Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: i3leVBnMD/TSZjA2Kfe733QR4LIfyZOIXfSbo55vgJI=
Subject key identifier: 9F:BE:85:C8:3C:88:58:38:62:B5:B1:38:7F:F3:FC:D0:C0:B1:35:D4
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 01968021E3EB7267B41316DF03BE756B9042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0BA9
Signing time: Tue 29 Apr 2025 06:00:26 +0000
Manifest this update: Tue 29 Apr 2025 06:00:26 +0000
Manifest next update: Wed 30 Apr 2025 06:00:26 +0000
Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: 00pO5UZjkWU5unN7/CJK+SmpLsYcyojOR6ZQ15RCUis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:e3:eb:72:67:b4:13:16:df:03:be:75:6b:90:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Apr 29 06:00:26 2025 GMT
Not After : Apr 30 06:00:26 2025 GMT
Subject: CN=9fbe85c83c88583862b5b1387ff3fcd0c0b135d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5a:9c:5a:a0:5e:01:38:1d:b9:da:5f:4b:62:
01:b2:f5:dc:b6:cb:e3:3b:ff:a1:40:65:22:0e:28:
27:7d:da:d9:b0:a6:1c:d8:60:86:c2:f4:3c:64:3d:
6b:ca:b7:aa:be:65:d5:d4:0c:36:8f:fc:13:48:46:
6e:90:e2:c6:be:79:5e:50:02:8a:58:10:19:e0:c2:
0c:d7:7e:fa:b4:fe:09:8c:5b:6d:37:90:2f:8c:1e:
c6:87:03:2f:f5:83:f5:28:f4:6a:6c:bb:7c:77:d2:
d6:a2:31:d9:a5:7b:d0:48:7b:65:f4:85:39:0e:4c:
2c:dd:5e:99:71:05:78:e4:85:09:18:d5:dd:11:8f:
f2:c2:19:32:ce:df:a5:55:ea:e6:35:44:3b:bb:4f:
a1:83:5d:09:75:77:d7:06:42:e1:c4:41:bf:71:b8:
02:73:94:2a:64:2d:8d:9e:b6:e5:59:d8:2f:8b:83:
b9:5d:73:80:e6:7c:ed:e7:fd:f2:cf:9e:4f:b5:14:
d4:9b:a7:f3:89:75:ea:10:5c:b7:04:29:86:e2:6f:
2a:13:6d:61:65:44:9c:8b:63:3c:e6:d2:df:bc:fd:
17:cb:56:dc:86:1a:98:42:aa:c5:b2:dc:83:b5:0e:
71:7b:5e:29:77:c9:01:b3:da:fb:f8:b1:0e:50:09:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BE:85:C8:3C:88:58:38:62:B5:B1:38:7F:F3:FC:D0:C0:B1:35:D4
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5d:f4:18:76:e5:ea:57:d9:ed:e7:26:3b:37:58:50:50:90:
c3:59:76:36:67:35:ad:31:f0:da:2b:ad:42:fe:41:b5:b4:c7:
44:d6:d7:6f:d1:12:85:77:60:04:b7:22:af:0e:9c:bc:96:88:
1c:b0:ad:fa:2c:00:92:f9:bb:2e:fa:c4:d6:76:e7:ba:27:82:
7c:b7:8a:9c:70:14:d6:ab:b2:5f:ff:dc:2c:dc:c6:4a:1e:80:
71:17:e6:97:9d:96:7e:61:69:13:07:1c:e6:a0:15:33:c2:57:
58:b5:4d:3f:f9:e9:77:ce:16:3b:4c:dc:48:56:89:15:21:a7:
ab:48:dc:ce:df:c4:c0:5b:04:0d:a2:c5:eb:64:83:22:aa:df:
9a:87:e0:32:7e:72:2a:92:77:3b:b2:d3:17:ea:f9:8b:26:81:
44:9c:d9:9f:7b:e9:67:2c:5b:b9:91:aa:14:96:f5:70:77:67:
14:ab:73:b1:31:b7:ae:8d:7b:0b:61:db:e5:dc:ff:f8:af:66:
0b:ef:c4:88:4e:c0:65:f6:38:d1:fd:fb:c4:8d:a7:21:47:a8:
f3:ec:fd:e6:e2:50:70:3a:a7:1e:a3:b6:ef:48:aa:2d:5a:04:
78:c9:fa:e0:04:f9:7c:e2:0b:ee:f6:57:99:9f:60:f2:df:33:
1d:1f:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:42:15 2025 by rpki-client