Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: IWOY5UReT8/iiAC2TEK5F1Teuy1BoocPMbQcUVR/RK4=
Subject key identifier: EC:12:53:C1:36:7B:0A:F0:6F:8A:59:EA:A5:88:B2:42:E9:C8:09:5C
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 0196B3A1B514CABAA45448232D68486D92E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 14C0
Signing time: Fri 09 May 2025 06:00:41 +0000
Manifest this update: Fri 09 May 2025 06:00:41 +0000
Manifest next update: Sat 10 May 2025 06:00:41 +0000
Files and hashes: 1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: Rurme2eGVDdYN4Eg9C2kxsikXUYDEIUHJISLi4PjYC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:b5:14:ca:ba:a4:54:48:23:2d:68:48:6d:92:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: May 9 06:00:41 2025 GMT
Not After : May 10 06:00:41 2025 GMT
Subject: CN=ec1253c1367b0af06f8a59eaa588b242e9c8095c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:07:55:98:eb:df:8e:39:2f:26:b1:40:72:
70:84:3b:1c:89:73:d6:58:64:45:bb:27:9e:31:a6:
73:0e:91:2b:72:92:1a:58:b7:67:b1:9e:81:c3:6b:
2d:20:43:bf:74:68:46:de:7f:a9:92:7d:c5:25:a1:
75:50:cf:e0:0a:b3:b5:64:55:47:81:ca:8e:92:13:
0f:53:f4:ae:71:a8:2d:2b:71:c6:b4:53:10:83:39:
fc:a1:d8:c8:d4:20:8f:71:8a:c0:73:da:b7:07:21:
0f:b6:e5:da:f2:aa:0b:5a:84:c0:5e:bb:d9:56:d6:
02:2e:25:63:b2:d8:c0:81:db:7e:27:2f:cb:6e:a3:
62:2c:0e:ac:ab:c5:e2:17:c2:b5:3b:81:3b:4e:38:
86:bd:19:bc:ec:d1:fd:1f:78:df:84:ad:3a:02:9d:
c9:41:3d:b5:9f:0b:fe:e3:d8:32:34:85:d2:db:e2:
8a:6f:89:e6:d2:48:47:c2:ad:e9:1b:f1:36:de:b2:
fc:d8:62:07:62:c6:14:50:14:98:c3:9f:6e:40:11:
a5:42:25:d7:5f:3b:41:ed:19:d7:28:53:39:58:6c:
da:b7:07:fb:e7:07:32:0e:92:23:55:af:84:84:18:
bd:0f:da:1b:4d:7e:f0:8d:db:3c:f9:91:a8:7b:0f:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:12:53:C1:36:7B:0A:F0:6F:8A:59:EA:A5:88:B2:42:E9:C8:09:5C
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:05:92:e2:6a:ef:24:b4:54:5d:ee:58:fa:4c:4d:fb:53:49:
e0:d4:61:7b:30:af:c9:15:fd:34:ea:54:1f:e4:01:70:5d:33:
30:a3:a9:16:2a:07:72:5e:58:a0:b0:2e:f8:bd:5b:28:71:2c:
1d:18:63:6f:94:94:63:f3:ee:08:2d:c2:b0:f7:39:21:cd:76:
2f:a2:36:93:96:71:10:bf:f7:8a:9f:8e:66:5f:af:8e:d7:ba:
03:88:a0:c5:7b:80:0a:6c:37:2a:38:02:14:6d:32:47:4e:ba:
25:ca:ef:7f:08:2e:07:50:67:06:0b:1e:51:2f:be:4d:d9:07:
88:60:f6:73:72:ad:aa:02:90:4f:b2:55:36:3e:f5:6e:12:8c:
e4:de:be:c1:ba:26:86:68:61:54:23:92:6e:5e:dd:04:28:03:
f9:e5:ca:b7:1a:13:89:ce:78:3f:22:d6:c3:d7:99:79:9b:9d:
ce:e3:43:31:12:b7:1f:c8:dd:b0:1c:f1:13:bf:cd:f8:1f:37:
72:4b:8f:af:cc:42:5d:a1:5a:7b:97:e7:73:14:27:f4:82:0a:
b2:c0:41:bd:91:b1:e3:95:f3:fb:5f:6a:44:08:d7:84:d0:73:
e5:b7:0f:93:23:39:d1:2f:7c:15:a5:9d:e9:10:fa:15:31:9f:
92:77:c4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:04:10 2025 by rpki-client