Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
File: IHeZAnMp8iaCdkVzryEV2pWp9r8.mft (raw, json)
Hash identifier: 83lpX+eszlSnnUyv0ysX8czYtYaAg5Q0EEa35XTgYi0=
Subject key identifier: 8C:CD:E7:05:25:74:7E:ED:AD:0B:5D:81:CC:45:B9:FB:39:63:81:3B
Authority key identifier: 20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
Certificate issuer: /CN=207799027329f22682764573af2115da95a9f6bf
Certificate serial: 0196ABE84475890FAB39337D34F4523D2512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
Manifest number: 0E2A
Signing time: Wed 07 May 2025 18:00:47 +0000
Manifest this update: Wed 07 May 2025 18:00:47 +0000
Manifest next update: Thu 08 May 2025 18:00:47 +0000
Files and hashes: 1: 8EaewYTyFly5jEaj4gZEqMNcVMk.roa (hash: gqxj+841N8d9uy4L59oEcZudU4ge+IzVBr1jzF4wgjc=)
2: IHeZAnMp8iaCdkVzryEV2pWp9r8.crl (hash: XyGwU6UlfeSp3vtAJbi4U5nb+UZjNX8pRBgfjwXncEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:e8:44:75:89:0f:ab:39:33:7d:34:f4:52:3d:25:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207799027329f22682764573af2115da95a9f6bf
Validity
Not Before: May 7 18:00:47 2025 GMT
Not After : May 8 18:00:47 2025 GMT
Subject: CN=8ccde70525747eedad0b5d81cc45b9fb3963813b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:ba:f2:12:05:41:c5:36:2f:d9:e5:48:47:
77:4a:57:87:bc:a1:ce:17:e1:44:84:91:59:12:d2:
4d:36:98:c0:b6:bf:3c:20:59:65:89:98:14:57:5a:
a8:6f:78:9f:77:23:2c:74:62:e2:10:07:22:bf:43:
b0:1a:f0:22:bd:2f:55:2c:cf:77:8b:4c:67:67:d2:
8f:f8:34:44:9a:a1:83:a1:ea:86:20:b6:36:26:83:
d4:86:a7:51:f9:88:79:bd:e8:f0:42:a5:f6:22:52:
74:05:5b:96:90:d2:93:e5:fe:47:9d:ad:7b:b7:66:
96:9e:8e:2d:12:45:d3:a5:f0:5c:b4:b6:70:b7:6e:
c7:5c:2e:5d:b6:cd:e5:3c:a1:01:22:0f:2a:e3:9d:
bf:5f:44:da:d6:cd:35:3d:7a:2c:2f:a4:88:f1:55:
31:f0:00:0b:4b:86:cc:74:e2:15:8b:59:96:c3:34:
e2:77:44:3c:87:7f:08:50:d3:f3:32:72:b1:59:6b:
4d:04:88:f9:1c:8e:7c:3d:fc:83:32:dd:e8:91:6e:
bf:1a:90:48:7d:02:d6:68:06:e3:27:9e:fe:bc:c2:
1b:ed:03:ca:1f:bc:8d:2c:8e:fb:26:e7:9e:ef:1f:
1a:a7:2d:7a:1d:e8:f8:b9:35:50:8f:dd:d8:86:d5:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CD:E7:05:25:74:7E:ED:AD:0B:5D:81:CC:45:B9:FB:39:63:81:3B
X509v3 Authority Key Identifier:
keyid:20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:aa:c5:7b:8a:ce:b5:ab:ef:9e:17:47:2f:07:3d:c6:82:46:
1d:75:1e:3b:9e:a7:d3:ee:d8:dd:2c:ea:0b:a6:2f:69:9d:71:
7e:8b:9e:cd:2d:c2:f2:f9:96:c8:86:49:0c:b8:c3:cd:93:da:
65:4c:01:30:21:ba:b4:c7:b1:9c:30:3b:b6:38:77:be:4b:d4:
ab:9b:c0:88:fc:20:27:9d:30:63:bf:02:36:86:46:db:c3:95:
9c:43:b8:91:55:21:7a:fd:8f:5b:c5:b0:01:b3:11:2d:0e:9c:
2a:e2:3f:6d:40:06:d0:0a:e2:24:1e:e3:a6:95:2d:11:ea:e6:
0e:00:95:34:a5:93:a3:5b:bc:df:d4:36:d7:e0:69:e5:dd:74:
5c:08:0a:86:44:b4:a4:ba:dc:f4:a3:25:7e:4d:e6:5a:73:d5:
c7:f7:b3:37:fc:c9:b5:41:32:6b:f4:86:5a:b6:c9:91:39:d9:
c2:ff:3a:0c:9f:e9:bd:bd:25:6d:14:13:12:f9:6d:05:11:6b:
7b:a0:7d:ac:51:01:94:a0:4f:6c:cb:f4:fb:d7:a1:8b:80:40:
45:f8:3e:a1:1a:0e:f7:d8:82:6d:b3:0b:6b:a4:27:d8:5f:fb:
7b:31:cf:c3:69:b8:1b:c8:75:73:96:67:21:50:a7:87:1b:06:
f6:68:6e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:58:11 2025 by rpki-client