Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: 21t1xyMBMkjTcjNrnNZd/RDdPSyrlVfHy2hC//SCP3w=
Subject key identifier: FB:22:00:CF:14:E2:A9:42:9B:EF:43:0D:B5:41:A5:15:A3:C4:5A:A0
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 0196730AE33106F33F05538127989C604B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 0167
Signing time: Sat 26 Apr 2025 17:00:15 +0000
Manifest this update: Sat 26 Apr 2025 17:00:15 +0000
Manifest next update: Sun 27 Apr 2025 17:00:15 +0000
Files and hashes: 1: 4TNcEamcxMBJdxuRNcPnkIPobhU.roa (hash: m5tTan6cU+uoGi79hby9WpCdyKNlJQA9BZkDNvmdK4g=)
2: Tzl5NFiih_Oo3si8dnUw8wkuo2I.roa (hash: 6Qg5GxXMwFQB8Qi2Ip90XrbOE+HYQ3G3PbvVVea81ok=)
3: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: llAB8GQkZYmN7+q8Va7VbvlHCXp63ZNduY5ZPA3QgzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0a:e3:31:06:f3:3f:05:53:81:27:98:9c:60:4b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Apr 26 17:00:15 2025 GMT
Not After : Apr 27 17:00:15 2025 GMT
Subject: CN=fb2200cf14e2a9429bef430db541a515a3c45aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:67:a7:9c:9b:91:4a:fc:02:f3:bc:40:7b:
16:3c:1b:11:43:9f:bf:82:3c:e3:3a:5b:ab:9e:40:
36:53:df:93:33:6e:56:3d:e4:d5:48:11:d2:3c:98:
a1:e5:d7:f8:55:77:c0:f5:76:cf:76:0a:7c:81:bf:
4e:44:e4:17:44:ce:14:c2:6b:54:6a:ae:67:f9:c6:
f6:6b:a1:c7:f0:40:b3:e7:2d:ec:60:db:91:66:23:
82:cc:7c:58:ed:e0:d8:e6:2a:51:59:24:9a:1f:d2:
83:cd:6b:21:0f:f6:2c:a2:63:1c:d9:04:0d:2b:55:
d5:8a:bc:f9:05:95:d4:b1:55:a1:79:24:84:1d:52:
1e:77:6e:41:4a:cb:79:47:6d:09:c0:1e:99:49:8a:
81:2d:b9:88:ee:95:80:a5:c1:4c:0f:2a:9b:39:d8:
8a:bb:85:9c:23:fb:61:42:56:b8:de:dc:5c:7a:1a:
0f:06:a4:7c:80:25:3e:26:6b:79:16:48:79:f6:06:
5c:55:87:b0:e7:75:99:ef:81:2a:17:a0:e2:9e:d9:
a0:e8:ed:2e:a0:fc:56:2a:42:97:a0:e2:78:d1:90:
c6:79:c7:8d:af:e5:55:c0:b2:2b:2d:f9:1b:bf:69:
b3:e1:de:8b:25:87:e9:bc:6f:3b:ac:96:42:56:b0:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:22:00:CF:14:E2:A9:42:9B:EF:43:0D:B5:41:A5:15:A3:C4:5A:A0
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b9:d5:94:a6:ba:80:05:14:c6:88:ea:1a:c2:13:81:b6:92:
7b:1a:c6:c0:a0:5b:b8:1f:7a:aa:11:1b:c1:f2:4e:8e:19:7e:
e8:47:6b:8d:a9:b6:cf:33:7f:db:2a:4f:b3:87:a5:5a:78:a9:
0f:fa:a5:59:ba:ce:b9:79:61:5c:c4:d1:6c:4a:41:19:fe:1b:
a3:17:a9:b2:f8:d2:1c:4a:f6:8b:f1:6a:4b:0a:d4:85:a5:e4:
9d:a8:60:74:0f:a9:17:94:c5:5f:3b:dd:da:70:48:43:8e:8b:
96:3e:60:3b:be:e9:07:8e:1f:50:5a:b0:a8:4a:1d:c1:a5:85:
af:2d:95:8f:94:76:58:82:3c:1d:45:e0:00:99:1d:64:c4:8d:
bc:90:18:6d:b2:57:2f:ae:64:d6:6a:1e:39:43:40:3a:85:80:
ed:22:d6:6b:d3:74:7e:fd:78:97:62:83:60:26:fa:7b:fa:c3:
59:bb:bb:c9:12:40:76:09:29:ba:e3:55:34:f9:d6:38:13:22:
9e:25:c1:73:61:f7:0e:59:cc:33:37:c4:a6:82:41:89:1d:ca:
6e:e9:84:7e:c0:d7:93:51:3b:af:9a:89:4c:9d:7d:26:be:c7:
e0:c0:8a:0a:a9:8c:26:81:75:bb:94:15:89:31:db:2c:33:e6:
0d:9f:45:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:40:48 2025 by rpki-client