Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File: 82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier: Z0uYQEPyia+Y7K323IuIH4ipT91/tkm8duIYDfMOzuY=
Subject key identifier: 43:E4:25:F3:AF:C7:38:16:7B:5F:08:C6:0E:AD:A8:9B:23:A5:A8:75
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer: /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial: 0196AEE995C652906302BBFD5E43299B8AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number: 049C
Signing time: Thu 08 May 2025 08:01:05 +0000
Manifest this update: Thu 08 May 2025 08:01:05 +0000
Manifest next update: Fri 09 May 2025 08:01:05 +0000
Files and hashes: 1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: rQwoAW+O8FQpK6dhwqQzCI13r1K0OCRMImwyMMFWPI4=)
2: nPeojOrbaPs45UMM5xBsx67HUyw.roa (hash: I+r6NKoTQ/LaZOROIxMVJyc2C7XDOY211tQjVI17x0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e9:95:c6:52:90:63:02:bb:fd:5e:43:29:9b:8a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Validity
Not Before: May 8 08:01:05 2025 GMT
Not After : May 9 08:01:05 2025 GMT
Subject: CN=43e425f3afc738167b5f08c60eada89b23a5a875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:cd:36:24:e0:6c:7f:0d:16:a9:ff:3b:23:
1f:3b:72:6d:e8:3d:4a:c3:98:34:b5:d2:9b:27:26:
e5:65:a9:1a:64:62:c8:ef:a4:5a:43:2b:92:bb:88:
c9:63:fe:58:e2:22:f0:6c:93:bb:94:5d:08:c7:97:
56:2a:12:c4:14:e5:2b:5b:9c:a2:a4:41:fe:71:ed:
8e:d7:e4:d8:81:7f:59:ba:8a:3d:9a:08:f2:e6:6c:
dc:a0:ee:78:6f:86:75:de:fc:2f:49:41:6f:6d:18:
83:de:41:79:46:9b:9f:e6:81:2f:96:92:80:66:9d:
1c:c0:70:5d:d7:7d:78:54:f3:dd:03:77:55:1f:a0:
f2:32:a4:77:be:46:83:14:04:f8:75:e8:9b:36:ea:
e2:b3:4e:09:0e:e1:38:13:d5:72:77:0c:fe:a4:d5:
19:8b:a7:72:4b:77:d3:53:54:c6:54:73:ca:56:d2:
17:4c:35:be:f1:bd:fd:67:29:34:e7:c3:aa:4b:73:
3b:82:a7:69:d4:b1:b3:c0:80:6b:53:1c:db:8c:32:
32:f0:07:5a:a3:cb:d4:de:b5:17:44:49:70:8a:cb:
7c:98:6c:c3:e5:8a:cb:aa:01:47:8c:ee:4f:dd:2c:
a5:b9:4c:1c:56:a0:79:a8:6e:6b:4b:dd:71:4a:7b:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E4:25:F3:AF:C7:38:16:7B:5F:08:C6:0E:AD:A8:9B:23:A5:A8:75
X509v3 Authority Key Identifier:
keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:66:f5:4f:82:1b:e6:7f:b7:7d:7c:12:ea:37:bd:7c:d5:42:
4f:6f:41:54:ac:c8:63:a5:31:5c:d2:75:ba:84:e4:fa:33:2c:
e1:4b:52:3a:80:7a:41:38:e0:99:a8:44:9c:02:28:55:9f:d7:
fe:be:f6:a9:b4:4b:34:b4:13:95:f5:9e:11:54:d3:43:cd:43:
29:8b:29:76:ca:ca:76:14:eb:1d:8a:d7:86:23:1e:74:1d:2c:
98:e6:c7:62:6f:10:10:f8:03:c6:fc:ff:49:d9:ac:fa:2e:80:
3d:41:82:fa:64:0d:26:ac:18:2e:76:cd:1e:8f:dd:19:61:20:
92:7a:8d:2b:c6:cc:70:e8:8d:f3:05:ba:65:58:af:1d:a0:d2:
bf:0b:7f:a6:e0:49:ad:75:e9:51:61:23:b2:4c:0b:ff:f3:f5:
bd:9a:0e:9c:89:c7:34:5f:48:a1:b3:4f:e4:2e:98:c9:35:41:
99:b7:23:95:25:31:ae:da:ef:cc:73:bf:68:08:6a:3b:5f:af:
2c:9c:1c:bf:62:5c:73:e0:c7:8d:5c:09:a6:d7:49:3e:51:a5:
66:c1:b4:ee:23:29:bb:05:4c:77:bf:47:e4:bc:45:e2:1c:93:
a9:c6:67:dc:4a:22:95:12:8a:19:10:33:f3:e4:72:f6:11:1e:
df:a4:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:28:27 2025 by rpki-client