Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
File: eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft (raw, json)
Hash identifier: 9pz/d/vf51b3nrUMywxvdzboV9DglOfy1bSzSn2ZkjY=
Subject key identifier: 0B:4F:D7:07:31:EE:3B:3D:6E:F5:D3:FE:A6:5E:6F:A3:6F:8D:93:B5
Authority key identifier: 79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
Certificate issuer: /CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Certificate serial: 0196741DA00C4B0351BCAD0854C7BE2EC77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
Manifest number: 0F09
Signing time: Sat 26 Apr 2025 22:00:20 +0000
Manifest this update: Sat 26 Apr 2025 22:00:20 +0000
Manifest next update: Sun 27 Apr 2025 22:00:20 +0000
Files and hashes: 1: eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl (hash: 0kAKcAw5OV6J8NqtIbipVFoUoI4UxFyabmcSDAcjDWs=)
2: yQAP9rAxN3jSiptdtGasvuqbR7k.roa (hash: jwuLoZWMrvVKlN8mNHV1G2VK8hE/jVPJU+HGrpMeIIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:a0:0c:4b:03:51:bc:ad:08:54:c7:be:2e:c7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Validity
Not Before: Apr 26 22:00:20 2025 GMT
Not After : Apr 27 22:00:20 2025 GMT
Subject: CN=0b4fd70731ee3b3d6ef5d3fea65e6fa36f8d93b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:8b:47:b2:b5:f8:c8:5b:ac:91:f0:ea:bc:
5f:3e:a5:b2:30:5e:f7:a6:45:db:e3:ee:43:ad:5b:
88:91:f9:c8:ca:29:92:58:b8:f5:04:fd:4e:1d:78:
67:9d:04:a5:b6:23:42:58:61:2f:c2:a0:93:ab:f0:
b0:a5:33:0e:36:e1:1e:a7:d6:b2:d2:ee:cf:4c:5f:
17:4a:8a:e8:d9:ca:91:bd:6b:37:50:41:63:71:f4:
ae:a8:5c:29:88:26:f6:dc:3d:eb:c2:46:93:e3:cd:
7f:2d:2d:d6:4f:38:37:49:04:30:6e:a8:87:f0:ae:
62:40:00:77:ad:16:a9:67:13:2a:00:f4:60:c5:f8:
e9:df:ba:cb:71:42:35:ca:c3:f5:5a:7a:57:03:4f:
eb:17:f7:db:ac:3a:e6:2e:cd:91:09:d7:c1:87:e1:
3c:82:5d:37:8f:58:15:f8:b1:8b:3b:82:72:52:26:
35:db:8e:81:fd:28:7d:08:8f:bf:9c:85:50:ac:52:
b4:6b:06:88:f9:33:14:03:4c:77:94:25:d3:d7:7b:
46:bd:ef:4a:49:82:b7:fc:5f:c0:14:0a:57:38:41:
67:9e:64:c5:f3:a4:da:91:32:1b:f9:34:eb:87:1b:
d8:2e:87:48:88:d9:eb:43:a2:2e:a5:6d:f3:72:41:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4F:D7:07:31:EE:3B:3D:6E:F5:D3:FE:A6:5E:6F:A3:6F:8D:93:B5
X509v3 Authority Key Identifier:
keyid:79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ed:75:93:e7:47:22:f9:1b:09:fb:13:58:0d:db:5f:81:a8:
42:85:d1:7e:1c:81:7a:e9:cf:0d:77:d0:9f:a2:f4:2f:24:43:
e4:28:8c:c7:06:88:a4:fd:f7:c0:e3:4d:63:b2:9f:a2:68:e8:
bb:9e:95:92:b6:11:fc:e9:ff:0d:04:b3:ed:17:21:6d:ca:d9:
e5:88:43:09:5d:37:77:de:9f:fc:e9:06:e9:ff:73:49:ed:31:
9e:f0:cb:11:de:76:b4:8d:09:cb:15:32:1f:f0:5f:4f:51:77:
7c:f6:37:54:ce:3b:4a:5a:65:c0:20:39:a3:49:f9:09:b2:f0:
50:f5:96:72:4e:f0:fa:16:9d:57:3f:29:5a:d2:0b:6d:3d:c7:
a8:75:af:87:ad:05:20:dc:a7:c6:b4:11:4b:49:8e:c0:40:73:
85:61:b1:93:2f:4f:63:9e:ca:39:56:6f:dd:0f:83:97:18:95:
33:6b:99:f0:52:19:59:c4:51:e3:7b:f9:b4:4d:f0:e5:e3:e7:
ff:07:e9:fb:41:d0:cb:f7:75:00:9f:9b:a1:46:27:c3:43:09:
b0:f2:41:65:94:47:07:33:e1:c7:35:09:d8:43:a1:79:3c:e2:
40:af:45:a7:95:88:a8:1f:29:42:06:2f:64:cf:19:90:c1:5b:
0e:63:b9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:46:11 2025 by rpki-client