Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: hofAEqZmcb6XkzPT7bdg1uDc1U+oux9y8ROfYFWNLKY=
Subject key identifier: 85:09:72:55:6F:8D:B8:A9:C1:5F:FB:9E:22:38:4D:DB:98:88:D6:8C
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 0196BB9265BB7C84A2D991A2456C3503BC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 08E7
Signing time: Sat 10 May 2025 19:00:55 +0000
Manifest this update: Sat 10 May 2025 19:00:55 +0000
Manifest next update: Sun 11 May 2025 19:00:55 +0000
Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=)
2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: lPrG/smrcdiT2vzWtyo/HMznnN8GMiY3u8hSp2SrATw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:65:bb:7c:84:a2:d9:91:a2:45:6c:35:03:bc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: May 10 19:00:55 2025 GMT
Not After : May 11 19:00:55 2025 GMT
Subject: CN=850972556f8db8a9c15ffb9e22384ddb9888d68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:6c:f7:3b:88:d2:67:5f:fd:68:c5:b8:80:
e3:17:c4:bc:c3:7b:51:17:c0:66:33:40:3c:e5:4b:
1d:bf:5f:04:68:5b:f4:fa:8e:91:33:1d:39:40:87:
2f:d1:f2:a2:da:72:9e:6b:b4:f5:d9:94:31:f1:3a:
a2:66:89:47:3a:32:77:44:6d:27:4d:9e:f8:c2:7a:
e0:9a:44:9c:90:0b:5d:1e:a3:a8:aa:ed:5d:ee:1f:
06:2a:2f:ea:10:89:8e:18:5c:0f:3f:6b:55:dd:ad:
27:9c:46:fd:0b:1f:9f:1e:76:fd:cd:af:4a:62:f1:
5c:fe:90:eb:83:87:f5:2b:20:03:37:04:20:6e:74:
82:e0:c2:c4:2d:43:45:a4:16:79:13:22:50:7e:f8:
e1:64:98:c0:18:73:4d:16:12:6e:59:d2:2d:11:df:
c5:a0:2a:c4:6d:e7:24:ed:6a:58:0f:9e:f2:78:bd:
07:be:58:0b:bf:cc:26:e9:0b:63:fc:b6:c4:63:ac:
9b:e0:2d:45:df:3a:03:55:d5:f4:33:3f:19:0a:85:
8e:ef:dc:09:47:ac:a0:ed:f4:af:81:1f:69:3b:5c:
a9:f1:20:b6:9e:6b:0f:49:3f:fc:3a:32:64:11:af:
48:a9:ba:a2:cf:eb:11:b3:20:c8:40:9a:d4:fd:69:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:09:72:55:6F:8D:B8:A9:C1:5F:FB:9E:22:38:4D:DB:98:88:D6:8C
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7f:61:aa:75:6d:6c:d3:5a:84:9d:0a:fb:34:95:0e:26:96:
a1:a3:e6:9c:c0:06:14:32:8e:66:57:4a:e1:16:b8:0a:7d:48:
76:8c:33:f2:cb:09:f4:9d:48:13:c9:1c:8c:52:c9:fd:fb:20:
84:11:1c:e1:de:7d:ed:e8:3b:81:21:05:f9:93:8d:30:d2:e2:
de:ca:b8:7f:b4:3d:3b:48:c5:ae:d1:d3:48:b2:c4:3c:e4:f0:
48:ea:3c:c4:9e:07:90:d1:c5:38:b5:e8:3f:22:fd:d2:3b:97:
f2:e3:2d:ac:a0:52:95:43:83:eb:8d:26:7c:05:db:d2:f2:c8:
eb:56:8a:83:14:d3:cc:a9:10:6b:06:e4:e2:21:91:d5:59:69:
fd:b2:47:d6:0a:51:5c:b6:e9:fa:68:c1:bc:46:cc:5f:fb:0e:
9c:bc:df:77:21:8c:3d:ec:8a:7b:4a:50:4a:f5:f5:03:ae:8f:
22:1a:40:b6:bd:0f:7d:33:8d:a3:ac:f4:0c:d2:81:ce:92:b0:
72:82:b6:1c:82:3a:64:67:e8:a4:8e:54:39:96:b1:cc:0a:43:
86:c0:ec:d2:08:b1:39:ba:92:74:ab:03:3a:f5:cc:47:dc:d8:
35:73:1c:83:1d:78:96:30:3f:c6:17:63:e7:bb:c6:eb:30:a9:
87:4f:6f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:02:56 2025 by rpki-client