Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: tXbsWnILiJj1QpG8itgWa8LDfJkN/5n7x/SkR/DzL1s=
Subject key identifier: 51:2F:94:8A:90:52:2F:5B:41:25:7B:DC:ED:BD:F9:EC:A7:67:00:4E
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 0196BE92E0E0A9E21F0EFC1227017BEAF73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: C5
Signing time: Sun 11 May 2025 09:00:18 +0000
Manifest this update: Sun 11 May 2025 09:00:18 +0000
Manifest next update: Mon 12 May 2025 09:00:18 +0000
Files and hashes: 1: BJ7sjp5ibHEtMZwGH8QOSgEVeks.roa (hash: vdUAgWFb0/ninRNnqapYY+qZwNPE4UbocwPx101zVCg=)
2: JyAstjJnRnfKpE7boFngTUQKsSI.roa (hash: QeCPc7sTPqsvq1vdnmx1h5/hFMLBuSHfMUEgszAKgAc=)
3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: pmcOcBI8YmrrcLgKnbNF8YkKMx0kmmyH5YHUniEvVD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:92:e0:e0:a9:e2:1f:0e:fc:12:27:01:7b:ea:f7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: May 11 09:00:18 2025 GMT
Not After : May 12 09:00:18 2025 GMT
Subject: CN=512f948a90522f5b41257bdcedbdf9eca767004e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:ce:16:41:85:af:19:41:40:58:5d:f6:19:
cb:f7:5e:1b:45:25:91:58:ba:7b:c3:41:c5:0e:d3:
86:cf:d2:87:eb:2d:d3:75:82:46:c4:55:66:f8:bf:
78:df:70:c5:a5:28:b5:32:93:9a:4b:14:80:9c:86:
56:b7:70:cc:70:02:89:2a:3c:e7:e2:25:66:2f:8c:
40:17:c6:16:40:39:e8:9e:4e:bf:4a:ea:4d:47:a4:
4c:2b:0f:c5:fd:c8:ee:74:7b:0f:ac:2e:f6:85:8f:
88:64:25:48:ce:42:57:85:d1:a0:f3:4b:46:4a:52:
9b:b0:34:31:30:db:39:63:97:97:06:55:2d:b1:40:
2b:73:a7:af:a3:3f:d2:8b:f5:e7:88:13:66:9a:b6:
3b:f7:a2:16:5b:05:4d:fe:86:08:55:53:78:f8:ae:
ef:ec:eb:a1:2e:a4:a0:76:ae:28:3e:63:7e:98:0c:
f5:8a:f0:83:85:10:bf:c7:9e:88:67:8e:57:c7:f4:
82:43:06:ec:3f:80:dc:2b:1a:ae:c1:c3:de:c9:cc:
ae:5b:ad:dc:2c:61:ea:e4:94:c0:4b:29:f5:9e:42:
83:75:75:39:96:6f:51:6e:6d:75:a4:c2:57:cb:75:
95:14:76:ba:db:33:da:47:d5:43:14:96:fc:75:a6:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2F:94:8A:90:52:2F:5B:41:25:7B:DC:ED:BD:F9:EC:A7:67:00:4E
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4b:c2:a1:d1:ab:77:9f:40:38:f3:f6:b0:f7:a1:9f:47:d6:
0d:ae:fa:82:a9:72:00:6f:2d:0e:81:81:d1:4e:b6:33:a4:3c:
dc:f0:6c:ce:8f:2d:44:bf:2f:81:1b:63:bf:03:45:50:b1:34:
ff:e2:1c:8c:2b:b6:16:62:73:78:61:9a:cd:d0:0c:5a:f6:a3:
ca:48:81:4d:13:a4:31:07:72:72:b7:87:17:2f:5c:b9:4b:1f:
15:33:4b:46:1d:73:85:3c:4e:06:05:34:49:84:9e:ca:13:93:
2e:3c:80:b6:02:12:1a:e5:65:91:af:55:6b:0f:86:9f:5a:01:
d7:b4:71:ba:68:78:4c:7c:37:74:b6:1b:9a:2e:e8:c0:52:1d:
70:7d:70:07:61:38:c5:3d:4a:46:68:c2:f8:e2:fc:00:12:ea:
3a:f1:bc:58:c2:35:b2:55:b3:74:d0:b9:45:0a:58:a1:10:e2:
3d:e0:f1:57:c7:70:41:2d:4a:22:d4:82:1f:a9:63:38:ce:95:
14:33:7e:01:57:2c:b3:db:97:f8:76:20:b8:07:21:bd:ef:a0:
17:46:3a:61:24:07:fa:d6:1d:2d:09:7d:a1:85:16:c9:3d:bc:
15:13:16:5c:09:44:9b:91:59:59:4a:ae:a3:4e:5a:aa:5d:9c:
04:0e:43:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:21:39 2025 by rpki-client