Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: hETJXWsBLStVPfXl1ZRheD4tHFfxu54z+WGYdUdRLXY=
Subject key identifier: BD:54:8A:DE:F3:57:0B:50:A3:61:1D:AE:6F:83:01:FC:58:2D:4A:57
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 0196AC1FC396C57FD1ED405BA17D067695D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 0EC8
Signing time: Wed 07 May 2025 19:01:24 +0000
Manifest this update: Wed 07 May 2025 19:01:24 +0000
Manifest next update: Thu 08 May 2025 19:01:24 +0000
Files and hashes: 1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: +NONAT93woDM4LVnm7jBcalnxBIbeZubKoTL6cJGBRc=)
2: GcfGZsk2NpZK22JGd8D0XeNiNxw.roa (hash: xyiKkwW0L3cggM56dv+wqjei/Sm7QJIbhPrsiBjuOa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:c3:96:c5:7f:d1:ed:40:5b:a1:7d:06:76:95:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: May 7 19:01:24 2025 GMT
Not After : May 8 19:01:24 2025 GMT
Subject: CN=bd548adef3570b50a3611dae6f8301fc582d4a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a1:0a:99:53:86:75:30:5d:68:4a:6a:6c:ee:
19:c5:25:7d:eb:a1:b9:fa:75:34:97:00:93:02:86:
2e:a7:d2:2b:df:d7:41:6d:7c:a4:af:e7:84:78:84:
02:2e:f7:2f:d3:9f:20:b7:a8:aa:64:4c:9a:48:f1:
0e:b8:6f:e7:9b:9d:cc:80:7b:58:d2:de:d8:1b:4d:
b6:3f:f0:bd:b5:d0:42:99:81:66:22:22:5f:84:b8:
92:e2:4b:9a:67:08:82:08:8c:3d:12:80:a3:27:6b:
25:dc:63:4a:f2:3b:90:c7:74:9c:51:3b:e4:24:6f:
f9:ae:b4:b8:26:39:45:00:c9:75:eb:13:14:fd:a7:
fe:e8:8b:43:2c:dd:a8:74:fd:da:b1:4c:89:8a:97:
21:0c:2e:4e:32:b4:a1:ea:fe:3a:a1:5e:3e:8a:28:
37:9e:9f:33:17:d7:a4:15:b7:37:54:b6:e6:66:e6:
22:74:4e:19:5f:47:0f:1f:a3:2c:3c:e8:54:6f:75:
51:bd:c5:0c:50:6e:4a:b0:df:96:47:a1:39:c1:44:
fc:20:19:73:6e:9b:7a:4d:9b:1a:af:c4:03:f9:4c:
e7:1a:c7:57:25:f7:d1:6b:dc:27:1e:c6:46:29:7c:
e6:62:19:cf:c3:94:a2:a0:17:77:d2:e6:a1:50:27:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:54:8A:DE:F3:57:0B:50:A3:61:1D:AE:6F:83:01:FC:58:2D:4A:57
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:59:c7:7a:c2:17:85:e3:ed:2a:38:78:fe:e6:9b:01:37:14:
cd:5c:ec:1c:a8:9e:a9:e0:0d:bf:35:ef:f9:fa:bb:5d:05:01:
3e:62:96:e8:4c:84:84:7f:40:dc:d8:46:93:ef:a1:b2:77:1b:
b4:75:39:e3:b4:6d:4c:a8:f0:89:69:2f:9a:c8:55:38:93:c2:
c8:5e:13:38:a1:75:71:a7:da:63:75:58:f5:8b:b0:38:58:fe:
9e:fc:39:12:9a:ba:84:3a:eb:1c:d3:53:f1:11:f9:bf:a2:2a:
53:51:1c:48:fb:62:33:09:af:d2:36:ba:74:3a:99:15:20:0c:
13:d8:78:9d:a0:6c:e1:2c:91:69:98:13:6e:cc:f8:a2:fd:32:
c3:29:a8:8d:22:94:ac:92:a0:06:8d:0a:54:d9:18:da:0a:8d:
8e:6c:fe:77:ea:f1:f0:30:70:56:99:29:ff:95:b4:10:8e:c2:
63:62:4d:73:0a:6e:43:93:d4:6a:2c:54:60:38:19:4c:63:fb:
31:a5:40:77:cd:45:59:05:2d:1f:b1:5a:e3:8c:2b:33:e4:a9:
db:6a:02:0a:3a:2d:4f:4e:9f:cd:53:23:5e:27:09:6e:b6:2f:
bc:39:21:05:a0:c5:8b:21:d6:42:54:bc:d4:96:39:60:e2:6f:
6d:54:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:42:12 2025 by rpki-client