Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: gDjURFqAYANPLoHMp0gFsbh2kghSkB0RhfcncHijnNY=
Subject key identifier: 53:09:8E:C1:09:F0:90:FC:61:72:06:84:27:AB:91:22:7F:1F:57:5C
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 0196A23FDCC70190B6707B646B475A9D43DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 10A7
Signing time: Mon 05 May 2025 21:00:16 +0000
Manifest this update: Mon 05 May 2025 21:00:16 +0000
Manifest next update: Tue 06 May 2025 21:00:16 +0000
Files and hashes: 1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=)
2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: 8R8o+hg2PXI+DWaoyrz3VYi8Z9bvVLJJovn9dJrYujQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:3f:dc:c7:01:90:b6:70:7b:64:6b:47:5a:9d:43:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: May 5 21:00:16 2025 GMT
Not After : May 6 21:00:16 2025 GMT
Subject: CN=53098ec109f090fc6172068427ab91227f1f575c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:66:19:b9:4c:23:c6:61:5c:9d:71:a8:26:
27:26:be:a2:4a:68:94:56:99:7b:22:33:7b:84:ec:
7f:bb:ec:9a:c6:e8:16:dd:29:bb:83:2c:aa:8d:97:
6c:f2:91:b2:e2:ff:da:9e:32:35:de:9f:8f:c3:56:
b6:51:fa:ae:8d:cd:56:ef:62:32:51:44:e7:5d:77:
ca:b8:14:de:a2:17:b1:99:dd:83:0f:6f:c6:df:2a:
11:e6:ee:cc:2c:6b:dc:bb:97:94:f3:2f:79:70:6a:
a8:b8:d4:65:d8:54:b8:ce:7d:b8:02:07:3a:a6:0a:
c2:cd:62:d0:89:c0:45:0d:eb:38:7e:cb:e1:9a:e5:
b6:c4:81:a7:88:d9:1a:55:26:45:f1:10:0a:3c:8a:
28:2a:fe:4c:a5:8b:3d:fc:a5:08:6b:4d:20:f4:ec:
7d:1a:f2:f4:9a:55:db:40:f3:8e:af:01:23:d1:3e:
bf:66:12:f9:79:2b:9e:a8:19:a6:a5:db:35:53:f2:
11:04:67:38:b0:35:46:47:56:94:17:85:b1:65:b6:
7c:0a:c8:3a:f1:ff:b0:cc:8c:27:5a:ac:bd:e3:e8:
a7:b1:7b:e8:1f:e6:e1:91:79:e3:40:cd:d8:6a:37:
e4:58:33:20:3b:04:d9:3e:19:cb:f7:d8:b0:1f:f0:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:09:8E:C1:09:F0:90:FC:61:72:06:84:27:AB:91:22:7F:1F:57:5C
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a7:e1:1a:24:90:e3:66:14:56:72:d9:c5:62:4e:f8:ba:b5:
6f:0d:b2:eb:3e:88:2f:6e:50:31:dc:91:fd:55:f1:0f:ea:cb:
5d:e9:fd:ad:9b:66:7c:10:45:b2:88:22:cc:51:34:af:f3:e0:
ce:dc:0b:e3:1d:5c:77:37:de:82:79:0b:ee:af:18:40:52:6e:
31:ec:13:32:c3:a0:59:03:f2:d1:4d:20:9a:f4:80:9e:40:20:
87:46:1e:a6:6d:54:e4:10:55:d6:12:4b:39:e7:47:69:51:98:
2c:05:a4:71:f8:18:d6:91:eb:58:15:16:cb:e9:32:13:b3:c5:
1c:c9:ee:32:64:60:42:9d:a1:36:6c:15:eb:ba:fe:76:4a:07:
fa:e4:fd:86:ee:b9:90:fa:19:12:fb:d5:53:9e:1c:ce:02:55:
60:9f:ff:95:3e:5c:c2:f0:c1:cf:ab:b8:af:d1:63:55:3e:e4:
db:d3:fd:06:07:d2:bc:32:e8:c3:5b:7c:ec:f5:08:50:1c:66:
ef:de:f9:62:41:34:59:40:e0:51:15:91:ff:bd:8a:b2:4d:d8:
0a:5e:77:59:38:c9:25:22:2f:c9:21:e7:24:e7:b8:7f:67:9d:
7c:e8:1c:70:71:87:35:df:67:b3:e7:da:2f:20:1b:af:18:52:
e9:e5:e0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:17:31 2025 by rpki-client