Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier: QrbkE/IXPMf/Y7GkpO/hKuGIzhBwcjRKkX0BfUOgVFs=
Subject key identifier: D8:5E:03:76:27:67:96:CC:9C:A6:4A:2F:66:A5:27:23:85:53:72:87
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial: 019695CDEDE7EA12E1EF8D8B91695BE41861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number: 0BF6
Signing time: Sat 03 May 2025 11:00:22 +0000
Manifest this update: Sat 03 May 2025 11:00:22 +0000
Manifest next update: Sun 04 May 2025 11:00:22 +0000
Files and hashes: 1: WDPyyXGbTlVNzNvHMt_u6jFAfDs.roa (hash: Io6wRfSHyznIog5I1/syrGcc1ZOg6epQfuj3AIJAZhg=)
2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: KCVAyzOhc7bEgz2UM6MfPYe/9Di+670O27T4rHErWq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:cd:ed:e7:ea:12:e1:ef:8d:8b:91:69:5b:e4:18:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Validity
Not Before: May 3 11:00:22 2025 GMT
Not After : May 4 11:00:22 2025 GMT
Subject: CN=d85e0376276796cc9ca64a2f66a5272385537287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:14:02:5c:11:da:58:0e:bb:f7:46:b2:5a:
0d:c4:58:d6:53:51:5a:e8:68:dc:7a:60:0d:5e:55:
01:d2:4a:3d:49:63:3a:64:e3:34:0c:8f:35:ec:0c:
fb:28:81:fd:69:6f:31:10:f2:e3:8d:78:c0:5e:a6:
0b:9c:c9:da:dd:21:e6:6f:e2:f0:26:f4:9b:c0:b8:
ec:7e:eb:dd:81:d8:32:7d:26:17:e0:2b:09:0e:ef:
79:98:85:2d:d4:3e:ee:46:91:bf:a9:9a:a5:9a:bc:
9a:f8:36:39:ba:90:7c:5a:e0:7b:5b:bd:03:d5:7d:
0a:b6:33:9d:3e:3f:5f:dd:04:9b:17:8c:32:0b:0e:
49:e1:16:dd:2e:2a:63:0a:3b:08:03:c0:37:33:f9:
f0:b5:3d:92:ef:3b:c5:42:d2:af:7b:2f:e5:06:91:
07:c9:b0:d8:56:68:50:6a:f0:5a:db:12:ae:e3:a2:
2d:de:10:72:11:ac:39:b9:87:f5:71:ff:82:08:27:
1c:32:52:51:01:2f:42:3d:50:95:aa:8e:45:01:a7:
e0:52:f6:8e:e5:24:38:a7:05:58:7d:8b:1a:df:92:
20:f0:f1:2f:07:64:36:2b:1d:02:9c:8f:7b:9c:f8:
85:8c:03:0c:10:48:bc:30:5a:42:a8:1e:82:f2:ad:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5E:03:76:27:67:96:CC:9C:A6:4A:2F:66:A5:27:23:85:53:72:87
X509v3 Authority Key Identifier:
keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c7:01:75:44:a7:c0:5e:ec:e7:95:93:a0:23:dd:45:47:94:
78:36:b3:fb:9e:c9:96:67:aa:e4:6c:d5:d9:4e:73:c1:0e:f5:
1c:4a:58:61:53:2f:5e:b2:db:0f:f6:5d:b3:0b:f5:58:55:e3:
76:2a:cb:29:e6:2d:73:e8:1e:9f:45:88:27:a3:73:25:48:b5:
98:f9:ea:61:1f:ef:1a:74:d7:32:59:eb:d1:21:aa:66:cb:40:
d7:57:d5:ec:c2:dc:af:7a:51:54:c1:1d:f5:87:a1:a4:f9:c8:
ae:f3:31:96:33:44:7d:90:ea:1f:e2:8a:50:1e:16:24:c0:4f:
c0:d5:57:5f:00:a0:c5:02:a4:e2:70:db:6a:d9:39:5c:da:34:
20:4d:ed:d5:9d:24:1d:9b:0c:f0:24:6e:76:ec:71:55:79:44:
2e:2a:09:c6:2a:73:74:44:76:d6:c4:eb:98:08:bb:e1:b6:07:
e2:0a:75:19:2d:b8:91:94:49:2e:12:85:40:21:e9:7b:d4:27:
93:3f:cd:c0:d6:19:f5:a1:ca:b5:aa:2c:1d:e8:54:ea:10:15:
47:c4:14:f5:64:3d:a6:4a:b9:ad:15:25:52:7f:62:f8:6b:b5:
4a:a0:5e:52:6f:dd:ce:eb:5b:01:5f:b5:fb:9b:7c:5c:51:ed:
45:e1:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:12:17 2025 by rpki-client