Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File: l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier: p7wJoKPd10BBq8ZaTNdvs8U/IxI/aM6/Iqhqb+KWqTo=
Subject key identifier: 75:A8:44:05:D3:79:42:ED:DF:DB:23:75:AA:81:40:85:29:F8:D2:62
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial: 0196AA31729286F89B077DB62DDC56C12FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number: 010A
Signing time: Wed 07 May 2025 10:01:29 +0000
Manifest this update: Wed 07 May 2025 10:01:29 +0000
Manifest next update: Thu 08 May 2025 10:01:29 +0000
Files and hashes: 1: KGvd9Dk5_a_R1xkL2TWSdydfpdk.roa (hash: HlescFWLzPsD70c5CcwFp2ufdRCBYWVscapXjHm9XI4=)
2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: 8YEGRU7656oR+hM+ol7XylfpzWqs99s2ZJja9I9VYsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:31:72:92:86:f8:9b:07:7d:b6:2d:dc:56:c1:2f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Validity
Not Before: May 7 10:01:29 2025 GMT
Not After : May 8 10:01:29 2025 GMT
Subject: CN=75a84405d37942eddfdb2375aa81408529f8d262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:5e:08:1c:f7:ae:98:ea:5d:f6:bf:16:ae:
b7:dc:7f:27:65:0d:9b:17:ba:0f:7f:07:8f:5a:8d:
12:19:1e:98:6e:97:41:fa:14:d9:b4:bd:e9:2e:2d:
c3:2d:29:74:fa:f3:45:ef:f5:db:a0:78:15:68:13:
8f:0c:65:41:54:58:44:2a:10:2f:59:5e:b9:44:c1:
c8:f1:b3:25:db:0a:bf:75:6e:2d:15:c1:20:fa:4d:
c1:1d:78:25:b5:53:59:dd:48:45:09:52:fc:a8:a0:
fe:1b:0e:8d:93:fb:ec:8a:a6:66:08:f2:38:b4:2f:
f3:37:a9:3a:47:29:39:5c:a8:75:3b:5a:63:47:cf:
60:6a:4e:1e:6f:61:4a:d7:96:12:da:db:1d:07:88:
db:62:dd:96:33:b9:d2:ef:d6:64:7e:54:ba:13:ee:
48:c5:89:fd:13:a9:15:06:23:0d:ee:d1:7f:73:c3:
2a:93:c6:06:1b:d1:c5:58:d1:de:1c:66:b8:88:f3:
ff:ed:ca:29:7e:40:4c:cb:12:9c:7e:8d:38:a8:80:
fc:63:0c:7a:35:24:3c:fb:a3:86:cf:50:a0:96:2c:
eb:08:a7:80:a7:71:7d:32:72:27:cd:82:ba:3f:a9:
e2:33:ba:d1:bb:48:cc:19:ca:06:cc:0b:64:c2:df:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A8:44:05:D3:79:42:ED:DF:DB:23:75:AA:81:40:85:29:F8:D2:62
X509v3 Authority Key Identifier:
keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:73:4e:13:87:37:b2:44:fc:92:95:78:ed:b1:00:94:b4:c0:
47:ac:e8:46:50:34:b2:73:e4:a5:49:19:ea:61:cc:3f:bc:3e:
1f:f0:6e:12:61:0d:cf:08:1c:0a:fb:61:65:7f:f2:e4:18:ea:
bb:40:c9:f0:e2:7a:b9:db:44:9c:7a:15:79:ee:c8:2d:17:9d:
33:10:a5:b6:97:74:9e:00:ca:14:c7:ef:86:5c:9b:19:05:a3:
3b:e8:b1:13:e7:24:b1:7d:d8:89:bf:9c:89:c5:bc:69:f5:33:
3b:6d:7c:cb:4d:b8:d3:32:93:26:e1:db:18:d0:ac:ba:1e:4a:
77:67:51:fb:35:b3:70:d0:69:6b:39:2b:61:3e:b7:de:e5:7c:
f3:2e:b1:b4:ed:71:5b:fe:87:ef:84:06:44:f9:96:aa:ec:2b:
f7:f0:75:9e:de:8f:42:16:00:5e:e8:6f:41:67:fa:94:ec:ba:
a9:9c:b1:ce:c3:c9:7e:72:01:4e:09:05:bf:65:32:9a:b9:a8:
dc:e9:b6:7c:d0:10:eb:02:a8:58:bc:0d:16:66:a3:be:3c:9a:
d8:33:89:bb:63:d6:43:3d:54:44:47:1f:fd:26:00:75:e7:a5:
2e:92:8d:d5:27:bf:19:ef:8f:f1:62:57:f4:f3:74:95:d0:d5:
b7:42:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:57:48 2025 by rpki-client