Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: nl+f82fpYtB/sb6LLCaFPQGuqvNr2k1dA8QvXcy0oWU=
Subject key identifier: 43:BC:F7:86:05:7C:F1:08:35:44:45:EF:AF:0C:72:69:62:52:CD:28
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 0196B890BBDA51B9F627D1008A02840D3137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 0EF9
Signing time: Sat 10 May 2025 05:00:15 +0000
Manifest this update: Sat 10 May 2025 05:00:15 +0000
Manifest next update: Sun 11 May 2025 05:00:15 +0000
Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: QBAQFbEasLbOaIowefSe9wD6jyQjNSGAwZWFY5KhxCE=)
3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:90:bb:da:51:b9:f6:27:d1:00:8a:02:84:0d:31:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: May 10 05:00:15 2025 GMT
Not After : May 11 05:00:15 2025 GMT
Subject: CN=43bcf786057cf108354445efaf0c72696252cd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6c:a7:b6:ec:c8:88:09:3c:b7:44:6a:d4:e6:
31:a5:fb:44:1f:7b:b8:2f:05:94:78:32:4e:04:32:
53:a5:16:f3:0c:d9:f6:1b:32:be:83:a9:df:ae:5a:
c7:69:8c:3d:87:39:5e:78:49:1e:d8:ba:43:17:60:
88:0b:90:99:a4:5b:02:df:1a:62:33:a5:0d:8e:63:
80:a3:57:c5:84:61:66:4c:c4:df:66:2b:fc:28:60:
35:19:72:1c:cb:31:67:19:07:f3:55:13:87:fa:ad:
c6:b2:e6:5c:f9:cc:12:df:d8:96:8c:de:8b:d4:d6:
ff:9d:17:7d:89:24:3c:39:43:93:32:68:15:83:36:
73:8c:dd:86:90:d1:cc:a1:08:2d:46:d7:82:ae:cc:
0e:ee:db:8c:0c:71:fa:e2:80:df:f0:45:94:76:4b:
c1:75:ff:99:87:76:11:ff:e9:ee:1a:df:e4:ca:c5:
92:e5:9b:c5:c0:64:e8:45:58:e6:10:95:12:f8:36:
ad:d8:c3:e5:5b:f4:19:00:95:fa:9d:e3:4b:38:4b:
4b:fe:c9:fd:c3:16:a2:1a:a3:2a:88:a3:f8:3f:fd:
ff:c6:d6:0d:44:98:ca:d7:a9:16:0b:a7:07:5e:ae:
e0:86:6a:93:d1:1b:b2:fd:dc:5d:1a:76:f2:46:a5:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BC:F7:86:05:7C:F1:08:35:44:45:EF:AF:0C:72:69:62:52:CD:28
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2d:b0:59:3a:ac:09:4f:c5:a3:34:bf:8f:89:bb:1c:b8:a9:
b6:e5:c0:59:00:f8:86:99:ef:20:c5:30:00:f9:10:65:21:81:
e0:7c:08:07:3b:d5:4d:ca:3b:09:c3:86:9b:4c:7e:1d:86:e3:
b6:72:80:b8:0b:6b:25:98:83:9a:6d:a1:43:e2:a3:ac:23:ce:
4c:38:0c:6f:e6:f5:8c:c0:b1:bb:9a:65:ed:d1:f8:98:39:07:
00:52:71:c8:39:a1:a7:cb:ff:88:14:96:77:83:86:09:bf:fe:
df:15:61:eb:46:af:76:eb:16:bb:f2:2d:09:ef:90:82:06:31:
07:a0:aa:d3:c0:e3:6b:63:88:a3:82:76:f2:0c:e1:25:17:bc:
39:5a:69:f9:a3:1c:60:4a:50:f6:72:64:89:02:6d:bb:bc:ea:
a1:c6:74:3d:46:77:78:c4:65:51:2d:b2:b6:db:a1:6c:ed:24:
9f:c5:37:30:c8:a9:b2:d1:da:52:92:dd:2b:8a:8a:0e:8b:ea:
95:ad:d2:6a:20:e9:94:3b:b1:91:6a:88:3c:06:d8:89:8a:dc:
19:8d:6e:73:46:8d:c8:c4:cc:d2:71:a1:4a:c6:a9:6d:62:cd:
c8:84:41:11:12:40:d2:fa:db:ce:64:b4:c2:2e:4e:f6:59:8c:
f5:e5:2a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:57:38 2025 by rpki-client