Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
File: FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json)
Hash identifier: bzNEEm+AZh+xZ6OeJOi2LUOkhhJ9R0Mqvoa61sCttiI=
Subject key identifier: 68:FE:BC:69:4F:4C:B2:2A:B3:37:C4:B9:AE:EE:B7:7C:04:6D:AF:4D
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial: 0196C6838EACC024039314B6BB66FB8958D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
Manifest number: 0E5C
Signing time: Mon 12 May 2025 22:00:32 +0000
Manifest this update: Mon 12 May 2025 22:00:32 +0000
Manifest next update: Tue 13 May 2025 22:00:32 +0000
Files and hashes: 1: AHAoAS0NTz8rAfdAi1-FKZQiZzo.roa (hash: UPpJLytuKjP0PEtk9/ACh8gURBOrfTZUj6sBll9GGNE=)
2: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: 48FYmPdSBGVVVuzR0mA7Oti1l2S5KVM+LiN7vezLBsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:8e:ac:c0:24:03:93:14:b6:bb:66:fb:89:58:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Validity
Not Before: May 12 22:00:32 2025 GMT
Not After : May 13 22:00:32 2025 GMT
Subject: CN=68febc694f4cb22ab337c4b9aeeeb77c046daf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:75:10:6d:54:0c:e5:7e:19:57:08:5d:37:
fc:a8:a5:99:47:83:97:b1:c7:da:a6:b6:11:b1:9f:
13:4d:9c:56:c1:ae:c0:3f:03:7e:0b:1d:eb:3c:37:
d1:ba:e0:85:ff:a6:db:58:dd:e4:e8:5f:89:9f:b4:
e8:72:31:86:e9:ae:7c:0d:3b:c0:eb:06:43:27:f2:
02:d7:9b:84:d2:e4:17:de:35:7a:a7:95:ad:30:27:
e0:ba:6a:3f:c2:97:fa:8d:52:01:2b:cd:fd:e0:ad:
81:66:9f:3d:f4:1d:ba:b7:ec:c6:63:af:9c:84:48:
91:a6:cf:86:58:f2:77:32:3e:ff:56:8a:bf:69:b4:
f3:84:20:01:a7:6f:00:45:60:ff:e5:50:7e:db:f2:
42:fa:1f:8d:33:2c:af:72:6b:ee:55:1a:40:44:23:
8f:cf:38:6b:a8:cd:d9:fc:70:e6:69:be:5b:4e:d4:
c0:e2:a6:97:05:47:52:6a:ea:68:d2:ab:48:bb:f7:
b7:b3:9c:f7:63:ea:2a:90:52:75:41:51:98:4d:6f:
b7:7b:58:67:f8:dd:49:cb:73:2b:a0:bf:8d:3d:5b:
3f:58:15:08:fb:30:ba:06:af:dc:64:a8:12:d4:82:
d5:01:b6:e3:75:ea:07:41:dc:3b:39:dd:86:9c:c3:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FE:BC:69:4F:4C:B2:2A:B3:37:C4:B9:AE:EE:B7:7C:04:6D:AF:4D
X509v3 Authority Key Identifier:
keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d9:57:38:79:39:db:0a:72:5d:05:15:6e:19:15:1e:4d:ba:
14:be:a1:ef:73:46:be:74:ea:9a:e2:0b:78:41:3c:d6:e1:97:
25:9a:39:70:c9:0b:28:0a:73:39:3e:c3:d4:b4:ed:11:41:dc:
c3:fb:dd:9e:19:48:bb:c8:db:09:f9:6e:8d:29:5e:36:be:34:
22:14:0f:b0:cc:91:54:90:2c:4d:da:53:7b:1b:ce:fd:5e:4c:
bb:36:b6:35:d6:79:a8:ca:7b:d8:c4:6e:f7:5e:89:a0:90:ca:
61:62:5d:62:e8:6c:28:33:7c:68:6b:97:72:ad:3b:c8:a6:34:
46:6a:1b:df:68:8c:ae:ed:e3:0a:7e:7f:6d:82:37:92:2a:df:
17:2c:a4:05:a0:5d:a1:13:30:51:8c:ec:04:de:11:8b:ee:bb:
cd:2a:60:9a:ac:94:b7:04:bc:5a:02:23:d7:77:a2:41:3f:9d:
0b:1d:1e:33:6d:c2:94:26:5a:df:cd:b8:9c:e5:45:da:5a:69:
ea:d3:87:46:20:81:d2:6f:4c:ab:fc:a3:07:42:ea:95:d9:2a:
5d:35:2c:87:81:ca:52:ce:61:da:9c:2a:fa:72:63:83:9b:3d:
82:a2:01:80:18:76:78:2f:25:18:22:71:6f:ec:ea:1b:e2:15:
6e:a7:0e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:05:02 2025 by rpki-client