Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: CFT4/P6p13CxmNg8dG5GqwA8uqIuO+6GPPL6MXrUlIE=
Subject key identifier: 86:34:1A:9E:37:A7:20:44:D2:00:6C:23:86:E1:F0:E0:5E:60:16:96
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 0196C0B857CBF35FD65C4AC54B220F2044C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 12E9
Signing time: Sun 11 May 2025 19:00:28 +0000
Manifest this update: Sun 11 May 2025 19:00:28 +0000
Manifest next update: Mon 12 May 2025 19:00:28 +0000
Files and hashes: 1: 1coqSPvIzRCZ1S6Z5EWORCEy_NY.roa (hash: HDpNqOrJZAq1XJhPSThcDVAo56N193hVEjKsFT9RCtc=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: PSq5cpFDySyGGZb0h9P+2A6HlOulZdNVo5drpRrdC1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:57:cb:f3:5f:d6:5c:4a:c5:4b:22:0f:20:44:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: May 11 19:00:28 2025 GMT
Not After : May 12 19:00:28 2025 GMT
Subject: CN=86341a9e37a72044d2006c2386e1f0e05e601696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:e1:b5:13:f4:f3:45:02:e6:3d:aa:e9:c3:
64:ea:c7:ce:4d:a9:e1:8f:aa:9a:56:02:a6:e7:de:
d4:b5:93:f9:65:1d:72:25:f4:0a:da:4d:8e:19:f5:
45:21:5b:2b:76:dc:09:01:a6:99:4f:39:17:f2:49:
54:01:b4:42:24:0b:33:ee:2b:c3:63:d5:b0:65:f8:
53:8f:50:6d:36:eb:93:74:fd:3e:18:0a:b9:24:a2:
66:d6:67:5b:0f:e8:49:34:27:48:d4:ef:b8:61:8d:
e0:5a:d5:dc:5d:96:52:0f:7f:03:b8:48:9e:82:eb:
ae:e0:25:14:ee:05:31:9c:5e:b0:91:fc:66:1b:e3:
29:e2:72:52:ec:62:c7:9e:94:9b:fa:1a:a9:e9:0d:
f5:f1:16:3c:3a:23:4e:ec:dc:70:1c:d6:48:3f:b7:
51:11:12:82:fc:49:76:23:fc:f2:c6:2e:1d:a8:72:
fc:78:5a:a2:3e:ed:69:3f:84:94:b0:67:6b:db:d1:
ad:05:d6:84:52:b9:94:1a:28:10:c3:31:16:35:e0:
c2:0d:1a:1d:62:43:69:c8:9e:19:ee:fb:85:ab:82:
d4:6e:6e:62:ad:23:31:23:13:6b:e2:c2:35:14:56:
75:c5:5d:89:d9:24:c1:f2:18:78:17:69:cb:24:27:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:34:1A:9E:37:A7:20:44:D2:00:6C:23:86:E1:F0:E0:5E:60:16:96
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5a:4f:3d:d3:e9:17:51:84:eb:2e:44:1d:b7:3a:ac:b8:15:
2c:4a:46:7f:22:db:fe:be:c5:48:76:41:54:8f:79:e6:be:0d:
bd:ea:b5:58:33:db:49:b5:d5:e2:de:57:d6:b7:22:19:7f:1f:
33:17:fe:13:3d:15:40:41:e6:5f:33:19:3c:66:fb:bc:dc:bc:
85:ab:d3:98:87:41:ce:08:bc:7c:2f:c0:1c:07:d8:99:b3:51:
42:42:ac:a2:de:b1:37:18:83:5b:75:10:c5:b4:15:39:b3:46:
57:d5:73:71:4f:af:e4:41:16:7b:8e:53:fc:c7:e6:76:8f:bd:
a6:dd:dc:5f:37:e0:c7:61:a1:0d:8f:f4:49:a3:cf:c0:a0:ca:
dc:44:e9:73:57:be:b9:46:55:ba:d5:db:1d:78:69:cf:84:2b:
35:53:ec:d5:f9:9a:d2:1a:f9:6a:36:cb:e3:12:63:36:22:4c:
a6:1e:c2:6e:8b:42:87:7d:ac:69:2c:bf:5f:58:62:18:a7:cd:
61:af:e8:66:2a:4d:a3:d0:7a:2f:bf:0d:47:51:33:e2:35:16:
77:f4:b4:03:54:54:2a:f4:69:6b:59:86:c1:99:04:b0:f7:19:
ad:3a:22:ed:e6:7a:7a:91:a9:af:e5:ca:a3:a6:3c:43:23:ff:
bd:e4:0f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:32:05 2025 by rpki-client