Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
File: f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json)
Hash identifier: O7CP31PjVbx2tUZCT1jEHxsXC2Ko8TNpEnM4TI3HFNw=
Subject key identifier: BB:D2:5B:08:E1:3D:03:7A:5D:3B:D6:96:A6:79:3F:32:8D:F5:51:F5
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 0196A2ADF81974B52C2924F2FC20B6B41777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
Manifest number: 0C96
Signing time: Mon 05 May 2025 23:00:32 +0000
Manifest this update: Mon 05 May 2025 23:00:32 +0000
Manifest next update: Tue 06 May 2025 23:00:32 +0000
Files and hashes: 1: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: UU7H2kj4dg+hXYLrwaOH/Zj8xChHAVTkzkhYwCbp43s=)
2: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (hash: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:f8:19:74:b5:2c:29:24:f2:fc:20:b6:b4:17:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: May 5 23:00:32 2025 GMT
Not After : May 6 23:00:32 2025 GMT
Subject: CN=bbd25b08e13d037a5d3bd696a6793f328df551f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:ff:b5:c8:9c:ac:e3:68:35:0a:1f:5a:bd:
4c:ae:d4:6a:d4:a3:3c:5a:fc:22:3c:5b:04:30:ea:
e7:e2:b0:d7:de:11:00:5a:5a:11:25:d4:d8:44:b5:
52:cb:e7:be:b9:97:ec:a0:98:7c:ea:49:6a:f0:82:
63:9a:1a:30:59:bd:11:84:77:db:5d:7a:bf:d5:4e:
74:a5:3e:f4:96:61:ca:9c:57:4e:66:4b:84:10:4a:
0e:25:fa:54:a8:97:c0:fa:5f:67:0d:08:3b:f6:6f:
cc:3a:40:a0:e8:af:83:25:76:d2:b0:28:51:a1:8d:
65:71:80:1c:e3:5d:69:e6:8c:0a:0f:63:36:97:d0:
74:cd:a9:ed:af:7c:39:2f:f1:17:b7:fd:c9:34:61:
fd:fc:be:c5:b2:38:5c:3a:7b:d8:7f:3d:82:c0:2b:
a5:2b:da:1e:ac:97:de:e3:89:f2:4f:7f:cf:7a:25:
55:c3:e5:59:50:ad:eb:74:6e:c6:f3:5c:41:96:cd:
b2:9a:95:a7:c6:be:99:de:5a:fe:10:74:80:76:5c:
2d:45:f2:89:b5:30:a3:10:05:3e:9e:b2:3f:75:28:
e9:56:b0:ed:26:8e:c6:bc:6f:ea:63:ac:b2:9d:ea:
e2:51:16:f4:aa:f2:55:aa:11:07:04:b8:8b:18:57:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D2:5B:08:E1:3D:03:7A:5D:3B:D6:96:A6:79:3F:32:8D:F5:51:F5
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:55:5b:6c:16:9d:19:b4:fc:e7:e9:e4:0a:68:cb:90:e9:ce:
4a:8e:00:c3:8f:4a:82:bc:a7:dd:22:0f:a8:08:7e:16:f3:3c:
aa:e2:eb:bc:99:88:78:d1:70:30:90:58:31:80:ad:64:3b:ca:
0e:c9:5f:e3:38:4c:d7:f1:f4:d7:73:39:d7:cb:8c:08:20:3e:
70:4e:87:9d:ee:77:13:82:f4:01:50:a5:4b:66:28:48:29:96:
f7:2a:1a:e0:8c:f3:f8:a2:c4:3b:d0:c6:75:a3:7d:2c:53:8e:
94:ff:b4:8c:2b:f5:e1:26:4c:99:00:05:62:60:ae:28:30:a3:
9f:e1:0a:b6:e7:06:1e:43:36:4d:5d:76:eb:43:86:90:04:55:
84:bc:9f:1c:fe:26:74:ad:b9:2d:c8:92:08:0c:df:ff:43:71:
ac:39:e3:5b:44:e8:df:08:22:f9:c3:79:72:b3:71:2c:58:25:
21:26:d5:b5:63:ca:d2:e4:09:ee:f8:8a:e7:51:fa:65:f3:38:
f1:b7:1e:85:bf:f6:82:e8:3f:3e:38:58:ad:63:c8:75:20:09:
c7:93:48:95:ac:f6:54:94:0d:19:6d:01:32:c7:c5:57:f6:27:
f2:6b:36:89:a9:c1:b5:24:59:ee:6d:7e:f7:f3:00:0d:2c:aa:
c1:7f:ad:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:59:27 2025 by rpki-client