Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: uoeQiOaGFuvCA9hg8z9uwvJc9rDy873ccGpRLQoUn9g=
Subject key identifier: 35:8E:55:94:E2:CD:DA:47:BD:31:C9:BF:16:75:F7:6E:52:C9:69:E4
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 0196BDEE951180BB0D3A864D8666C68C2354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 05E8
Signing time: Sun 11 May 2025 06:00:51 +0000
Manifest this update: Sun 11 May 2025 06:00:51 +0000
Manifest next update: Mon 12 May 2025 06:00:51 +0000
Files and hashes: 1: 9T4HxwhZJwyiGHa48SYje1ufatI.roa (hash: 8ElIYheNmp/FmPzPS1uvi2rYFBqzm++XUQWo1OHXuE0=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: ejyniDYBvwOOvETVoQWEfRo08Zv58DlWdfP1woO/C8k=)
3: wPcEp2M9VMWvBwIJ57QAHtXrjmQ.roa (hash: IZmN+wQznsRd0N9ZJauN0q3iFAek4sQFg68+aBUWHxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:95:11:80:bb:0d:3a:86:4d:86:66:c6:8c:23:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: May 11 06:00:51 2025 GMT
Not After : May 12 06:00:51 2025 GMT
Subject: CN=358e5594e2cdda47bd31c9bf1675f76e52c969e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ea:98:9e:1e:c3:a4:1d:ae:53:d8:7d:78:08:
9c:9b:43:4f:5e:ed:dd:a3:a7:e9:80:a8:c8:29:e1:
3d:3b:65:d4:3d:04:88:65:8a:10:7e:61:aa:c4:98:
ca:d6:99:5a:99:33:97:46:40:95:b4:60:36:24:22:
1f:53:eb:8c:28:03:d5:27:37:18:34:68:77:8f:4d:
76:93:ee:30:f4:a6:03:63:d2:0a:fd:6e:4c:1a:f7:
54:82:2b:a9:9b:2c:fa:9f:30:bf:91:e3:68:4e:b8:
a2:d7:3a:50:7a:eb:3b:6c:56:66:8d:a8:18:90:48:
41:f6:3a:1d:f2:2c:28:77:12:d8:fb:97:24:a3:6f:
c3:27:d4:ac:60:53:68:7b:79:00:61:61:ce:17:4b:
4b:02:6c:ac:52:f3:38:6b:d5:33:d9:e1:f8:57:3d:
61:88:da:21:09:be:d8:aa:23:05:03:6a:e1:34:48:
91:7a:a0:2f:73:22:b2:90:ef:e8:c3:2c:27:76:9b:
20:e3:d9:23:44:c3:44:6c:24:d5:02:e2:ae:ec:08:
c8:fe:af:9c:bf:ec:7f:54:66:1b:45:61:f9:b7:da:
2d:26:3b:9d:20:c1:c1:32:c4:02:9d:95:e5:08:f5:
9a:ce:a1:d9:6f:c3:c9:06:d7:6c:bc:d8:87:78:6e:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:55:94:E2:CD:DA:47:BD:31:C9:BF:16:75:F7:6E:52:C9:69:E4
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7b:7e:0a:9b:e1:6f:b8:06:ca:b5:3b:b4:70:90:44:92:22:
7e:ef:f0:07:4c:08:59:55:2d:59:c9:2c:cb:06:0a:31:c2:23:
fc:1e:5c:79:ad:6f:3e:1a:be:c0:8b:89:34:9a:e0:bd:39:14:
bb:8f:d9:97:c6:e8:52:7f:5e:a5:e2:99:1e:d1:54:3b:e5:17:
4a:bd:f1:50:39:60:f1:ed:f4:fa:41:96:71:81:02:2f:ce:4f:
75:ad:07:a8:e9:da:8d:3c:8f:82:2e:d0:bb:47:57:c4:10:12:
c0:19:e5:8c:c2:31:f8:ea:3c:6a:18:d0:83:8b:5c:c4:c8:a4:
28:a6:aa:86:75:13:1b:b0:05:b7:2f:9b:61:6a:2c:9e:8c:79:
77:48:a5:79:c2:c5:c4:87:e2:44:30:9f:63:94:cb:92:30:44:
4f:de:36:f6:3c:76:3e:5c:b8:8f:2d:e7:36:4f:57:48:00:29:
f9:bf:6d:92:f5:cc:55:c5:52:bc:40:ae:1f:20:8a:e2:6f:7c:
54:2b:91:5a:56:db:07:31:ae:9b:eb:6a:df:74:81:4f:ff:10:
52:0a:f5:8b:ce:9a:aa:26:85:3e:48:ba:ee:a2:c0:d7:3c:67:
b4:c1:3c:19:57:e4:f4:73:82:76:bc:7f:a8:d8:2a:86:71:9f:
ec:62:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:33:20 2025 by rpki-client