Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
File: rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json)
Hash identifier: r2EPk9ETEFdsHm8vp9BCD0BdAkO2ZqHAAkobPb0D7ls=
Subject key identifier: 85:78:8D:B5:0C:97:9F:1F:AE:9C:FC:96:51:E0:1B:37:8F:35:53:1D
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial: 0196C0EF0B6C3C7F866C8C18C47F0FAC0DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 20:00:13 +0000
Manifest this update: Sun 11 May 2025 20:00:13 +0000
Manifest next update: Mon 12 May 2025 20:00:13 +0000
Files and hashes: 1: 7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa (hash: MiRDhCNZZYXqTOB7AxjOweIsafby8dLcnJ/tR0Eay+E=)
2: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: tQTUFo7tBlDpcHH4fLT6CmO+/Eq9ogEHTcO0r7+/obw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:0b:6c:3c:7f:86:6c:8c:18:c4:7f:0f:ac:0d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Validity
Not Before: May 11 20:00:13 2025 GMT
Not After : May 12 20:00:13 2025 GMT
Subject: CN=85788db50c979f1fae9cfc9651e01b378f35531d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:c5:d9:2a:8c:1b:02:1f:59:22:7c:e0:e4:
75:69:d9:fe:31:0d:90:a4:72:fd:12:21:16:54:72:
bb:a5:3e:e6:b6:5c:2d:40:0e:ff:35:3b:9e:92:99:
90:2c:bf:82:62:19:60:5e:ba:62:14:01:d0:78:c6:
31:7b:6f:33:e1:b0:8c:75:6f:b7:e9:50:35:18:08:
29:d2:d7:aa:2e:a1:8e:ad:d6:b9:3a:b4:99:cb:71:
4d:5e:de:93:b4:ee:37:f1:6f:df:27:b6:c4:cb:fb:
dd:6c:d2:15:12:37:d5:77:b0:d1:fb:2b:64:34:af:
37:eb:af:fd:88:a0:b2:fa:63:fb:e9:9f:48:1e:cc:
be:37:73:0a:a3:08:9a:b7:1f:8a:b9:bd:9b:dd:16:
85:7a:74:78:22:ec:60:97:c0:c1:81:33:85:a4:12:
42:d0:44:d5:c8:53:c2:1a:1b:b2:bd:2a:0a:3c:45:
a4:ee:f2:6e:ec:84:1b:0f:3c:6e:56:1f:e8:e3:9f:
c8:ff:f9:c1:66:fd:50:46:ae:92:46:bd:25:13:c8:
1f:2b:cb:ce:e3:df:dd:a2:49:40:79:43:fd:a5:a2:
21:3a:49:e1:4c:75:fa:39:8b:73:cf:52:e8:8d:61:
6c:e2:cd:96:a3:e5:6a:02:d9:b8:11:43:b6:a9:3f:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:78:8D:B5:0C:97:9F:1F:AE:9C:FC:96:51:E0:1B:37:8F:35:53:1D
X509v3 Authority Key Identifier:
keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:49:11:f6:48:b6:03:ba:8c:ce:41:a7:17:0e:53:7c:90:3d:
ed:7e:c1:4e:b5:61:cb:ea:6e:f3:71:bf:b8:2c:7b:9d:5e:02:
08:a1:ca:34:0e:78:ec:25:e9:93:0a:ce:6f:68:48:6f:c8:12:
d4:cb:00:82:2c:25:20:7c:bd:a8:4a:05:5b:3c:dd:e5:9a:72:
d1:c3:6b:bb:e7:2b:f3:01:44:49:8e:cd:4f:b8:f4:25:10:1c:
cd:ea:95:1c:7e:aa:d4:7d:1d:28:d4:de:d0:b6:7d:ed:61:61:
2b:69:a6:da:59:a5:ef:a4:a9:d3:3f:4e:bf:a9:2e:15:81:b2:
78:e5:be:c3:7f:d4:e1:98:25:d2:2a:d0:21:3a:30:16:5b:e7:
16:f2:6a:6e:67:26:e6:8d:0e:9c:7b:4f:b6:aa:b8:e7:33:f7:
04:58:5e:b3:d5:d9:b4:25:cb:a4:75:c1:ba:d2:d0:8a:00:49:
70:d4:d6:59:bb:1d:1f:dc:47:40:b4:ec:4f:f6:a1:df:fe:d6:
ad:a7:66:0a:3a:d4:99:33:f4:6b:c3:72:9f:5c:d8:25:24:27:
3a:f8:19:de:6d:49:2c:47:e0:5e:d5:84:b1:f6:7b:0e:69:38:
94:1d:fe:02:c5:87:c7:d5:c3:42:9f:f1:d3:80:28:72:17:08:
0a:f9:08:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:45:49 2025 by rpki-client