2a:e8:87:eb:f3:15:73:
ea:45:4b:63:a8:3f:89:95:96:79:2a:dc:16:0d:94:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:2A:8C:04:0A:8E:22:39:D0:56:88:F8:F0:B1:41:D2:43:19:4B
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:22:63:57:70:34:3a:68:e6:b8:38:b3:6c:c8:17:0e:43:45:
b9:a6:85:37:52:d9:55:ee:ca:c5:b5:d5:66:83:54:b7:eb:6f:
d4:88:6e:83:9f:2e:1d:52:81:d1:e7:6d:4b:ab:ef:a5:60:09:
8e:e2:87:2c:b5:47:79:8d:ff:2b:8d:42:2b:01:95:fd:83:39:
05:a3:8b:95:d7:a1:51:08:2c:27:47:22:84:86:5f:d8:25:49:
ce:10:b1:93:99:17:b0:ae:b4:6f:7b:d5:91:d8:67:f3:b7:d4:
b9:7a:0a:1f:81:b7:52:6e:00:41:74:f2:f1:62:37:7e:b8:2c:
91:c4:8a:4c:09:85:34:2e:5d:45:ca:c4:bd:7e:2b:4c:2c:9b:
a4:d2:d9:99:2b:5d:a9:c3:69:43:91:87:dd:bb:04:66:08:f9:
79:d6:6e:4d:2e:d5:62:bf:46:c3:33:84:22:b4:57:fd:46:d2:
cd:47:68:38:ad:50:d6:5d:68:03:19:b6:06:53:34:31:3a:b0:
17:9b:e8:cb:a9:f8:fa:de:39:d9:5a:0a:d2:d5:ce:c7:9a:f0:
f5:9d:7b:e3:49:ca:90:b2:86:d2:a7:52:93:5a:4d:2d:66:8d:
65:bc:37:20:38:6c:51:55:c0:70:cf:43:b5:cd:c4:28:3d:14:
29:d1:51:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:24:13 2025 by rpki-client