Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: QtQjU+QpqnbnvRcz0B0CCJ72WXMYlRWxMfoUkckF/U0=
Subject key identifier: F2:C5:49:78:3F:D9:6C:19:F2:9A:69:56:DF:B3:39:B9:5E:56:CC:3A
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 0196A6C1E9137977562C1B64138966ADD1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 0C2E
Signing time: Tue 06 May 2025 18:00:48 +0000
Manifest this update: Tue 06 May 2025 18:00:48 +0000
Manifest next update: Wed 07 May 2025 18:00:48 +0000
Files and hashes: 1: 7YFk8N6RNgx43dYC2zmFe5pT5VA.roa (hash: kblKELjSh5K08VMKP1lM/34cYDL9lz+wfqW+UgEqxtc=)
2: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: OOIZhu9QB/M+L9FXPinc1/MsP6yFl+HGCxLbkmwPLfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c1:e9:13:79:77:56:2c:1b:64:13:89:66:ad:d1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: May 6 18:00:48 2025 GMT
Not After : May 7 18:00:48 2025 GMT
Subject: CN=f2c549783fd96c19f29a6956dfb339b95e56cc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:86:08:42:5d:be:0a:a8:73:14:80:0e:7e:01:
78:18:14:ca:cd:d5:46:d7:64:17:e6:bd:17:39:59:
f1:9f:53:86:dc:33:d9:8e:5f:7e:2f:23:bf:31:b3:
29:f4:41:1f:b9:ce:14:41:06:62:9f:68:19:ea:2a:
4c:7d:71:8a:48:40:bd:12:cd:ec:c1:3e:26:3e:8d:
e5:c6:77:49:b4:96:ad:a0:67:80:99:a5:5c:7b:af:
76:ac:47:a1:d8:ea:94:90:df:05:89:a6:6d:96:0e:
53:96:15:b6:85:4f:3f:33:45:c7:67:d9:bb:09:e6:
6a:e7:7f:5d:b3:9e:7c:87:b0:b1:62:d5:76:c4:9d:
6b:3f:5e:ed:a8:63:04:81:e3:c5:77:83:54:14:1a:
2e:1d:ca:19:36:36:78:75:f5:a7:9a:7f:bf:7c:73:
af:8b:e1:9a:3a:21:ae:7a:c3:67:90:37:a9:39:86:
58:4a:54:c8:8a:9d:11:44:9a:4a:95:0a:22:f2:2f:
35:57:42:13:bd:90:43:2f:4e:42:0f:34:cd:83:19:
a5:f1:c8:7c:01:29:d2:c0:57:55:16:c5:45:ad:e9:
22:d3:5c:e2:8a:2f:53:d0:b7:ad:94:64:40:fa:66:
b2:a9:37:89:15:f6:2e:2b:26:e0:72:4f:5d:af:5c:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C5:49:78:3F:D9:6C:19:F2:9A:69:56:DF:B3:39:B9:5E:56:CC:3A
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:76:ee:ec:e6:2f:ed:cc:b9:0e:f9:fc:07:36:dd:d0:f8:16:
0e:06:a1:c9:07:85:54:28:b4:b5:ce:f8:32:19:1a:34:9d:4e:
06:00:a9:ef:27:54:5f:b8:e9:7c:9d:38:0b:6f:0e:40:02:4b:
5b:fc:e1:c1:98:58:41:19:1f:3c:b2:8b:dd:61:44:59:98:5a:
d6:d6:f2:e0:f7:fa:2e:50:bd:97:d1:de:03:d1:96:b4:88:09:
f4:08:8f:ec:ed:6d:e9:d8:49:15:a2:72:b7:f0:89:b0:8b:e0:
49:ea:e8:05:a3:68:95:fe:26:cd:62:fb:9d:26:99:b9:c2:9e:
d7:78:83:c1:00:ed:54:49:00:9e:7d:e7:44:c1:e9:eb:21:77:
05:57:9d:a2:01:4b:3a:8e:4f:8c:b3:8e:cb:8a:0f:2b:4e:a1:
41:19:d3:aa:21:68:ca:8e:61:c5:c5:79:95:b0:57:39:02:22:
0e:b9:92:0b:f4:28:c0:4a:db:2f:8b:2c:91:9f:5f:97:0f:cd:
7a:ea:ca:64:c2:cb:62:b8:45:c7:61:62:8c:02:07:2b:8a:d2:
18:0c:62:4b:0e:d5:ac:50:b5:86:cb:6e:8d:a9:38:b6:19:df:
7b:0e:5e:34:4e:1a:7d:6a:67:c4:ea:ec:29:19:c4:8b:2e:48:
8a:94:40:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:17:55 2025 by rpki-client