Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier: 4vty2/Z9xvn3fmpU6acOou7FWHVsOzOu+ew2ZlTE1Xo=
Subject key identifier: 3D:A0:7E:CB:6B:36:2B:16:E9:DF:04:27:B5:E7:79:DD:4F:27:D7:1E
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 0196C1CAE8A7CE61AAB859F051556D2359FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number: 0EAB
Signing time: Mon 12 May 2025 00:00:22 +0000
Manifest this update: Mon 12 May 2025 00:00:22 +0000
Manifest next update: Tue 13 May 2025 00:00:22 +0000
Files and hashes: 1: KOQetqGXnr-_jcGLAAJM_EFGncg.roa (hash: J0d7xN2IM4WNzPNloLfdHQukDngK3dzlCPcUmKT74Iw=)
2: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: W7ytOxe2C1Xo2VYgP1cW7tJ3I8R4DOcO0FvuwLKczAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:e8:a7:ce:61:aa:b8:59:f0:51:55:6d:23:59:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: May 12 00:00:22 2025 GMT
Not After : May 13 00:00:22 2025 GMT
Subject: CN=3da07ecb6b362b16e9df0427b5e779dd4f27d71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:3d:15:0c:41:91:f6:1d:cb:13:bd:95:9a:
f3:93:c5:b2:5a:0f:ce:59:46:0d:94:97:9e:bb:33:
5b:72:58:3c:84:f4:62:97:32:e8:e0:1d:95:30:2f:
4f:f6:e8:9f:b8:90:ef:4e:54:3e:52:1e:c2:46:2e:
9f:ad:5e:b2:c0:a9:74:09:9f:3d:0e:a8:14:96:ad:
a9:38:0e:af:0a:c4:76:f0:f8:45:64:34:b0:47:fb:
63:d6:79:c8:77:f7:77:77:11:8f:5e:37:6b:41:d9:
aa:94:79:ac:b6:c3:26:9c:b3:77:74:5e:e0:46:8a:
25:07:6a:b0:39:02:83:8f:2b:b9:ea:cb:3f:97:d9:
e2:8d:23:c9:11:fa:57:9c:77:9d:36:a0:c4:cb:33:
2a:55:fb:09:47:36:0f:7e:28:a3:85:82:83:11:ef:
53:58:ba:dc:2c:e5:4b:30:75:f4:da:58:bf:79:56:
3f:45:f6:83:70:59:42:ea:40:34:cf:49:ae:2e:0d:
ee:30:6a:d9:c3:9c:e1:d6:77:c4:14:3c:f3:68:51:
c4:ce:7d:26:b5:c8:bf:f6:41:6b:e8:b4:16:41:4c:
41:e1:60:60:42:25:e1:5f:ec:52:90:51:5d:72:54:
1d:ea:37:8c:cd:b6:ba:75:6a:fc:e0:de:3b:3e:8b:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A0:7E:CB:6B:36:2B:16:E9:DF:04:27:B5:E7:79:DD:4F:27:D7:1E
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c0:44:48:8a:fc:3a:8d:15:de:b5:e7:7b:ee:19:92:b3:7d:
9f:c7:c1:83:3e:ad:be:29:23:f5:d1:45:60:03:7c:03:4d:26:
fa:ea:90:b3:9f:71:94:74:e7:11:98:23:24:f1:61:9f:40:b9:
48:31:2e:91:20:d9:9a:b9:06:e0:59:62:a9:80:de:dc:e0:21:
69:1f:01:df:30:57:13:47:58:31:a7:85:42:b5:20:d8:52:27:
52:9c:a0:b5:b0:87:eb:79:01:f6:6b:53:c1:04:87:8d:0d:f0:
5d:1c:b4:75:e2:9b:44:38:32:55:f3:42:94:4e:f8:d4:2a:c9:
31:dc:e3:bc:65:6e:43:c1:b8:f5:f6:25:78:14:f1:60:5f:92:
7c:75:bc:eb:a3:0c:e5:d5:2c:01:a3:1f:06:ce:dc:dd:ad:b8:
46:c7:1b:a0:b7:9b:18:dc:0a:11:a1:af:36:15:91:ba:44:1a:
ae:2d:be:12:0d:98:b5:8b:8a:25:06:e2:0c:b7:4a:5e:9e:e9:
e1:2e:06:a5:96:c2:9f:57:ca:46:6b:8b:7b:7c:4f:ed:e4:8e:
e4:94:a8:71:fc:74:1e:c5:08:fd:46:d8:d0:99:c5:84:2d:be:
f1:81:1b:aa:38:ca:55:82:65:46:9e:11:84:3e:42:8e:aa:c7:
5c:1f:e6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:32:18 2025 by rpki-client