Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: XiQGwxYoA8mKZ4/RsdRktEBYTShlOQMRUQUU7steATQ=
Subject key identifier: D3:59:D6:95:E2:46:5E:2A:C9:1F:99:CD:5D:7D:52:2F:FA:EA:96:EB
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 0196AE0D814B16EE6F03A383020233DB160E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 09D5
Signing time: Thu 08 May 2025 04:00:42 +0000
Manifest this update: Thu 08 May 2025 04:00:42 +0000
Manifest next update: Fri 09 May 2025 04:00:42 +0000
Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: Z9JA4BETbxuoqYW0dkxZOkNsscIe/iDe9VKsGk4R9No=)
3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:81:4b:16:ee:6f:03:a3:83:02:02:33:db:16:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: May 8 04:00:42 2025 GMT
Not After : May 9 04:00:42 2025 GMT
Subject: CN=d359d695e2465e2ac91f99cd5d7d522ffaea96eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:54:76:2f:14:23:11:9f:c1:a1:1a:d7:2e:ba:
99:0a:96:76:1d:70:c5:92:81:51:17:af:8b:88:ae:
e8:3f:97:f7:0e:b8:17:fd:73:95:cb:4a:5e:d7:37:
f9:6b:e0:57:15:23:56:34:7b:b8:61:1b:fb:fd:f0:
6a:0d:5a:60:6e:cc:f6:51:e7:97:21:04:89:46:d4:
fb:44:88:4a:c2:bc:d5:1a:6c:72:d6:eb:a0:3d:85:
6d:3a:3a:3c:e8:36:88:7f:f9:27:c9:31:43:ae:ba:
71:32:18:29:99:e1:d2:0f:7a:67:fa:64:d0:17:d2:
c4:7c:81:6c:6e:15:4c:9d:a5:62:59:bd:24:94:de:
1c:73:6e:ea:be:0b:2c:e1:16:79:38:ea:ee:5a:c0:
69:44:33:7a:17:38:9b:83:8f:aa:b4:f6:ba:7d:eb:
ab:b6:75:b6:ef:08:4f:00:0f:34:e2:52:f8:af:c0:
4a:54:3c:8c:c1:e1:b5:4c:31:30:d4:14:04:b6:11:
8b:ef:e8:0b:a9:4d:66:9a:f0:07:31:18:d8:82:5c:
bf:cb:94:dd:5c:b1:81:11:8e:a2:e3:7b:89:eb:75:
96:0d:41:f5:d0:52:63:67:66:f7:98:f0:08:a3:cc:
7b:b4:da:e9:91:e7:34:06:c6:e7:4b:9f:1e:f9:a7:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:59:D6:95:E2:46:5E:2A:C9:1F:99:CD:5D:7D:52:2F:FA:EA:96:EB
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:91:91:96:4e:4e:66:e7:ed:7d:b6:00:e7:ed:66:cb:bb:07:
33:12:32:fd:52:ee:aa:17:29:66:92:bc:7b:27:df:87:e5:79:
32:da:c6:6a:c3:d0:be:7d:49:b0:d1:fc:ac:93:71:20:43:fe:
d5:c1:2e:09:24:92:38:fd:d3:f3:fe:f3:ee:d7:a5:ef:7c:f8:
dc:96:77:bf:9c:8c:2a:63:28:72:02:8d:b6:83:d4:3d:52:a3:
14:ec:83:ed:30:fe:2c:81:50:11:2f:d6:81:3a:60:b5:e3:9a:
89:7f:d9:2c:2f:b3:66:13:69:1d:68:96:a9:ec:e8:f4:4b:64:
d3:5b:ae:14:55:8c:c3:76:84:f9:83:7b:c9:61:f5:b1:1d:08:
02:ac:57:ba:24:ac:32:27:67:9a:5a:f1:ae:a3:65:a9:41:50:
93:43:bb:20:d7:24:a1:24:1a:0b:2b:c5:d3:6d:8a:ca:96:aa:
ff:bd:74:9f:9a:e9:63:43:91:e6:f0:ba:d4:72:9a:3c:9f:a2:
a5:37:4d:1d:30:db:cf:53:a3:6c:5c:f2:a4:9a:ba:69:ed:27:
f7:d8:7a:c5:ca:3d:ee:58:c8:0a:94:d2:d3:4f:6b:b3:7b:cb:
eb:32:61:6c:cc:6c:e1:8f:38:09:4f:c5:ef:ec:34:76:04:12:
81:10:47:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:54:25 2025 by rpki-client