Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: wkk1KB8SKDgXfztoXQrv9YQ94x5HHTjWF2fkM0g12wU=
Subject key identifier: BA:86:47:2C:62:D1:CA:4E:B3:3F:C6:57:E2:18:84:DF:A6:91:BB:D6
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 0196C6F18772AD729586A870B5B9C945AF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 075E
Signing time: Tue 13 May 2025 00:00:39 +0000
Manifest this update: Tue 13 May 2025 00:00:39 +0000
Manifest next update: Wed 14 May 2025 00:00:39 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: k1atNxsRFCEqQAPD+WUtkSCUkMBMK+7Un3/N97lesME=)
2: kpL1mBA7PiBUtfdmw6AVzfdGe84.roa (hash: X1ZTIcXTz0jbHRbURZ6ZK36qgjM4K05EqBeOsJvnW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:87:72:ad:72:95:86:a8:70:b5:b9:c9:45:af:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: May 13 00:00:39 2025 GMT
Not After : May 14 00:00:39 2025 GMT
Subject: CN=ba86472c62d1ca4eb33fc657e21884dfa691bbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:5d:98:ed:33:25:5e:c8:03:58:f6:b7:db:
1c:74:e4:10:62:46:57:89:2e:5b:df:98:d8:68:d1:
f4:8e:f6:df:2f:33:99:4c:bd:70:b3:43:62:6b:3b:
de:d5:4c:f6:ad:61:07:0a:bf:a1:54:1f:f2:f9:6d:
42:82:ba:cc:7a:08:98:f0:b6:0b:fc:04:3a:3c:a0:
b2:ff:49:0e:6d:1e:1f:d6:8c:6d:8c:a8:44:bb:8d:
f7:c1:7a:d2:0c:64:86:d8:85:d1:e0:c1:8e:73:24:
53:00:34:86:2a:0b:39:8b:c6:cb:3c:67:33:ef:e8:
5e:90:a0:57:d3:d4:01:e0:38:a5:44:f5:04:4c:d7:
76:17:8d:bb:c7:2b:21:a1:d8:d1:23:33:7f:6d:84:
70:0c:04:ae:18:4c:5d:c8:80:64:bb:98:ab:9d:6a:
e6:9b:d1:71:de:4e:75:4e:0c:f3:34:7d:15:67:b5:
2a:a6:30:81:d4:dd:0d:b6:4b:c3:be:0e:d4:5f:50:
4b:6d:db:2f:63:c7:fa:a6:44:94:ac:26:93:23:ac:
79:b5:e5:ee:1b:35:ee:c1:25:3f:3a:94:03:28:c9:
19:e4:76:67:24:f9:09:89:2f:2e:9c:a4:42:c3:46:
3b:fe:8d:ac:96:ef:73:3d:7c:2a:2f:21:0f:b9:f9:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:86:47:2C:62:D1:CA:4E:B3:3F:C6:57:E2:18:84:DF:A6:91:BB:D6
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:77:0d:74:27:40:e6:89:de:bf:c1:65:04:70:0d:12:ae:e1:
e9:60:47:5b:aa:fc:72:78:a6:e8:52:c4:c7:ea:76:ef:b5:fd:
f7:a9:bb:6f:70:ac:a4:b4:c2:19:32:3e:36:7f:df:c6:e2:70:
15:88:2c:be:ad:e2:4c:49:ec:60:0b:8e:f7:ba:63:0b:e0:5e:
09:64:ab:43:cb:87:35:95:46:5a:64:06:5d:fa:74:96:5f:66:
4b:85:16:67:8b:4c:95:7d:31:f1:b7:30:87:68:51:10:12:3a:
3c:5c:cf:94:0a:0c:a8:54:2b:2f:8d:d9:ba:bd:6d:d3:11:ca:
b7:5c:f4:41:f1:62:5f:dc:e0:69:83:79:dd:2b:a7:75:9c:26:
66:26:cf:38:9d:c3:83:70:be:c8:05:ae:14:b3:65:52:92:bb:
82:ad:97:80:96:ea:5c:86:18:c4:24:2c:4f:83:55:a7:26:62:
1b:be:64:57:85:c8:da:21:ff:fc:e4:b4:50:d2:ea:60:6f:40:
26:03:1b:8d:5e:b3:d6:f4:2a:90:95:11:05:35:69:08:ea:20:
9d:86:a0:9f:ec:b2:18:79:5e:27:dc:93:ca:2e:2b:10:97:c6:
67:f2:52:e0:8b:a5:e5:06:7b:05:57:ac:c0:9b:1f:95:b8:17:
a0:d7:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:07:11 2025 by rpki-client