Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft
File: e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft (raw, json)
Hash identifier: +TSmfq9oAj5gfk+s9iVcV3lLWLwCrikYc/DXk/QLFdM=
Subject key identifier: 92:25:5C:EF:A8:B5:F1:73:CB:C1:BB:67:3E:D9:F1:A3:2F:82:81:D0
Authority key identifier: 7B:94:37:7F:71:A2:87:99:16:9E:E5:F2:81:0D:9F:87:CC:6A:D1:B2
Certificate issuer: /CN=7b94377f71a28799169ee5f2810d9f87cc6ad1b2
Certificate serial: 0196B47DC2B5EFF9D66BAE45730D708EB0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft
Manifest number: 0BC4
Signing time: Fri 09 May 2025 10:01:02 +0000
Manifest this update: Fri 09 May 2025 10:01:02 +0000
Manifest next update: Sat 10 May 2025 10:01:02 +0000
Files and hashes: 1: KbeB8RTbaet4HHqwjOfNfUS28EE.roa (hash: d76CFldFLmQtulEDPmcbaaGlJnvQhfpf5WrajAE48IM=)
2: e5Q3f3Gih5kWnuXygQ2fh8xq0bI.crl (hash: 8HDBpvUqz/P+HXGWOYhk1G25Ba619Vf6iRIhssFUWRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:c2:b5:ef:f9:d6:6b:ae:45:73:0d:70:8e:b0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b94377f71a28799169ee5f2810d9f87cc6ad1b2
Validity
Not Before: May 9 10:01:02 2025 GMT
Not After : May 10 10:01:02 2025 GMT
Subject: CN=92255cefa8b5f173cbc1bb673ed9f1a32f8281d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:35:19:f1:6d:1b:8f:2d:9c:7f:fd:23:f1:
93:42:73:fc:cf:3b:80:ee:e0:56:d7:c6:b2:12:12:
98:e2:10:e1:af:92:34:41:93:11:37:1d:c4:c8:b1:
be:2a:60:9c:fc:1f:9d:af:29:78:99:a3:11:c9:33:
79:2b:f7:7a:60:18:8f:f4:79:61:f6:8b:6b:0e:79:
8d:3e:3f:45:01:ea:e0:35:ef:6f:21:d1:b4:40:3d:
c5:b3:8f:3c:09:0a:67:6c:1b:05:6b:2b:b0:6e:63:
d6:75:10:4a:4a:16:1b:e8:b7:90:d6:bf:fe:13:25:
29:5a:0a:bd:ca:2a:5f:50:c7:d5:31:3a:32:bb:38:
84:2e:28:57:d9:74:67:21:af:58:6a:d4:46:9a:14:
0d:ff:fb:57:f0:c2:a6:5a:aa:c9:04:2c:3a:1b:a4:
16:71:b8:b3:28:c5:cb:8e:a6:fb:19:98:33:06:30:
ed:7f:50:17:27:bc:a2:d4:ce:2b:3b:e0:56:f5:1f:
0d:0c:6c:a2:c6:19:6c:92:b9:6b:15:2a:95:ef:4c:
67:02:55:85:d3:dc:a8:f1:b9:cf:7a:ea:02:2c:ab:
96:f0:32:41:55:44:47:11:7d:e7:f9:9f:25:79:d4:
5a:87:d2:0c:0e:5e:ae:b2:54:10:fa:3f:09:91:a0:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:5C:EF:A8:B5:F1:73:CB:C1:BB:67:3E:D9:F1:A3:2F:82:81:D0
X509v3 Authority Key Identifier:
keyid:7B:94:37:7F:71:A2:87:99:16:9E:E5:F2:81:0D:9F:87:CC:6A:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c931bc-e90c-4aa9-917c-4a2567aa5fce/1/e5Q3f3Gih5kWnuXygQ2fh8xq0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:13:dc:d6:5b:a6:8b:fa:1b:5b:02:d7:b6:ae:48:bd:0b:85:
96:9a:b5:4a:93:55:f5:53:02:1a:11:3f:d2:fa:00:09:d5:85:
d3:9f:cc:29:2f:7c:d8:fa:b3:c2:2f:33:93:9a:88:af:71:1a:
32:6a:7a:f2:9a:78:98:c8:26:b0:59:83:41:c8:57:c3:d3:e9:
06:49:fc:28:24:df:54:61:7a:f1:dc:74:45:57:60:c9:b7:5d:
1b:25:97:06:e2:47:e5:c9:6b:4a:db:d7:31:89:b8:ba:26:91:
6e:af:68:19:51:3e:b8:19:5a:32:3b:24:f1:b1:b9:80:91:4b:
7c:55:fa:e3:09:c2:ca:df:37:18:0e:a0:35:19:bd:0b:23:7c:
5c:3c:8b:67:f2:b9:52:14:9b:73:ea:01:34:d1:26:fe:4f:f8:
fc:0b:62:db:94:57:ee:95:65:88:50:4b:47:75:6e:40:17:d8:
99:fe:ac:88:22:09:00:87:5b:b3:8a:59:96:68:c0:d1:2b:17:
33:b0:a1:46:b3:37:0a:7f:58:94:52:af:5f:d2:f8:2a:e0:ee:
17:ca:fd:3f:58:5c:88:a5:7e:67:59:80:e1:11:59:13:f2:d5:
f0:66:be:4a:cd:f5:ff:70:e7:8a:22:ba:ea:77:5c:73:60:9c:
26:8f:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:57:41 2025 by rpki-client