Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
File: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft (raw, json)
Hash identifier: 7S0/pKuAyiFkK31DOUztCZeqdBbm2e5ilvJSGEWz3Ts=
Subject key identifier: 88:B7:24:19:2C:0C:8C:C7:D2:09:FA:C3:B3:45:B5:3B:3E:C9:3A:94
Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
Certificate issuer: /CN=acd6be97bcfe12becbe82b7841047f57972a935a
Certificate serial: 01967FB4BE01C5C6104C6B4663EB2E9333C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
Manifest number: 04E8
Signing time: Tue 29 Apr 2025 04:01:13 +0000
Manifest this update: Tue 29 Apr 2025 04:01:13 +0000
Manifest next update: Wed 30 Apr 2025 04:01:13 +0000
Files and hashes: 1: 6wOJsAVY-euwnRWmrQyAWiR15SI.roa (hash: is8qHNDUGOGtnmeZTaDPuu15VlXH7W1zJ6ndggR7ME0=)
2: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl (hash: 3ydrBr/jTRRalMfirATNz3t9/FJDq2BtmDLVuLWSIIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:be:01:c5:c6:10:4c:6b:46:63:eb:2e:93:33:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a
Validity
Not Before: Apr 29 04:01:13 2025 GMT
Not After : Apr 30 04:01:13 2025 GMT
Subject: CN=88b724192c0c8cc7d209fac3b345b53b3ec93a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:cd:f7:9d:b6:d6:13:64:57:34:54:88:f9:
98:23:b6:99:be:0a:ec:00:99:e0:73:96:9a:13:a7:
4e:27:b0:d0:2b:a3:7c:96:6d:c2:01:88:3f:fa:4f:
80:f1:e1:0f:ba:6c:81:a5:58:41:fa:14:ae:bb:89:
f6:f6:65:65:12:b7:70:28:f2:e0:58:cc:9a:2a:c5:
01:06:db:3b:fa:a5:c0:76:ab:3b:9d:59:d7:eb:89:
df:c3:4a:56:94:ab:a7:e1:0e:ef:d2:fa:68:eb:53:
d4:cb:d2:b6:02:14:af:db:b5:7b:f2:e4:6b:af:0a:
1a:ac:20:93:39:49:6c:1f:1d:fe:c0:f3:e4:2f:e1:
4b:bc:b6:3f:e7:19:3a:b9:11:fc:c3:37:22:6e:23:
72:ba:53:20:81:55:76:ae:2a:ae:92:55:1d:15:1e:
db:1b:10:ad:51:31:5a:07:5f:2d:7e:7d:b1:0c:87:
76:87:6d:3f:2f:96:50:99:02:ef:a0:ee:fd:d1:7a:
cc:db:23:69:52:ff:51:bd:53:e9:19:b6:dc:69:12:
15:43:06:60:94:37:25:44:93:39:91:88:3f:e7:a5:
fc:96:cc:b4:fe:47:63:a8:cb:a5:99:09:d1:97:de:
1a:da:28:80:47:0c:41:d3:d5:97:88:c2:01:cf:ed:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B7:24:19:2C:0C:8C:C7:D2:09:FA:C3:B3:45:B5:3B:3E:C9:3A:94
X509v3 Authority Key Identifier:
keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:15:65:1f:7f:d2:91:be:15:e1:7c:ee:1a:9c:31:4d:38:79:
0b:02:0e:38:90:8c:62:12:47:a3:5f:c9:6b:6a:61:58:fe:cb:
59:bd:73:93:1c:04:35:82:98:12:5a:06:a9:08:9c:19:15:39:
db:9c:0b:26:65:5b:8d:6f:bc:b2:ba:05:73:13:00:f1:f7:bc:
15:b7:0c:15:15:40:13:6a:56:46:a8:28:ff:c4:06:6c:29:06:
0d:f5:33:dc:b1:00:38:9b:b8:ba:b1:b3:b3:b1:cb:c0:cc:bf:
64:2c:37:a2:f0:b8:39:cd:55:62:0e:bb:d9:0b:64:71:43:c0:
4f:b2:ae:ec:b0:d2:de:82:09:38:9e:24:c8:f0:73:13:9b:a3:
98:45:22:c2:2a:18:73:77:0e:ae:df:b4:ba:11:70:ef:e7:8d:
87:e1:11:ea:52:13:2e:0a:b6:64:35:73:d5:e1:35:54:16:b2:
a5:cb:76:ef:4d:cf:d2:d8:23:a9:8c:71:3e:95:c4:57:83:ea:
af:6d:3d:3f:37:5a:5c:a6:ce:41:ed:38:3b:59:23:58:1e:ca:
7f:1a:58:a8:3e:8d:ac:d5:c4:6e:14:43:9d:40:b3:91:08:12:
44:49:88:76:7f:63:20:5d:fb:4f:47:84:c7:43:5b:8f:13:27:
19:a3:da:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:50 2025 by rpki-client