Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: SmJbUXpie9r2rAz8wHmac9I8pDJ4suIGNFbILSNB08I=
Subject key identifier: 36:0E:A4:C3:87:26:F6:44:FE:48:8D:22:87:4B:EE:87:B0:3F:89:3D
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 0196B82316E07EB644D919387F995E4FAD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 0E63
Signing time: Sat 10 May 2025 03:00:29 +0000
Manifest this update: Sat 10 May 2025 03:00:29 +0000
Manifest next update: Sun 11 May 2025 03:00:29 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: d1i7N8vD0yEIz1F/LdJ/1doSCydkUnMzxPgxl4Ly6lg=)
2: _9tck5mtbi0xO7Fr7Y11NL5EZIM.roa (hash: UXCxozlRWrWF5uvq8QkTh0T+21/yBrNobwddT7TkTjM=)
3: ft2dBL2dxWtdVnnU4dlHVTXL4C0.roa (hash: HQtGMREFODQOAzloACeTixd5hA5RT+3n/TffbecMmN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:16:e0:7e:b6:44:d9:19:38:7f:99:5e:4f:ad:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: May 10 03:00:29 2025 GMT
Not After : May 11 03:00:29 2025 GMT
Subject: CN=360ea4c38726f644fe488d22874bee87b03f893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:e1:95:b7:ab:7d:07:5d:bc:ff:5e:29:7c:
9b:8a:2f:d9:98:2b:40:98:f6:2b:f8:ea:07:1d:e4:
b0:48:e8:e0:ec:2c:c3:a6:25:a2:09:82:78:46:5d:
c7:ce:e6:88:f1:7c:03:9b:4c:20:9c:c7:49:0b:db:
1f:52:c3:82:07:4d:dd:e7:bb:6c:a6:73:bf:3f:9f:
54:c4:e9:38:59:b2:4e:81:88:b2:b6:af:a6:25:6f:
83:7d:39:76:9e:47:91:e1:10:41:de:b5:28:b8:88:
88:b3:7f:a9:03:67:b8:01:a3:0e:3f:35:1a:9e:11:
7b:e8:2f:fa:8c:e8:d7:af:ea:28:d0:be:94:2a:84:
d9:fa:e3:c0:82:10:a0:07:e3:a2:56:a5:68:70:3e:
9b:e4:ba:c3:10:7c:17:32:13:ac:f4:6e:f1:59:d8:
99:3b:98:7b:d0:29:2d:4f:8e:4e:e2:a8:b6:6b:64:
dd:2f:38:88:fa:46:36:b2:bb:13:5c:69:6e:3e:43:
44:d0:29:52:6c:2e:cc:ad:1f:3d:9d:3f:c4:64:e3:
0a:3e:a5:da:ff:92:27:29:81:48:f6:1d:fc:8b:c3:
8b:59:dc:9a:15:2d:8f:70:0b:52:e2:5d:4e:d5:b3:
b3:c4:3e:42:00:e8:d4:14:71:e2:a3:6e:f9:65:4e:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0E:A4:C3:87:26:F6:44:FE:48:8D:22:87:4B:EE:87:B0:3F:89:3D
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c7:ff:5d:f4:d3:18:26:92:e7:ec:5e:a8:d4:b1:5d:0d:63:
18:91:b7:a4:5d:f3:a3:91:f7:ee:07:8d:00:49:8c:54:43:04:
dc:47:45:73:d9:18:21:34:ea:09:a6:22:b4:9d:9b:ce:86:fe:
fa:c3:24:c4:e8:dc:11:db:a7:66:52:24:53:07:bf:cc:eb:d9:
4e:e2:17:0a:f5:ad:a4:b3:62:e1:0b:87:1c:7a:fa:e4:67:22:
e1:f0:0f:97:50:ba:6c:6a:05:37:7e:47:46:56:cc:91:d9:94:
13:30:f3:a7:c9:e9:d5:89:58:ae:d3:d2:e4:82:86:4a:6f:e3:
89:39:3b:91:98:74:95:c5:1d:bb:3e:d0:8d:c4:26:59:4c:c9:
79:1b:ee:82:60:9a:fc:64:4d:c0:8a:a2:28:38:f7:4d:7f:03:
9a:e5:d5:be:5a:19:e0:67:91:1b:da:62:62:d7:de:57:a6:91:
51:c6:55:3a:b8:26:b4:25:f0:79:81:3a:fb:e7:b3:ba:79:3a:
ef:64:9e:64:0c:de:dc:93:51:cf:1a:5c:9a:c0:7e:be:50:80:
e4:fb:eb:a7:25:0a:e7:c4:6b:01:f7:c4:2d:38:5b:05:69:d5:
16:8a:1a:ec:c5:e4:a4:cc:f0:b2:32:41:a3:a6:84:27:fd:8b:
b9:0f:23:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:53:45 2025 by rpki-client