Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier: gHaY+K+4MBGpi2YLArmTnQeyRv1do2psqMKS3nNHjA0=
Subject key identifier: 47:9A:92:1A:03:41:90:99:8B:A2:BE:D9:A4:F6:E8:17:DF:F9:77:A0
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 0196BC0048298920DEC5ABBEF17B2B74F754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number: 0566
Signing time: Sat 10 May 2025 21:00:57 +0000
Manifest this update: Sat 10 May 2025 21:00:57 +0000
Manifest next update: Sun 11 May 2025 21:00:57 +0000
Files and hashes: 1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=)
2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: ZzdeuI0YSEu2LSc9QRNe/FQiEJVQiioFIZXMryJu9R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:48:29:89:20:de:c5:ab:be:f1:7b:2b:74:f7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: May 10 21:00:57 2025 GMT
Not After : May 11 21:00:57 2025 GMT
Subject: CN=479a921a034190998ba2bed9a4f6e817dff977a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:03:93:1e:b1:53:00:cd:85:ab:e4:10:0b:50:
1c:b7:ea:9b:53:bf:6f:63:81:18:be:47:da:4b:aa:
f2:99:10:50:ec:25:db:02:d3:bc:c0:3a:6f:bb:78:
2f:81:44:d2:65:b2:ea:fe:68:d9:aa:31:1d:1d:74:
c6:d7:86:8e:54:88:f0:e0:81:3f:3e:fc:0b:85:ed:
b5:de:c7:ae:1e:93:f5:ed:6b:cb:b4:75:e8:65:55:
2a:fc:4f:21:c2:1e:ab:b6:29:2b:46:28:ad:61:18:
7e:6f:a2:91:c9:64:64:d3:54:41:e8:55:34:99:e2:
ca:5f:6e:af:d0:b1:f9:82:5e:06:f2:f0:f1:ec:73:
4e:9c:02:a5:fc:3e:f9:d8:0e:47:27:f8:23:f7:91:
90:05:81:e7:cb:6a:b4:0e:29:08:b2:cb:91:e1:2f:
58:42:d8:c8:74:45:18:21:60:b3:e6:84:cd:8b:6a:
02:0d:63:95:23:84:c8:bc:93:f1:ef:ce:31:67:91:
3a:5f:3b:25:1b:07:cb:38:c5:31:92:d8:5d:41:56:
f4:f1:b7:1b:ac:a0:41:aa:37:ba:b4:d5:1d:d4:b5:
e4:20:42:5b:b0:8f:27:16:b2:7f:87:fc:d4:3f:aa:
f1:c6:03:0d:ac:d5:ca:8b:66:2d:4c:53:5f:93:ff:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9A:92:1A:03:41:90:99:8B:A2:BE:D9:A4:F6:E8:17:DF:F9:77:A0
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:01:9e:73:c2:b8:44:88:6d:23:91:a8:e3:c7:f4:94:e8:96:
14:d0:3d:1b:b4:89:10:47:d6:93:56:52:a0:a7:80:45:d3:9b:
e5:08:7d:a3:6c:25:df:87:d4:08:60:2d:27:4d:fb:6b:8e:ce:
c3:cd:c2:7b:ae:e6:06:e4:db:3d:5a:5a:87:69:12:a5:01:00:
b1:65:81:f1:85:11:21:3c:2e:6a:53:57:5c:bc:e6:cc:9b:48:
89:70:e7:a4:e7:4c:bb:00:38:dd:32:d9:2c:5e:7c:7a:4c:be:
8b:9e:77:09:43:88:99:2a:00:5d:44:0e:d2:24:a4:1a:23:c2:
e5:0f:05:47:ac:66:47:e4:b0:29:c8:e4:fd:cb:3d:7e:23:05:
a3:21:84:01:13:f0:27:8e:d1:9e:01:9b:66:8c:dd:2b:00:8a:
47:b3:ee:a5:56:8f:41:e1:d5:b1:d5:38:56:fd:a5:33:fa:cd:
a0:50:fa:f2:3f:33:e4:05:0c:f2:1e:fd:88:02:f7:45:27:98:
78:13:d0:b6:d0:a8:30:fa:74:1a:01:23:2c:2b:70:38:c0:06:
fe:c3:87:99:e3:c3:cf:ab:2a:91:af:fa:3f:ae:75:86:88:29:
de:e9:50:25:ae:de:2b:6a:71:ec:0c:e0:aa:60:47:4b:3a:e1:
2f:9c:2d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:26:23 2025 by rpki-client