Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: gVliZqQRczaQdsoPGUSohUk9WHyo8rWYxoXY/1zdh9M=
Subject key identifier: A2:A5:D8:07:0F:5B:8F:DD:1F:0B:65:EE:98:C2:BA:AD:E2:7C:97:A1
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 0196C94DB8B88D9B1ACD886187E1EDD31824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: BF
Signing time: Tue 13 May 2025 11:00:36 +0000
Manifest this update: Tue 13 May 2025 11:00:36 +0000
Manifest next update: Wed 14 May 2025 11:00:36 +0000
Files and hashes: 1: YhU5HITXmEzEZK077V2NUQi5G0E.roa (hash: hsmvHe6gnKNA2Q3OE6zeLGrGjvqCoU3tN+crhtSom4Y=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: SPg5d74RVqRZSp6Q2W/y91ay8kJ3y0dnipCma5S4gGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:b8:b8:8d:9b:1a:cd:88:61:87:e1:ed:d3:18:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: May 13 11:00:36 2025 GMT
Not After : May 14 11:00:36 2025 GMT
Subject: CN=a2a5d8070f5b8fdd1f0b65ee98c2baade27c97a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9a:87:83:c0:c2:4d:d6:ac:67:d6:2f:ba:ae:
e5:4d:0f:88:f9:94:58:7e:1f:04:d1:de:31:bd:1c:
8d:3b:f8:55:d6:13:b2:34:61:47:e6:55:81:aa:9e:
75:23:cf:84:cd:6f:f1:47:8b:21:f5:1e:dd:9f:be:
93:d7:78:dd:99:74:86:5c:58:36:f1:8c:16:bc:0a:
9b:bb:f8:f9:a9:ed:1f:62:c7:bb:f4:b6:1f:22:96:
58:3b:47:dc:7d:cd:38:5a:eb:0b:e0:37:88:f3:0d:
f2:27:db:f4:63:c7:e3:c0:2f:93:4e:d8:14:7a:71:
12:f2:72:4d:3b:21:8f:92:bd:34:94:69:c8:19:54:
c0:e5:cd:ab:cd:c4:ec:f9:6c:af:83:de:60:98:7a:
eb:76:64:ae:69:08:e6:64:0a:ed:28:63:59:56:14:
84:d2:0d:9f:2e:98:b6:26:a7:f0:99:28:23:86:12:
19:79:e6:b9:70:f3:c8:f4:3a:dc:74:16:a9:9c:71:
76:d9:32:14:4e:97:ea:ce:49:62:42:0e:0c:f0:22:
3d:8a:2a:06:10:da:d5:ad:0d:84:39:72:a3:ec:64:
30:50:b7:3b:e2:bf:06:15:63:d9:67:6a:e8:1b:49:
d2:56:6e:73:29:40:72:2d:28:08:9e:e9:15:ad:4b:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:D8:07:0F:5B:8F:DD:1F:0B:65:EE:98:C2:BA:AD:E2:7C:97:A1
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:05:46:9d:b8:a9:6c:0e:0a:83:5f:69:8e:02:6a:7d:e9:7a:
90:ab:28:39:fc:18:37:bc:75:a7:41:c8:50:74:13:17:8d:63:
a8:6a:5f:4e:2a:ed:94:1c:b5:25:15:ec:dc:eb:fb:d9:86:93:
03:5d:76:07:ba:50:e7:26:34:e2:da:00:7b:0e:6d:75:55:84:
99:23:07:e6:d3:fb:89:8e:f6:ca:23:ef:61:f9:43:be:e9:a8:
13:bc:b4:e7:d6:9e:0f:7a:d8:92:44:4a:42:dd:0b:3b:15:f6:
15:1f:59:36:8d:1c:7b:b5:c4:8f:ca:9a:29:fc:6b:60:74:8e:
b6:75:d3:40:01:b0:7c:19:31:a3:2e:07:97:af:c7:b1:24:ea:
23:fb:23:27:b5:8f:a9:bc:bb:19:8d:a2:cf:2e:63:e0:86:5c:
f9:f1:da:be:ee:9e:2b:9f:c8:9a:50:82:52:5b:dd:bf:7c:38:
b8:1a:63:c3:ac:09:7e:fa:80:68:b1:77:ec:95:d9:24:13:2a:
4f:45:b5:47:b6:78:76:b9:72:09:c0:04:f5:dd:71:bb:1a:0f:
06:b1:6a:ae:74:8f:4f:23:99:03:c0:e0:64:f9:3d:22:b7:6a:
3c:a2:cc:2c:dc:68:02:35:d8:ce:8a:5e:65:b3:29:d2:04:7b:
d0:c9:b3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:32:24 2025 by rpki-client