Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
File: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft (raw, json)
Hash identifier: kxY7bKw+JapDVZzRitDYgwJ//YZiVHHAP48E9g/4r/Y=
Subject key identifier: 10:A9:00:62:5E:00:6B:48:A9:0E:3D:DE:43:B5:48:CE:0D:15:1E:67
Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
Certificate issuer: /CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Certificate serial: 0196BAED8F5E8ADB2ECE6DE9FCFBE30EF92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
Manifest number: 07E8
Signing time: Sat 10 May 2025 16:00:52 +0000
Manifest this update: Sat 10 May 2025 16:00:52 +0000
Manifest next update: Sun 11 May 2025 16:00:52 +0000
Files and hashes: 1: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl (hash: Bb8LzKXLiANZmIcLw0O+2abH6iKI0U2JxPGswBQHmWM=)
2: i_rrSeZPVtugiJJvEliUK8J1RzA.roa (hash: 1fESgkXEQ9WR5T3026NuI2KYcBFTrF7XO7UpgxQnSpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:8f:5e:8a:db:2e:ce:6d:e9:fc:fb:e3:0e:f9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Validity
Not Before: May 10 16:00:52 2025 GMT
Not After : May 11 16:00:52 2025 GMT
Subject: CN=10a900625e006b48a90e3dde43b548ce0d151e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:a7:0e:e6:df:43:33:ab:81:e7:df:1a:6c:
25:dc:cd:cc:b7:4a:d3:dc:fe:cf:c8:9b:e4:7f:76:
84:4c:18:66:b5:1a:09:cf:f9:aa:2d:fc:fc:42:22:
aa:e0:aa:f1:32:df:0b:f1:69:fd:1e:20:25:d1:20:
2a:44:fd:61:28:8b:6e:af:d8:77:6e:e8:81:1c:12:
c3:c9:6e:f0:3a:65:66:ce:c2:e1:bf:9f:f3:a3:74:
d3:0d:e1:27:03:4e:e4:fa:28:55:a6:d5:10:08:a4:
b6:6c:71:6a:49:a8:ea:5d:ac:29:7e:90:cb:e8:0f:
e2:d7:be:1d:3e:b3:9e:71:33:08:a5:b9:43:28:68:
98:31:bc:1e:b8:fd:a4:6c:69:a0:74:e7:23:19:03:
39:9d:d1:62:df:3b:cd:73:e2:23:20:95:26:a2:94:
6c:7b:66:4f:c8:fb:fd:b3:46:f8:c3:df:71:34:f8:
b1:86:a9:00:e1:3d:fe:50:ec:9b:04:f3:c6:f4:c8:
8c:cc:af:f0:60:82:e7:2d:b1:e6:cd:a4:2c:a8:3f:
92:5e:c8:cb:c7:ab:02:99:aa:72:94:01:6b:51:a0:
e3:3b:9e:0b:a3:36:99:62:14:a6:24:91:b9:8f:41:
6b:76:2b:f6:6b:06:25:a6:b9:4f:93:3d:0e:b2:91:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A9:00:62:5E:00:6B:48:A9:0E:3D:DE:43:B5:48:CE:0D:15:1E:67
X509v3 Authority Key Identifier:
keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e6:57:06:a4:00:47:b2:8f:55:d0:a9:0a:c9:12:e5:93:fe:
d5:cc:a1:f9:bd:20:19:77:0e:34:69:62:4c:6f:0b:ea:2c:82:
3e:ee:65:92:78:a6:0c:15:b4:9f:52:df:c0:ff:79:c0:f1:6e:
91:b0:d3:98:47:99:35:36:8e:b1:f0:0a:67:bf:7d:e6:c4:b7:
c9:88:25:72:ec:3e:4d:0c:12:a6:1d:96:06:f3:25:0d:bd:e0:
ce:27:5e:a0:a3:53:91:8e:d9:e0:a1:de:18:ae:9f:d1:db:6c:
5c:86:5d:3c:cb:8b:8d:ab:a1:03:59:d0:43:22:7a:b0:c7:ee:
f0:1f:3a:41:93:2a:99:45:41:76:10:6f:4f:2f:17:2e:21:02:
bf:cf:25:49:e0:9b:8a:62:7d:c4:10:d8:97:08:8b:b1:a5:19:
ab:38:f8:1d:5a:50:03:55:c3:f8:1e:3b:bd:bb:18:34:30:bd:
6f:1b:7e:7c:66:55:78:89:31:ae:e8:24:09:9f:39:db:42:8a:
9a:20:b4:ba:8d:51:ca:5c:cf:35:e8:85:5e:3d:64:2f:02:b5:
c0:20:c7:98:c7:f8:ce:a7:08:45:c1:a2:af:ba:2d:97:91:2c:
29:e4:89:70:45:6c:6e:96:6b:d8:f4:a1:7a:ad:19:e7:58:cf:
c5:4b:12:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:49:13 2025 by rpki-client