Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: iNmZhZnj1e8sB5iT4OUwx/m9R7g+GwUDz4T/AD2ma2k=
Subject key identifier: 32:EA:B2:98:7F:07:0E:25:68:D5:CC:84:0D:63:35:C1:E6:D7:E0:9C
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 0196BA7FB9F03AFEC1B1AA1837363D263F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 11F4
Signing time: Sat 10 May 2025 14:00:54 +0000
Manifest this update: Sat 10 May 2025 14:00:54 +0000
Manifest next update: Sun 11 May 2025 14:00:54 +0000
Files and hashes: 1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: NNyasfXsIhCQD3XfRTrxiz/ZUnL/TVrkaqubq5WKj+M=)
2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:b9:f0:3a:fe:c1:b1:aa:18:37:36:3d:26:3f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: May 10 14:00:54 2025 GMT
Not After : May 11 14:00:54 2025 GMT
Subject: CN=32eab2987f070e2568d5cc840d6335c1e6d7e09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:3e:33:a0:ed:34:ad:6e:e7:5a:b9:0e:54:
c0:8d:05:96:4b:29:0b:46:f9:1a:d5:13:92:2b:f9:
0e:50:6d:be:27:af:cd:b5:01:0e:7b:3c:d0:a5:ae:
eb:13:80:c0:4a:ab:8a:17:45:ab:8c:58:4b:df:8a:
94:17:65:b9:1a:1f:f9:5e:09:78:ba:fd:8f:36:0b:
92:e4:45:f5:c3:39:c5:93:a4:af:d6:d5:0e:84:20:
9d:e7:b6:9c:46:8c:c7:96:2d:30:13:1e:dc:fe:0c:
8b:45:a5:3d:54:5e:2b:f0:eb:33:82:ad:ea:c9:94:
1a:d8:9a:a0:5a:9b:75:a6:0f:a4:6b:75:f8:cb:6c:
c3:71:84:d4:25:89:50:1d:14:03:18:c6:12:20:98:
a1:0f:27:13:7c:88:14:a3:30:49:c3:b4:fa:e5:20:
45:24:09:74:8e:a6:00:ce:65:62:09:8a:8e:99:78:
71:e6:46:64:4f:9a:e0:d6:1a:c5:28:23:a3:cc:5d:
1a:19:e9:d2:76:85:ee:a0:c8:91:05:ed:ab:de:c9:
e2:82:1a:0c:24:b9:1b:83:21:f2:d8:33:0c:ba:da:
76:a8:d8:84:b1:74:c1:0c:5b:7d:7c:ac:3f:2a:cc:
85:2c:79:40:f4:c1:f8:5e:f2:2a:56:5f:8e:3f:23:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EA:B2:98:7F:07:0E:25:68:D5:CC:84:0D:63:35:C1:E6:D7:E0:9C
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:12:e4:50:08:f6:df:bd:50:80:85:78:00:da:0d:11:7f:df:
1f:00:5b:20:94:fa:c0:0c:de:38:4c:a7:b0:13:1b:a9:2e:40:
fd:4c:9c:ee:cb:cd:22:ba:34:11:41:86:73:33:1d:2c:45:ab:
82:b4:02:f8:86:a8:f3:35:c9:fa:15:56:65:d9:31:22:80:a3:
e6:e5:62:de:8c:f4:02:7d:f1:61:34:70:07:71:c5:c2:4f:42:
fc:31:90:8a:c6:4c:0f:e4:fb:62:ce:aa:6e:88:20:bf:96:0d:
ca:df:99:67:8e:a1:d5:ed:1a:15:ef:6c:1b:e4:76:84:98:a1:
b4:2b:1a:b4:40:8b:a8:ff:a4:f7:92:85:6e:79:27:11:a2:b4:
de:bd:76:49:7d:7e:77:65:e1:52:06:f4:f4:9a:d2:ad:c8:86:
f9:67:65:d9:32:cd:56:47:87:0a:b3:86:0d:7e:68:58:de:3d:
e4:11:ab:7f:2c:d7:25:f7:f4:e1:f3:a8:63:59:cf:e8:1f:71:
d0:e8:6b:e8:1b:ab:c6:bf:ba:64:6a:6e:d9:bb:45:0c:03:a9:
0d:40:7e:bd:92:c2:9a:6a:81:ec:16:1d:db:a9:5b:33:29:2f:
e8:67:1f:fd:d6:b7:cd:4e:74:e4:00:57:38:8b:6f:33:df:05:
d4:93:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:36:36 2025 by rpki-client