Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: sw99FJr7wI6ZyX5kcM8usiVKNeciqWPv7p7G4129qTY=
Subject key identifier: 54:A2:AF:4B:E3:84:41:AB:1C:55:8E:E9:C9:59:5F:8B:20:12:A2:BD
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 0196A0899E337EA4D861D4EE656E2D83A584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 140C
Signing time: Mon 05 May 2025 13:01:35 +0000
Manifest this update: Mon 05 May 2025 13:01:35 +0000
Manifest next update: Tue 06 May 2025 13:01:35 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: 3zkHxdShzJkBWxzm0XxdmKvjQ5uQvx1454m9sYMp99w=)
2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:9e:33:7e:a4:d8:61:d4:ee:65:6e:2d:83:a5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: May 5 13:01:35 2025 GMT
Not After : May 6 13:01:35 2025 GMT
Subject: CN=54a2af4be38441ab1c558ee9c9595f8b2012a2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:5a:90:9f:d2:d1:70:38:d9:5c:02:f9:9c:
e3:63:63:49:6b:d8:e3:f4:e4:56:f0:30:4e:0a:7b:
a1:41:bd:c3:d4:d4:2f:e7:ca:25:53:e9:b5:b1:61:
29:9c:5f:da:0d:ac:9b:c7:e0:56:75:06:5a:25:1b:
91:20:ff:56:8c:a8:28:ff:86:76:cf:41:47:58:22:
6b:3f:38:ee:24:83:c8:67:a9:e6:c0:59:81:14:b4:
70:6e:14:89:75:73:93:bf:69:c0:90:20:28:af:ae:
eb:5b:91:10:39:4f:08:c7:32:20:f3:e0:ef:d0:06:
bc:a8:18:d4:bd:12:38:83:31:b1:6d:b4:d9:70:c0:
45:f8:08:b2:57:e7:d1:35:17:8c:4c:3d:65:93:31:
52:75:a0:78:7a:8d:02:e9:47:a1:f9:52:02:21:45:
e9:f4:33:f5:18:75:cf:9d:ab:3d:dc:24:83:ad:70:
10:9f:5d:b2:ad:ef:2d:29:2f:32:8f:da:42:f7:6a:
d2:cc:69:f3:6f:67:bd:98:95:9e:59:cf:8d:7b:fc:
0e:4c:50:eb:1d:40:74:c0:d2:b5:eb:9e:5d:9a:6e:
ac:34:86:70:89:41:9a:89:39:81:3f:0a:86:9f:77:
4d:71:70:03:16:ce:3c:77:b5:d4:b1:21:97:b9:fa:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A2:AF:4B:E3:84:41:AB:1C:55:8E:E9:C9:59:5F:8B:20:12:A2:BD
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:39:61:22:6c:0f:c1:70:3c:22:5e:e8:cf:e3:17:e6:d5:4b:
e1:47:15:79:e8:df:6f:92:53:b5:36:a0:07:ae:a8:37:13:a4:
0b:26:2b:03:9d:dd:51:33:f3:19:9a:fb:68:4b:3a:30:54:0a:
e9:a4:8c:2c:ee:81:e5:50:8a:1a:e2:10:27:37:a6:b0:42:04:
4f:a5:54:3a:54:4c:d5:fc:5e:54:65:52:59:b2:53:f0:29:e3:
0e:cd:c5:90:23:c0:ff:36:b6:0e:84:f9:8a:b9:ad:f3:dc:22:
4d:c8:c1:3e:f5:19:9e:da:db:ea:64:49:02:3c:57:0b:94:68:
e1:d3:b4:6e:c8:02:2d:5a:0d:0c:6c:dd:84:8d:a9:d4:c0:3a:
73:82:07:8d:28:33:8a:13:5b:77:9b:5b:ee:33:bb:03:b0:44:
55:64:59:b6:95:c4:95:2b:10:39:56:09:95:c0:73:9d:d2:f0:
53:74:d7:2b:8f:dd:29:69:17:34:88:24:d3:b9:ea:40:9e:87:
67:90:50:9d:38:6c:f5:15:20:72:f6:55:a2:77:5d:36:b5:ad:
7b:cd:a4:17:71:96:15:e0:cf:d4:f0:ff:dd:af:5d:b7:cc:21:
9e:f8:5a:91:e3:53:fc:d2:6d:d6:ca:8f:dc:2d:14:33:87:f8:
b7:8c:62:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:03:19 2025 by rpki-client