Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json)
Hash identifier: wSa7jXT9bB6tPwe7eb6734IXxWKkiKA0CsygL5bwQYw=
Subject key identifier: 05:F2:F8:B1:FF:F7:45:A1:0B:C5:5B:DF:7D:CD:E8:B5:6C:A3:61:5C
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial: 01968E82F63CD1767FB84284E368283F8B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
Manifest number: 0BD7
Signing time: Fri 02 May 2025 01:01:09 +0000
Manifest this update: Fri 02 May 2025 01:01:09 +0000
Manifest next update: Sat 03 May 2025 01:01:09 +0000
Files and hashes: 1: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: DJPEAAgaR26wm1Y8tMqoSGNuVSHRc2G8iFyX7jg+ldc=)
2: x5BCA2nXSzjfqsyhw28GUZqlIA0.roa (hash: XYC94H5SlTsc3HXQBpsVEd85N9+lJ9Ig2x3jNjrZbWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:f6:3c:d1:76:7f:b8:42:84:e3:68:28:3f:8b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Validity
Not Before: May 2 01:01:09 2025 GMT
Not After : May 3 01:01:09 2025 GMT
Subject: CN=05f2f8b1fff745a10bc55bdf7dcde8b56ca3615c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:9b:50:8d:89:7b:8c:7b:35:05:29:34:b2:
85:34:f3:86:28:89:dd:ad:5e:4c:69:b1:4e:b6:f1:
3e:10:40:2f:0d:b8:d7:45:c7:26:32:fc:80:ba:69:
c9:96:26:e8:e3:08:86:b9:35:2e:72:76:37:4c:81:
01:6f:f6:5e:33:eb:aa:88:40:d5:7a:80:6e:ce:f0:
aa:82:84:74:9e:d3:ab:dc:41:b5:93:d4:8a:6c:7e:
94:ce:14:da:06:f4:8b:6b:45:a1:bc:3f:61:c7:c9:
d3:a7:5e:aa:9e:12:70:39:e0:a7:8a:dc:ff:42:ac:
20:97:f1:1b:6a:3f:8d:ba:00:f5:60:4b:a3:a1:a5:
6f:4e:8e:6f:ce:4d:22:3f:85:c5:03:de:83:a9:94:
b7:62:18:19:a2:12:0e:68:51:bf:46:38:af:11:60:
ba:c4:54:80:07:c5:78:65:d1:e7:1f:16:48:6d:ba:
f2:ca:1f:c9:a4:cd:b1:8a:3a:30:8a:6b:df:42:cb:
74:ee:15:9a:d9:cb:bb:53:32:81:5b:fa:28:e1:f1:
e5:1a:04:ce:ea:8e:f5:a1:c5:fc:9d:c0:ed:90:8a:
ce:cf:4f:1f:96:4f:ad:da:72:a6:06:4b:6b:1e:25:
8d:a5:e4:eb:90:3c:b2:da:16:35:53:54:5e:92:7f:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F2:F8:B1:FF:F7:45:A1:0B:C5:5B:DF:7D:CD:E8:B5:6C:A3:61:5C
X509v3 Authority Key Identifier:
keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b2:ae:39:87:17:86:e1:c4:0a:31:fa:3b:0b:c7:d4:7d:31:
84:78:3d:fc:3e:3f:0c:96:d7:d8:34:ca:8f:52:0c:54:be:cf:
1b:b4:42:54:34:04:4d:64:5d:4f:05:36:2c:45:1e:2d:a6:a9:
47:90:da:a1:b6:a6:23:e1:e9:9d:3f:cb:93:01:0b:c2:0e:f8:
f5:fc:9b:47:df:32:ba:a2:4b:9e:a9:b0:72:ec:95:cf:d0:59:
16:47:cf:f9:3a:dd:0f:c7:ac:ef:dc:aa:76:c6:9b:03:ed:d3:
b8:86:ba:43:e4:82:3f:72:cc:18:74:87:c2:02:5f:84:ef:c6:
45:3f:20:8f:03:cd:62:5e:58:1d:1f:5f:b1:0d:a9:dc:0a:95:
e5:ab:51:3a:47:5b:ce:52:b4:10:52:16:0e:83:f4:fe:8d:bf:
44:5d:d2:0c:b9:11:fc:7d:33:4e:f2:df:96:98:db:75:89:94:
e9:80:a5:2a:38:26:0f:04:2e:8d:4e:07:1a:4e:f3:94:8c:d5:
70:00:74:e2:ac:bf:a7:c0:9e:02:ac:c1:eb:ae:7d:44:bb:f3:
c0:e9:69:bb:57:f0:ed:2b:64:72:15:f4:05:f0:5e:06:4a:ef:
cf:38:c4:44:dc:02:fe:49:35:44:5f:b3:76:b9:7e:e0:a9:4a:
90:48:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:46:49 2025 by rpki-client