Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
File: i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json)
Hash identifier: c7XQqpnUkOnlP+Uy4mGuN2NwCRRqpXSz/txHVZ9xxGc=
Subject key identifier: E5:4F:0C:7D:9A:70:47:B4:D8:A4:CF:2F:65:4B:8B:5F:CD:C4:69:3F
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial: 01967A5762DA7E8A354894FB5E3C32D68647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
Manifest number: 04F2
Signing time: Mon 28 Apr 2025 03:01:09 +0000
Manifest this update: Mon 28 Apr 2025 03:01:09 +0000
Manifest next update: Tue 29 Apr 2025 03:01:09 +0000
Files and hashes: 1: i2xjHboexoRTpg38Qi-okoPsUcQ.roa (hash: x9dOoFm67St5fPryA+wWNLVDwzCG4EBSO5jTeQtPIqE=)
2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: 2eYkxIoKAv8klqE+z/FfaYIdzw2WjcSYAAGw7jyB4MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:62:da:7e:8a:35:48:94:fb:5e:3c:32:d6:86:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Validity
Not Before: Apr 28 03:01:09 2025 GMT
Not After : Apr 29 03:01:09 2025 GMT
Subject: CN=e54f0c7d9a7047b4d8a4cf2f654b8b5fcdc4693f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:fd:79:1d:92:7b:49:95:af:39:68:22:f1:
b7:23:7f:ab:cf:07:23:19:80:e4:a1:32:d1:27:80:
20:59:17:1b:4e:3e:f4:75:e1:12:11:fa:d9:22:1a:
a7:4e:f2:79:ca:64:d5:0e:2c:57:b5:d3:80:e2:fd:
fb:ff:52:a4:c3:f0:56:d8:02:e9:97:60:b6:5b:5f:
44:d5:66:76:90:56:31:73:c8:f3:37:24:8d:02:79:
1f:fc:a9:88:18:dd:21:8f:71:bf:7d:b3:55:04:29:
cf:1a:a6:d5:f7:6f:9a:6f:85:53:ae:0c:f0:81:33:
61:e8:c3:79:b3:a8:00:40:e2:64:5c:da:f4:47:73:
d8:4a:46:bf:c8:3d:13:b5:64:d9:1a:dd:3b:81:bb:
45:d9:63:61:ab:bf:69:a8:64:dc:2a:5c:92:59:19:
7e:1e:29:aa:61:2f:4a:ac:3d:d8:ac:10:55:c3:0b:
c6:66:32:ac:d3:35:76:5f:aa:2d:07:b9:d5:c4:ce:
fa:0d:37:b2:17:8f:67:d2:37:16:d4:c6:f0:c6:50:
d0:de:56:b8:b3:08:b6:b2:66:60:69:a8:89:0d:a6:
01:ad:8c:02:16:8b:82:12:c4:7d:03:95:3a:71:06:
a3:77:34:6d:ae:b3:60:d6:d2:f8:50:b6:d0:d6:9f:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4F:0C:7D:9A:70:47:B4:D8:A4:CF:2F:65:4B:8B:5F:CD:C4:69:3F
X509v3 Authority Key Identifier:
keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5d:de:fa:68:3e:a0:ac:05:5d:b0:12:d8:cc:86:6b:7f:8d:
0d:f8:0d:f2:37:12:8f:29:91:ca:14:46:98:ff:55:f9:ff:99:
f7:bb:de:bb:31:88:c3:66:5d:cb:15:bc:23:a3:5a:ac:26:59:
ef:fb:39:25:c7:46:f3:c7:78:89:91:ec:7c:c1:1c:1c:c2:e2:
0d:f8:33:4b:0f:bd:e1:da:f5:b2:73:89:39:ac:dc:40:2a:d8:
4d:5e:4f:7d:32:04:53:5f:d4:28:14:f1:1a:08:f2:63:9c:dc:
32:cc:a8:5f:a9:01:ee:1d:23:a8:9c:7e:48:6e:74:1d:9e:ef:
f4:08:c1:66:23:94:d4:5b:33:0d:46:7a:06:aa:12:15:45:c3:
22:11:b1:49:e9:0a:5a:8f:68:ca:85:0d:24:21:49:88:af:dd:
92:3e:21:de:4a:b2:49:f5:6c:c8:9a:22:c5:6d:4e:84:9b:92:
ff:ad:15:e6:b7:f9:e9:b7:f4:26:85:27:99:83:93:0a:6d:5c:
b8:44:18:a4:30:6d:29:04:1d:bc:78:2e:00:a0:db:6a:03:64:
f9:2c:1a:ae:9e:ed:35:bd:da:af:06:ea:eb:42:9d:e5:fb:43:
70:b2:b4:44:8b:29:9a:41:6c:03:58:fb:2e:ba:4c:46:eb:fc:
8d:0c:f3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:35:53 2025 by rpki-client