Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier: MJXHIbhkN7kjt9+v3wEHOEJ6FAnbh5I9YLZT1lp76WY=
Subject key identifier: 35:6C:3B:DF:27:11:C7:48:16:BF:56:96:CE:E9:8B:70:BB:DD:EF:EE
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial: 0196B3D85C999816942101628116A8FD53DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number: 0374
Signing time: Fri 09 May 2025 07:00:23 +0000
Manifest this update: Fri 09 May 2025 07:00:23 +0000
Manifest next update: Sat 10 May 2025 07:00:23 +0000
Files and hashes: 1: f-wF0yIlDOHaFqLViWnFWeP4B9o.roa (hash: 8olsSb6V441J0mOtJjve8qF0Z7IUWgXwJVtuxOxK2Bg=)
2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: za2qUEK9dVeexjGhzZHDBw1JbsSOfV2ESHJk/2L/olw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:5c:99:98:16:94:21:01:62:81:16:a8:fd:53:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Validity
Not Before: May 9 07:00:23 2025 GMT
Not After : May 10 07:00:23 2025 GMT
Subject: CN=356c3bdf2711c74816bf5696cee98b70bbddefee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:be:27:42:9f:39:21:eb:17:da:8b:4f:77:
71:05:93:c4:b0:18:21:af:1c:f2:38:2c:03:56:d4:
2d:9e:97:06:ff:b8:e0:1e:7c:ac:7d:f5:47:14:f3:
c5:d8:8e:16:0d:eb:1d:76:e1:11:c0:7a:b2:c6:0b:
5f:d1:6e:82:81:f7:b7:3d:38:39:7d:c7:8e:98:f4:
de:97:2e:d5:bc:19:16:ae:ba:e4:68:66:f9:8a:25:
03:da:41:b6:99:01:5d:14:a5:1b:8d:69:25:96:40:
8d:af:f3:cf:c9:38:96:47:d5:73:26:bf:a7:56:81:
e9:18:15:f2:64:ce:8d:17:9b:0d:a4:c3:f5:7a:5d:
87:38:55:5f:7d:25:90:f1:55:88:68:b9:ba:f6:fe:
f3:43:7a:58:1a:6c:6d:0e:61:f2:6a:c5:93:79:12:
b3:72:6f:74:03:bb:07:b6:41:35:a9:69:21:3d:3b:
d2:47:48:6a:6c:73:1d:ca:9e:4e:c7:f7:c2:67:f2:
61:90:60:13:92:70:be:e8:25:1d:a6:1d:98:c5:67:
d3:fd:cb:bd:64:78:d5:4f:3c:4c:30:00:a2:63:c7:
31:d6:47:8c:6e:26:45:ea:46:4e:b4:64:00:04:50:
14:96:4c:5a:6b:19:2b:12:6c:cf:76:51:76:6c:5f:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6C:3B:DF:27:11:C7:48:16:BF:56:96:CE:E9:8B:70:BB:DD:EF:EE
X509v3 Authority Key Identifier:
keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e1:0c:c0:91:0b:f6:c9:59:55:d0:33:f9:70:7e:4d:7f:44:
24:b8:f1:b3:d6:74:ff:4a:d8:e1:f6:66:70:71:22:b6:b3:c6:
20:99:35:ab:79:34:3a:07:30:66:2d:68:ae:07:d0:a6:b7:a8:
3a:5b:09:df:33:6b:02:92:64:89:18:f1:f2:71:4c:24:1d:9c:
b9:e2:08:c0:dd:38:1a:37:d1:9c:d7:94:06:19:71:7f:a3:2a:
ea:4b:77:e4:b9:80:04:41:8f:7b:0f:95:c9:08:7f:a4:32:7e:
61:a0:41:3e:da:92:49:07:ee:91:91:5a:83:6f:dd:89:10:49:
29:6f:9d:ce:62:9d:02:e7:cd:de:18:fa:d0:4e:3e:a2:b8:c5:
2e:10:64:da:66:bb:d0:f1:4d:b0:7f:7c:ba:7b:df:8b:89:fb:
06:a2:c1:82:94:97:4c:d4:23:61:b3:36:43:5c:36:b8:0d:da:
c4:3c:7d:11:53:2b:05:9a:05:be:e8:6e:1a:85:8b:92:39:a2:
13:4b:d3:72:aa:bb:df:ca:af:2c:48:54:22:3b:f6:ee:99:27:
36:1d:32:3c:70:ed:56:da:95:1a:25:fe:6c:05:35:ea:90:a8:
ae:d1:95:b3:e2:57:78:ee:51:47:71:1d:28:ec:ca:df:4a:20:
56:8c:27:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:47:49 2025 by rpki-client