Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
File: sszaHFSHy5ONV-phzC1i0xBw21E.mft (raw, json)
Hash identifier: WByKywNEwMj3KHGBKsroKBco/Mxl2o1O4HbvWofAdZw=
Subject key identifier: EA:10:2D:32:29:E2:4C:E5:75:63:E4:1B:5B:E4:7E:A5:E2:64:90:F0
Authority key identifier: B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
Certificate issuer: /CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Certificate serial: 0196C3147BE08B3020DBC046BDB6E4340048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
Manifest number: 0B3E
Signing time: Mon 12 May 2025 06:00:21 +0000
Manifest this update: Mon 12 May 2025 06:00:21 +0000
Manifest next update: Tue 13 May 2025 06:00:21 +0000
Files and hashes: 1: 3_xmC1ho9_8ZqNCvSg_4Ci-eALc.roa (hash: F7LfywH9mxXY2KxRJjRgggVLiwyV5wwnZqXcnTIZ+/Y=)
2: sszaHFSHy5ONV-phzC1i0xBw21E.crl (hash: DK0QFGhRhGLoEhLsqwKJ2lTdEsffFDb5mIigsAi0E2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:7b:e0:8b:30:20:db:c0:46:bd:b6:e4:34:00:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Validity
Not Before: May 12 06:00:21 2025 GMT
Not After : May 13 06:00:21 2025 GMT
Subject: CN=ea102d3229e24ce57563e41b5be47ea5e26490f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:2f:99:0e:44:6e:7b:b3:54:e7:90:ec:34:
1c:e1:1f:92:28:bc:c4:a3:c8:ca:83:43:cc:dd:04:
2c:6c:3c:29:60:e3:0f:c9:70:d1:ab:10:b4:58:ef:
50:06:f6:5f:4a:3a:c3:a1:aa:fe:52:d6:4a:48:6a:
a9:46:99:c1:c5:d7:27:1f:e0:3f:b5:06:00:93:2a:
a1:47:47:fb:f5:98:a7:a8:c4:00:74:23:11:14:6f:
6a:29:12:16:87:e3:96:c6:a9:13:d7:3c:12:2c:dd:
38:34:0b:8f:79:e3:28:ae:51:51:20:24:b9:d9:bf:
36:5d:4c:c5:68:3a:ba:99:94:40:09:d4:e5:04:13:
be:11:5c:90:01:06:40:7c:82:06:a9:6f:0b:60:39:
9e:86:04:83:40:31:ff:c9:57:2b:ed:c6:1c:bc:75:
cf:d6:06:cb:7f:9b:9a:8c:a9:23:b8:ca:08:2e:0b:
89:21:7d:50:5f:b0:7c:f2:db:cc:62:f0:01:91:b0:
51:10:ee:60:e0:7f:93:72:90:ca:53:bb:34:ec:60:
af:32:bf:2c:2a:bc:89:a7:aa:9b:a5:27:5f:f3:cf:
5b:cf:56:e9:84:38:7a:0c:e9:55:1a:18:4c:20:99:
48:be:53:88:97:7b:c8:8f:03:69:e5:9d:77:b1:78:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:10:2D:32:29:E2:4C:E5:75:63:E4:1B:5B:E4:7E:A5:E2:64:90:F0
X509v3 Authority Key Identifier:
keyid:B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4f:b4:94:20:90:b3:96:b0:92:c4:38:2d:c8:a7:07:1c:22:
16:48:cb:86:ab:5a:c7:8d:20:c1:0e:5d:68:2f:f9:b8:92:e3:
05:bb:e8:3a:69:9d:ae:bf:05:c8:52:6d:c0:43:cc:18:ca:14:
52:03:48:57:2c:40:0e:e0:f6:67:eb:06:a5:2a:5f:94:ff:e8:
d9:c0:e3:50:f6:7b:9a:03:0d:bb:2a:ad:63:29:08:d7:44:15:
89:53:87:9c:e8:7e:bd:53:de:9a:44:df:97:d5:a7:16:66:3f:
40:c2:01:24:b9:6e:29:4a:c3:be:e6:b5:2f:6b:67:14:01:bf:
30:a9:c2:b2:c5:21:dc:2b:f4:3c:07:ac:75:ba:51:c2:10:25:
16:0b:99:9a:9c:ed:6f:a4:25:7d:e1:fb:de:f4:8b:c0:2c:38:
7c:0e:02:3e:45:9e:3f:54:57:bc:06:28:47:4b:05:7f:90:f5:
a0:89:4b:fb:f2:eb:6c:18:c0:8c:fd:ce:49:01:bd:8a:13:0d:
e6:4b:fd:fb:e8:a2:47:82:47:8e:5f:28:41:7d:81:18:ae:ea:
6d:fc:86:17:67:88:8f:f4:59:ca:37:d4:f7:06:7a:e2:3b:8b:
54:b4:d2:c2:50:df:21:cf:94:6d:11:d0:9b:e5:30:39:2c:b0:
96:3a:f8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:43:47 2025 by rpki-client