Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
File: sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft (raw, json)
Hash identifier: GlqRN4URhAbIIM/5kAHdaOaRFKdsmbHHJnSPGmZZKSs=
Subject key identifier: F2:F0:F8:17:1A:71:BB:06:C6:00:0C:2F:5B:F3:EF:2E:40:3C:AF:EA
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 0196C04AFB8D1C1540FCDCA751637D73D6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
Manifest number: 0BFE
Signing time: Sun 11 May 2025 17:01:01 +0000
Manifest this update: Sun 11 May 2025 17:01:01 +0000
Manifest next update: Mon 12 May 2025 17:01:01 +0000
Files and hashes: 1: ANXnYTqKTr9oV5Alzmy-G7Z1jr4.roa (hash: Gt/XD54HF++DivzLiOI9eyUVujLtao+p/hKCG9urNc0=)
2: C7MhaPZbslU0VnJ9f8aWGwMPQ1s.roa (hash: N2sOMWlDByUi7A5K2JVccMDH9oIH2ZkyI/wL4WYAlVY=)
3: sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl (hash: NZzwn1km54h/kK53c5oYiWyiEgXncSN7zRQCJkO4dAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:fb:8d:1c:15:40:fc:dc:a7:51:63:7d:73:d6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: May 11 17:01:01 2025 GMT
Not After : May 12 17:01:01 2025 GMT
Subject: CN=f2f0f8171a71bb06c6000c2f5bf3ef2e403cafea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:81:f9:7e:70:7f:ac:6c:a6:2d:cc:88:9f:79:
b7:75:47:e6:e1:ae:ed:85:e6:4f:e3:4e:25:47:56:
22:a3:fe:18:a3:b8:32:a9:57:96:22:a0:97:55:7f:
c2:a7:86:dd:59:6f:9f:c3:fa:76:9c:fb:4c:5e:24:
f8:7d:8a:92:bc:c3:eb:c0:62:c1:7f:8a:0e:8e:07:
d8:d5:07:0e:97:10:e1:78:75:61:47:a0:4e:28:cc:
00:b1:9f:45:b8:af:cd:a6:ee:f5:ed:04:53:46:ad:
6c:02:b7:bd:4c:86:dc:7b:3d:f7:bc:9e:fb:da:36:
78:f0:c7:0c:e7:c8:31:4b:94:a4:cc:5a:c6:20:a2:
72:93:24:78:30:51:47:16:27:df:66:60:f3:b5:e0:
51:c9:0d:32:ac:ec:e7:27:d1:9a:6b:15:11:b1:4a:
2b:99:76:77:a0:16:48:fd:3e:67:74:a1:f5:08:ae:
90:8b:75:c5:a7:78:ce:07:fe:61:77:3b:9c:56:0a:
1c:c5:ae:b2:d5:90:e0:f2:eb:61:95:0c:ed:a8:34:
e5:59:67:6e:03:ec:7a:6a:48:18:e7:9c:76:ed:68:
ea:52:42:01:25:cb:09:ec:bd:53:d9:89:36:cf:b9:
cd:63:ec:11:bc:e0:67:2d:03:d4:7d:3d:e5:e2:27:
93:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F0:F8:17:1A:71:BB:06:C6:00:0C:2F:5B:F3:EF:2E:40:3C:AF:EA
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c0:5f:3e:63:32:d8:0f:f5:1f:aa:3d:34:7d:e3:cb:2d:bd:
45:ae:be:25:98:72:85:68:92:83:80:2b:08:ef:4a:46:f0:22:
56:1e:ab:ef:3e:68:6f:59:1a:74:c1:b7:b4:9d:db:59:43:ff:
53:05:cb:a8:7a:8c:82:98:ae:96:16:f1:14:65:7d:82:47:f5:
67:d3:e8:4b:31:62:8f:a4:c3:73:d1:98:7b:96:ec:36:3b:6c:
9b:3b:5e:42:39:95:5f:52:dd:21:4b:4e:08:ed:30:e8:ea:f2:
60:08:32:2c:de:54:f7:35:a8:e3:44:76:b6:2d:d9:33:6b:08:
24:f4:c3:4c:ac:ec:b9:1a:4c:12:aa:1d:8c:a2:e5:f4:77:2c:
99:35:cf:67:d8:49:e9:7e:4c:b5:9a:44:45:4c:63:0e:f6:46:
42:31:98:3b:54:30:44:e5:02:2c:1f:99:02:2c:19:33:8d:40:
8e:f4:fc:37:0b:3f:fa:5b:b6:be:a9:72:68:60:3b:7b:a0:ca:
5d:9f:0e:7e:66:3d:58:93:7b:02:f8:36:c6:7c:5f:5c:42:55:
ca:ce:e6:0a:97:cc:f8:cd:dc:20:10:98:32:60:9c:84:b6:bc:
b6:34:62:aa:2b:33:f4:1d:7a:83:c9:ef:e8:6a:f6:a8:41:5a:
27:38:b3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:51:25 2025 by rpki-client