Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: g84f/JNDdqIW5qE9mA09ErIXtCLnTMmntFvTrAOLoMU=
Subject key identifier: C6:B2:AD:E0:3A:DE:D3:17:B7:8A:62:22:8D:4F:B2:5A:F5:0A:98:03
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 0196C04B3C4F3397F46D2171B2FFC7EEAAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0974
Signing time: Sun 11 May 2025 17:01:17 +0000
Manifest this update: Sun 11 May 2025 17:01:17 +0000
Manifest next update: Mon 12 May 2025 17:01:17 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: KvnaR3yTd99X9NYHxworfbcMjLCUHySet6Sw3YRheRw=)
2: ZntZKX2L_8Ma0koJ3HPW10lURHI.roa (hash: OJbq7vowsXJwKs2XlYdhIC+ZaJvxn8OPWmKWbar3xew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:3c:4f:33:97:f4:6d:21:71:b2:ff:c7:ee:aa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: May 11 17:01:17 2025 GMT
Not After : May 12 17:01:17 2025 GMT
Subject: CN=c6b2ade03aded317b78a62228d4fb25af50a9803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:ad:fc:64:e4:bf:df:3f:3d:ed:f5:84:dd:
a8:8a:a3:c4:64:38:56:69:96:66:f0:62:ca:a8:07:
f7:c8:db:b8:fb:fb:6c:a5:b6:e1:d4:6d:74:65:27:
b8:30:6e:e3:1b:08:4d:83:40:5c:36:32:bb:9e:83:
e7:ff:93:1f:69:13:97:76:3e:72:24:56:d6:5e:0f:
45:bb:82:60:00:74:5a:41:1e:ce:21:ad:54:02:aa:
73:28:68:66:27:3c:20:1b:72:1a:bc:47:2e:33:db:
b7:30:74:e4:b1:15:bd:7d:f3:8c:5f:59:3b:9d:26:
56:bc:be:73:1a:5a:30:84:41:1c:6a:5d:33:a9:99:
8a:80:ca:da:70:c4:b6:1a:07:45:3d:7a:2e:73:fe:
f0:9b:55:34:1f:11:7d:17:8d:a6:81:58:93:71:39:
42:3a:3a:e7:22:4b:34:05:4b:fd:94:03:a4:6b:1c:
53:a1:3a:ea:3f:d7:84:8b:7d:93:a2:44:59:5b:11:
fe:d4:21:e6:a5:cf:33:40:0b:35:45:38:94:bc:d8:
46:07:c1:c3:8b:d1:f7:5d:24:fe:ed:67:25:11:9b:
8d:54:28:57:78:d8:e3:1b:cb:5c:f5:2d:b5:8b:c8:
d7:34:eb:97:0f:8d:29:92:68:70:f2:b1:17:73:2d:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B2:AD:E0:3A:DE:D3:17:B7:8A:62:22:8D:4F:B2:5A:F5:0A:98:03
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d5:f3:83:a0:bf:df:ec:6c:19:19:83:fe:5b:db:e4:e0:b5:
04:12:c9:57:42:46:87:0e:ac:01:ab:04:74:96:57:8c:08:29:
fd:10:67:0c:b5:9f:da:e6:2f:94:c5:9e:36:4e:1c:e0:5f:60:
d7:da:a4:f3:99:ec:c2:e2:41:95:12:96:3d:bd:04:f7:03:86:
5b:f4:a6:e6:3e:9c:fd:4b:b9:43:13:1a:3b:f2:7d:df:32:39:
90:2f:a0:39:ff:51:2c:e9:c4:d2:e8:00:a6:33:dd:b6:84:28:
6e:4b:ce:cc:c1:14:61:bf:97:65:98:8c:79:13:c2:68:d4:4d:
b7:ce:1b:f3:a9:14:50:4d:01:b6:2f:15:56:78:df:49:87:9d:
af:c3:f4:3a:da:72:60:2a:c7:49:19:84:2e:7b:83:6b:c8:99:
04:7e:cc:03:a0:41:15:bf:86:84:9d:90:e9:e1:26:93:a5:2e:
92:8b:7c:a1:fe:75:4b:41:f2:be:14:d1:f0:0e:44:f8:ee:0f:
51:42:8b:97:b4:43:98:16:ef:d6:73:9d:0e:7d:bc:70:d1:60:
df:3d:64:ee:5d:e5:af:e8:10:f7:73:31:f8:25:c7:2e:01:a6:
b1:21:cc:ac:ed:cd:6f:b0:53:0b:ff:31:db:38:f9:50:2d:61:
25:c9:b9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:48:12 2025 by rpki-client