Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: WZiPgS1fv9PQhvHuH/zgnaysgl0ajqeu1Isxd3yBryY=
Subject key identifier: AF:3C:76:F6:7B:4A:A7:C4:26:6C:94:A9:49:92:87:9B:CE:7D:65:FF
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 0196BF37CA7D7430BDD7D42748751AD80345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 07B6
Signing time: Sun 11 May 2025 12:00:26 +0000
Manifest this update: Sun 11 May 2025 12:00:26 +0000
Manifest next update: Mon 12 May 2025 12:00:26 +0000
Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=)
2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: aiO9OOcH+bsPVY6jLwNY7lkDsQV65gbc5rSDAc7hr9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:ca:7d:74:30:bd:d7:d4:27:48:75:1a:d8:03:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: May 11 12:00:26 2025 GMT
Not After : May 12 12:00:26 2025 GMT
Subject: CN=af3c76f67b4aa7c4266c94a94992879bce7d65ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:8e:a2:39:07:ef:6b:0d:22:ae:e1:7c:58:
d8:a0:f8:9f:3f:4a:83:cf:de:0f:59:fb:b4:5e:2b:
9c:1a:a8:7c:10:f5:50:86:f0:15:d4:82:98:2d:b3:
44:56:13:97:db:1a:9a:e3:37:2f:c8:98:c2:3e:c6:
dd:ec:c4:7b:5f:f8:e1:e7:3b:d7:5f:9b:d7:2d:c4:
16:bc:e6:32:23:9b:3c:c3:df:d9:45:fa:6b:df:6c:
a3:b0:f5:92:c3:23:7f:83:f5:d7:3f:0a:39:09:3b:
f3:63:50:58:39:76:34:cd:48:8a:11:03:82:5d:f5:
88:3a:77:ac:c3:07:cf:92:1e:19:56:aa:88:3f:85:
9e:d1:02:97:41:76:fe:67:d1:2e:f9:9b:d8:f5:61:
e5:fc:f6:d9:95:fb:36:4f:1a:35:98:63:9f:47:ba:
4a:04:6c:b7:44:64:7b:68:4e:d5:14:f2:1f:16:ea:
57:bf:37:bb:25:ff:91:91:ad:b6:23:5e:6c:a4:f0:
5b:12:22:bd:16:e8:36:1a:7b:c2:6b:83:6d:36:1a:
af:a3:01:69:91:ca:31:b7:2f:b7:3f:58:e2:b9:24:
6d:4b:d7:ae:cf:1b:16:00:14:33:d0:c5:09:a4:c7:
cb:8e:40:2b:a4:ef:6a:26:32:78:ae:b2:1c:ea:87:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3C:76:F6:7B:4A:A7:C4:26:6C:94:A9:49:92:87:9B:CE:7D:65:FF
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d8:98:57:18:e8:e5:f1:a6:2f:3e:a4:ac:ea:9d:9b:26:2b:
20:52:1b:f8:37:c9:47:0d:36:dd:b9:8f:3c:61:b3:1e:a6:22:
46:12:53:c7:38:f6:da:94:60:74:6c:3e:d6:fa:a2:c6:f9:e0:
47:89:47:46:25:45:66:ab:de:39:f3:4e:8b:86:b8:e9:35:ab:
9a:96:aa:ef:ce:07:a9:41:69:e6:54:db:7c:64:1f:44:31:ea:
0c:11:25:f8:a7:06:e4:ed:89:31:19:2c:e2:71:86:fb:a2:a8:
30:c8:80:f9:86:b7:c9:d4:ee:aa:eb:27:20:a3:e7:da:6c:8b:
c7:49:1a:45:56:2c:e7:f4:33:97:53:2d:e1:c4:6c:06:31:b7:
b0:b1:8e:36:0f:63:4c:dc:15:67:23:fa:7c:0b:8e:4e:80:92:
1d:19:e6:14:f1:f1:8a:6b:86:78:34:ef:e1:e2:f5:41:11:36:
3f:7b:a7:7a:b3:69:b0:7f:33:39:cb:88:42:bf:b6:35:c4:bb:
93:1b:be:b3:bf:59:35:97:e6:a5:3d:69:8d:9b:b4:78:9e:95:
02:0d:89:5a:46:18:4e:2b:2b:95:0c:87:08:c5:fa:bc:4e:f0:
a7:64:1c:99:2f:76:6d:6d:0b:6c:3d:91:f6:0e:80:b0:f4:ba:
af:84:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:14:48 2025 by rpki-client