Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: F8FQN7gB8rTjqGxq9lSYbDqVvEfcCwhr0GOWtjF4dFI=
Subject key identifier: 5F:8A:1C:4E:34:B3:85:88:20:59:92:40:CF:01:15:64:0B:23:D6:60
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 019673E6A57EEF4EA9944B1846316E7A545F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 149F
Signing time: Sat 26 Apr 2025 21:00:17 +0000
Manifest this update: Sat 26 Apr 2025 21:00:17 +0000
Manifest next update: Sun 27 Apr 2025 21:00:17 +0000
Files and hashes: 1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: 0DYWddRoVTvdciLgO9EF0hKqX2y+AZlWlY9b4AkNSKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:a5:7e:ef:4e:a9:94:4b:18:46:31:6e:7a:54:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Apr 26 21:00:17 2025 GMT
Not After : Apr 27 21:00:17 2025 GMT
Subject: CN=5f8a1c4e34b3858820599240cf0115640b23d660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:01:55:6d:92:4a:ce:5e:79:60:13:33:38:c5:
d7:80:e4:90:1d:cd:86:7b:ff:10:5b:0b:e5:63:60:
5f:e1:b8:6d:b4:55:c4:49:fc:3a:ce:03:34:60:6b:
2c:a5:0b:b3:fb:f9:e9:3a:00:b6:82:d6:34:81:5c:
51:7d:4a:00:cc:e0:d4:e4:9e:b0:d8:d4:37:e4:60:
e1:31:00:78:21:cf:dc:09:e5:eb:28:6f:de:d6:d4:
f9:14:cf:27:5c:8f:18:bc:70:95:ab:6a:3c:50:90:
e0:95:94:23:e1:ba:ef:8b:27:80:70:be:ba:d7:fb:
35:08:47:1b:59:b0:60:8b:84:3b:2c:1f:1a:8e:62:
52:b2:3d:89:00:64:af:08:85:f1:f5:35:3f:44:06:
93:4c:21:0d:8e:30:3e:d4:ab:f7:d4:12:26:10:a8:
37:4c:b4:c0:89:19:b5:ef:38:48:f9:07:ff:23:c2:
34:f8:b0:46:5b:1a:d2:24:b7:28:07:3b:d5:00:7e:
d5:c6:8b:88:8d:5c:62:3b:1f:f9:cb:cf:bd:00:19:
7f:8d:39:34:52:ef:fd:56:b5:1b:29:c2:cf:a5:fa:
cc:02:c3:48:41:c2:63:8c:38:f0:79:6b:75:1b:db:
87:07:df:b5:18:20:2d:83:1f:9f:c1:09:af:84:3f:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8A:1C:4E:34:B3:85:88:20:59:92:40:CF:01:15:64:0B:23:D6:60
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e9:9b:79:ba:75:10:5f:d8:e2:b9:f4:99:37:26:35:1d:eb:
24:86:50:e3:f6:0c:4d:ca:ee:c3:5f:70:26:b3:be:21:a2:fc:
b6:e8:1a:c8:f2:61:dc:4e:2a:86:9b:88:71:85:07:00:cf:bb:
41:89:41:75:b3:68:c2:d4:23:8c:ce:bc:35:d8:45:0a:56:9d:
fd:9f:04:da:ed:1f:d0:24:8c:f5:58:27:62:2c:e4:ab:6b:be:
9c:a8:13:c1:ff:e6:3d:b2:f2:3d:5d:e2:15:c1:11:20:05:e1:
f3:26:72:14:0b:38:24:d1:69:ad:34:58:92:5f:5d:54:29:bc:
75:db:17:41:99:59:a7:fd:c2:2f:b4:22:7e:be:0d:65:1d:70:
99:8c:8c:35:03:39:e3:d7:10:4c:03:21:8b:2d:e1:37:4b:9f:
4a:da:00:3a:9a:26:68:90:b8:cf:ce:ce:77:36:a4:44:ec:83:
03:08:cc:25:c6:32:08:1e:2d:b0:77:d5:3b:89:a8:f1:8e:6e:
40:48:8d:71:1c:fa:74:99:9e:5f:d7:70:64:cc:43:fc:02:73:
ce:8a:58:f6:fd:3d:ff:64:e1:8a:cc:8f:fb:54:77:e6:7d:45:
f1:9b:69:b6:c3:9d:2d:89:51:d8:0d:d9:6f:1c:d9:84:09:9b:
f9:fc:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:46 2025 by rpki-client