Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: FU5w5PxhRhslSHMkmcXhgBb5Dp4wmyCyZMuoSyDn0U8=
Subject key identifier: 67:C9:C3:2F:ED:5F:E1:55:A5:DC:64:02:1B:37:8E:98:B3:F7:28:66
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 0196BBC8E9F08D74A93865A5C85DC9248E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0941
Signing time: Sat 10 May 2025 20:00:28 +0000
Manifest this update: Sat 10 May 2025 20:00:28 +0000
Manifest next update: Sun 11 May 2025 20:00:28 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: skyNBcXDIiZAA7WKY70h0ThBD9TpVKrK5ekZs8bOGZw=)
2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:e9:f0:8d:74:a9:38:65:a5:c8:5d:c9:24:8e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: May 10 20:00:28 2025 GMT
Not After : May 11 20:00:28 2025 GMT
Subject: CN=67c9c32fed5fe155a5dc64021b378e98b3f72866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:38:d7:c2:fc:a6:97:dc:7d:9d:4f:cd:e7:
99:db:ef:42:e8:7b:6f:45:3a:fd:3a:b4:60:c0:cd:
ba:92:89:c8:a4:09:01:76:cf:f0:de:2a:6c:01:66:
bc:c5:d6:3b:5b:ba:79:7c:4c:24:a8:d4:47:10:27:
26:f6:68:5c:93:7a:b9:ca:bb:15:b3:6d:d9:0e:6c:
bf:66:96:25:07:57:d8:b7:16:67:d7:d7:f8:ed:0f:
b1:a7:90:1e:50:98:f6:22:be:95:51:6d:3c:97:9c:
b8:87:d7:0f:72:bb:0c:69:73:12:49:86:b7:82:71:
a4:83:ae:fc:a0:24:a6:0b:d5:8a:ad:38:a0:81:27:
11:80:ed:f3:c7:61:68:ce:41:9d:d3:ea:a1:8b:1e:
15:3c:97:9f:5e:0d:50:a2:1d:54:6e:92:29:07:be:
32:4c:a5:b9:08:d6:01:da:93:e6:51:7e:2f:7c:f0:
86:77:88:6a:7f:a0:b3:c9:fb:5e:6e:1f:b0:25:02:
08:12:12:ca:b7:19:e4:e2:79:42:98:ff:a3:85:c3:
0b:15:0b:db:77:2a:06:f1:54:66:3b:80:98:51:eb:
eb:93:d9:b4:1a:e9:88:00:7a:10:90:b0:38:3a:cb:
7c:9b:de:a8:06:64:4a:13:64:29:c6:81:1b:b5:8f:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C9:C3:2F:ED:5F:E1:55:A5:DC:64:02:1B:37:8E:98:B3:F7:28:66
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0c:04:d3:e5:49:1d:e7:0b:04:98:d7:c6:49:90:60:35:e5:
c0:63:41:c5:89:b4:c2:09:c6:68:84:e3:b3:19:cf:04:c9:17:
75:97:b4:77:80:14:f3:7c:d1:3a:54:40:10:c8:7d:62:38:bc:
90:4f:9e:74:24:67:99:f8:52:4a:2e:a4:25:57:7e:ca:05:d6:
78:47:79:b9:e9:5d:ce:7e:d5:9a:47:bf:12:c0:7e:bc:fe:74:
ae:aa:27:9c:ed:c4:8c:fd:5d:3a:33:44:0f:e7:6c:eb:89:c1:
cb:3b:99:49:e3:81:3f:42:40:5a:aa:ae:cb:76:f3:65:af:14:
d2:9c:0b:36:b4:70:61:21:7a:11:7f:5f:29:d5:29:5d:68:1a:
16:58:01:0d:e5:2b:dd:e7:57:f5:70:c1:80:59:c5:f5:0b:e5:
6f:99:4f:b0:f8:e7:50:c3:e3:e8:bb:ab:28:9b:a8:62:cc:2d:
1e:af:bf:9d:fc:2e:6b:62:d0:74:08:dc:5f:d6:c5:42:2a:1e:
9e:70:cb:88:51:9b:f2:7e:5c:94:13:43:94:7c:a7:6e:9a:23:
8c:aa:ad:b3:f5:b0:96:7a:3d:3a:14:71:f3:51:fb:d4:59:51:
64:cc:25:e7:6c:65:20:49:65:77:bc:0d:cc:e7:5a:d1:60:5c:
9c:b8:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:12:18 2025 by rpki-client