Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: onifvjlx87MxojDWzrLmRk60UvoJwpdfF9o1YjTIszY=
Subject key identifier: B2:B4:12:8A:E3:83:23:21:65:9D:B4:F9:F0:0E:F2:CE:CE:41:4F:6A
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 0196A089224C2A80F8BEC329251A38706C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 08DB
Signing time: Mon 05 May 2025 13:01:03 +0000
Manifest this update: Mon 05 May 2025 13:01:03 +0000
Manifest next update: Tue 06 May 2025 13:01:03 +0000
Files and hashes: 1: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: f6QwxnXIcACyLlOIYm5/fb34dkwqXx16CbTVdpbiGeU=)
2: vtzVAFS2sSXFMY4pT9LQwpwKXN8.roa (hash: IK29JkUi3ofZEZGY2PidWdMxcE655gfnkWlaKv3tisg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:22:4c:2a:80:f8:be:c3:29:25:1a:38:70:6c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: May 5 13:01:03 2025 GMT
Not After : May 6 13:01:03 2025 GMT
Subject: CN=b2b4128ae3832321659db4f9f00ef2cece414f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:5a:6a:56:22:a0:e3:23:09:2a:16:ad:30:
19:55:a0:8d:2e:91:9a:89:c9:7f:7b:e2:cb:8b:42:
ab:62:93:cc:d1:8b:00:97:9b:1d:98:6e:a0:2a:ca:
f4:06:60:16:a0:c0:ad:6b:4f:d2:e0:6a:d4:92:38:
6f:6d:65:3f:15:d2:1b:81:01:26:85:12:47:08:f0:
cc:79:af:3c:09:c7:60:ad:61:cc:87:c7:19:64:d4:
ef:09:9c:49:a4:69:6d:40:71:32:a7:4e:ff:76:c6:
34:b3:77:31:43:e0:50:89:8e:55:81:87:ab:9b:19:
01:bc:a9:38:cd:a5:3a:5f:41:dc:4e:af:f6:0f:9b:
76:04:4d:4c:13:1e:17:f0:68:5a:55:56:c8:a4:73:
d2:e8:d1:28:c3:6c:76:3d:b0:99:ca:61:c6:f3:fb:
75:79:7b:a2:27:d0:f9:25:dd:40:a3:b3:c2:4a:b1:
09:32:25:46:5a:f7:76:33:28:1a:4a:28:20:f7:86:
68:d4:d8:28:4d:74:42:da:73:99:f6:24:40:c0:4f:
c6:08:20:77:36:bf:20:2b:8f:81:d7:cd:56:64:71:
dc:b5:d5:3c:c9:cd:4b:d7:db:15:4b:33:5e:5a:43:
c5:40:38:f2:b4:ce:52:33:1c:2a:2e:a5:f6:e8:8d:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:12:8A:E3:83:23:21:65:9D:B4:F9:F0:0E:F2:CE:CE:41:4F:6A
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f6:38:58:04:3d:2e:a6:8c:7c:75:dd:72:c7:12:4a:fb:21:
a4:6d:53:f7:a0:cc:41:53:91:df:44:32:64:d8:b1:0f:b0:81:
b4:d2:d4:51:95:8b:f4:9f:54:c3:35:59:dc:be:85:49:42:d3:
31:c4:81:c9:fc:bb:db:2b:c7:e0:ab:6d:d6:67:4c:27:20:ac:
81:a4:d2:84:4e:26:40:51:bd:f5:d2:8f:df:4b:bd:2a:f3:7d:
40:d9:e6:70:3b:92:a7:93:84:71:46:bb:c9:84:d2:06:2a:e8:
1e:29:55:69:da:71:8e:67:9e:9e:00:b9:60:df:b5:83:24:1b:
af:ea:46:36:fd:0b:bb:8b:ff:2f:98:00:18:25:73:78:f5:97:
09:1b:88:dd:70:12:62:13:96:d2:ea:49:42:a3:dc:77:d5:a3:
64:35:da:bf:9d:8b:79:91:f6:40:4e:ce:02:14:b8:bc:b1:f0:
59:61:ae:0c:3c:f1:cf:1f:8d:bf:43:a3:69:8a:4a:23:99:21:
67:91:22:2a:5f:f0:6e:d1:29:1b:c4:0d:f0:62:02:4c:fe:4b:
1a:1c:38:95:cf:e5:43:aa:c4:4a:75:76:ee:8c:1e:35:c9:5d:
6f:e5:85:f8:5c:6c:67:e1:1a:43:88:3b:12:b4:db:14:f1:32:
73:f3:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:13:18 2025 by rpki-client