Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File: 7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier: iJaIVAeji74ZVh9xURPGFbTlKa5PR+5h7io1cKgbwsw=
Subject key identifier: F7:3B:0E:C6:36:53:F5:E0:40:BE:5E:DA:D5:91:F7:7E:1A:0E:2A:05
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer: /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial: 0196BA7F75035D5AFF9805813D920E36FFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number: 14C4
Signing time: Sat 10 May 2025 14:00:37 +0000
Manifest this update: Sat 10 May 2025 14:00:37 +0000
Manifest next update: Sun 11 May 2025 14:00:37 +0000
Files and hashes: 1: 15o9XcK98PCQe9Aw651YSY6KZxs.roa (hash: pNZyoE96eglB8CATVtXzqRTGbuEChhNcvG9WnCasQiY=)
2: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: /ZCXdUtMj+hww6gkzIZC7gc6kn/aGzieKxHQjx5CG1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:75:03:5d:5a:ff:98:05:81:3d:92:0e:36:ff:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Validity
Not Before: May 10 14:00:37 2025 GMT
Not After : May 11 14:00:37 2025 GMT
Subject: CN=f73b0ec63653f5e040be5edad591f77e1a0e2a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:48:aa:81:a6:df:89:33:48:29:59:9c:18:
3e:a9:14:a1:d0:69:50:3b:8f:1d:4d:87:f6:61:87:
8c:58:8b:9b:89:bf:df:61:36:0e:1a:fe:0c:78:00:
67:28:7f:1b:a5:f3:a9:b6:66:22:c0:b9:38:74:75:
04:eb:b8:97:5a:e8:a5:43:cf:14:14:8b:b3:f4:7f:
89:28:a8:cf:ee:ae:8f:50:c7:31:af:1a:41:75:9f:
d7:d3:a3:d5:f9:c2:6f:87:ff:f6:73:2b:e8:61:c3:
61:b4:98:41:19:18:ad:29:ab:2e:c1:c3:ba:d2:f7:
fe:ea:81:65:e9:df:d1:a8:d8:4a:d1:f1:69:83:57:
70:11:ee:69:ae:c4:55:e5:d9:37:dd:c6:2f:9b:ef:
da:d8:67:a5:e1:b9:95:2a:e0:74:75:64:f3:71:c2:
be:d8:ee:7c:a5:71:d7:71:55:9a:5d:15:bd:d4:c9:
57:94:f5:54:ed:b2:15:dc:1f:fe:50:f2:50:b3:15:
46:e4:da:17:b3:07:51:bc:08:40:d5:63:b9:f2:8e:
d4:0f:7d:3c:44:e8:a1:ba:a1:db:ee:48:09:24:c1:
90:f8:9b:0e:8e:cb:0d:d2:9f:22:b6:f2:55:4b:1d:
9f:ef:f6:92:22:3e:e6:c1:49:73:7d:fa:26:28:72:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3B:0E:C6:36:53:F5:E0:40:BE:5E:DA:D5:91:F7:7E:1A:0E:2A:05
X509v3 Authority Key Identifier:
keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3e:55:8e:34:86:2e:85:b8:a2:47:8b:94:a8:a8:eb:18:2f:
80:3e:a6:30:67:6c:2d:3f:a9:7c:99:31:9d:3b:ea:8f:c0:2c:
05:07:fb:39:79:f1:2f:84:68:d5:39:bc:07:37:f9:aa:22:62:
a4:6d:2c:69:c5:ac:a3:b5:ad:b9:05:5d:53:7e:43:f9:99:bd:
ad:f1:d1:4e:73:9b:3c:6d:4c:f8:18:43:53:1a:9d:c5:a5:1d:
f0:2a:ed:4a:42:c7:61:32:f4:24:00:cc:89:24:57:38:65:d5:
6c:2b:6d:ea:7a:38:d5:cc:dd:4e:98:71:3f:24:34:ec:a5:d0:
80:2b:2d:c1:a5:1f:e0:22:70:99:81:98:aa:5a:99:4e:f7:ce:
06:ab:36:ba:ed:e5:f3:07:4b:b2:a5:6b:4c:04:34:7e:fd:53:
b0:dd:16:97:fa:1a:4b:cb:cd:58:e6:bc:ad:3b:3d:64:ee:83:
a6:cf:96:24:3f:1a:73:47:0f:9a:2e:87:d4:50:0c:d0:61:d7:
19:22:d7:dc:f4:02:b4:83:9e:e7:92:05:88:1f:59:3e:95:19:
5f:07:f9:91:6e:81:18:23:80:c5:cc:b5:72:cf:e9:75:78:c9:
dd:5a:79:9b:61:bd:99:5c:66:9c:11:57:5f:55:09:9e:65:a6:
b7:43:a0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:04:20 2025 by rpki-client