Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: OnFrRg4y7IMTEnYa25MnbFN3jiMRH0AdZ47t0vexEJs=
Subject key identifier: 52:C1:55:79:9E:CE:EF:21:45:36:BD:88:EE:91:97:94:40:31:8F:B6
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 0196AA9F004D93BBC6B8FFE99EF6B99D4D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 1216
Signing time: Wed 07 May 2025 12:01:09 +0000
Manifest this update: Wed 07 May 2025 12:01:09 +0000
Manifest next update: Thu 08 May 2025 12:01:09 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: ADdhOlTOYDzOgiEa6gatjDcPIKerBdtNVqogVicTiKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9f:00:4d:93:bb:c6:b8:ff:e9:9e:f6:b9:9d:4d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: May 7 12:01:09 2025 GMT
Not After : May 8 12:01:09 2025 GMT
Subject: CN=52c155799eceef214536bd88ee91979440318fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:be:92:ab:00:5b:ae:61:94:ef:24:26:c6:
db:48:94:cd:5f:ca:4f:15:8f:39:02:d7:3b:0f:90:
82:d1:dd:ba:a9:a9:07:a8:2c:4f:80:34:af:1f:b1:
c2:53:c9:9e:c5:8c:de:98:2d:a9:18:51:c7:dd:f9:
fb:04:8f:a5:8e:d0:d6:eb:ff:34:25:03:43:e6:14:
54:db:66:00:e1:47:e7:91:13:5a:25:20:89:53:86:
61:b8:dd:00:3c:f9:a0:ab:5e:cc:3d:33:92:e5:8d:
4a:28:8b:ca:f7:09:c6:26:99:48:e5:28:7b:99:87:
9a:a6:01:a0:03:3e:d5:c3:68:30:3c:c3:fb:f3:09:
77:8b:72:a2:60:72:0e:dc:04:28:97:1d:52:52:d6:
a1:3e:b8:23:6a:19:3f:79:b1:75:4a:88:3b:d3:00:
fc:9b:53:8d:90:3a:98:78:47:0b:df:d7:05:f2:b2:
10:c6:66:8b:d9:27:c3:ad:e6:31:dc:e8:26:35:15:
ef:4c:e8:3e:b2:39:b4:f8:09:42:54:69:bd:9e:d6:
47:95:7f:5e:93:f8:e0:6e:4c:59:dd:2e:b4:04:c9:
9f:16:ef:b3:91:ca:bc:40:3e:ee:5f:24:a2:61:77:
3d:fb:7d:e7:05:b3:00:6b:33:fc:fa:a9:61:a8:62:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C1:55:79:9E:CE:EF:21:45:36:BD:88:EE:91:97:94:40:31:8F:B6
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9e:94:7e:c7:26:ca:c6:2e:77:be:09:d4:a6:83:b3:74:49:
99:77:91:16:8f:1d:88:88:82:71:39:3a:d0:5c:b8:2a:ef:aa:
8e:dd:f2:fe:27:0a:46:af:ea:4b:f6:84:3b:99:b5:4b:e6:e8:
61:9a:e8:24:d9:1c:bc:ab:97:59:9e:0f:fe:3f:10:3f:91:01:
cb:80:0d:2d:d6:2f:38:28:17:3d:93:ad:f7:d2:8e:e7:52:6c:
7a:df:50:2f:f4:4e:71:e6:e9:2d:f9:51:e9:ff:2f:6d:58:5d:
bd:c9:64:4d:11:18:32:55:7e:40:4a:1b:dc:23:26:d4:0c:71:
bd:af:31:1f:65:ab:db:ab:ef:11:50:8f:c4:e5:52:07:42:e8:
f4:36:5b:28:86:b5:15:73:0d:1b:18:09:20:e6:22:9d:11:df:
9c:4e:26:7c:5a:d2:c8:a7:f3:0f:35:2a:2a:8a:b0:b7:7e:c2:
11:d2:be:46:85:94:a5:6a:7e:a3:9a:05:35:59:db:91:e2:39:
0a:af:5d:b9:43:17:48:80:98:f1:85:69:f0:79:10:59:a9:86:
7c:04:7a:e2:14:c0:c3:e9:2b:93:da:7c:ae:af:5a:a1:8e:d6:
87:77:91:5c:c0:8f:2e:dc:c5:c6:98:69:26:b7:5e:31:f9:07:
8e:ba:a8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:47:23 2025 by rpki-client