Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: yBXmS+i27RoDBf5pI208IJ30EAONWzhl+ctplvqvigQ=
Subject key identifier: 5B:18:96:0C:16:B4:57:31:67:C3:83:85:25:EF:C0:E6:FE:B5:B8:9D
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 0196C5DE8CE9D621BC60706BE99575FA5877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 0231
Signing time: Mon 12 May 2025 19:00:18 +0000
Manifest this update: Mon 12 May 2025 19:00:18 +0000
Manifest next update: Tue 13 May 2025 19:00:18 +0000
Files and hashes: 1: cutf0Yk4GqOLANVUSKcxrSdUxug.roa (hash: Q8Q4U3gD48zecWRmDv6Pw0MZwpRvb60BHrR0/Xs/Hmo=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: vM0SBVvbeCvWzT/p8nNRlLlit/q4ReKWFwfUhWPVI7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:8c:e9:d6:21:bc:60:70:6b:e9:95:75:fa:58:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: May 12 19:00:18 2025 GMT
Not After : May 13 19:00:18 2025 GMT
Subject: CN=5b18960c16b4573167c3838525efc0e6feb5b89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:d6:0c:f1:29:46:ba:4e:2e:8c:b5:96:35:
0f:79:72:25:82:8e:4a:4b:1c:ed:fe:2a:5a:b6:76:
79:e7:99:e9:20:0a:fa:0b:fa:32:75:68:52:21:da:
dd:8f:f5:07:e1:af:ad:5f:db:fc:92:0a:18:31:dc:
30:1b:0e:4f:55:d1:18:c0:35:e1:c4:08:f9:fd:80:
bb:e4:15:ee:9e:5e:a9:8c:aa:5d:27:01:48:6c:bb:
8b:a2:de:47:91:a9:01:14:d8:92:07:74:62:07:79:
7b:0c:79:1d:cc:19:c8:3b:89:d3:14:23:cf:ae:c7:
dd:d0:ba:b1:3e:e4:e3:be:a8:80:11:36:65:05:b9:
72:a6:f4:37:f0:17:54:43:55:5a:60:eb:a6:e3:c9:
99:79:58:52:ea:d7:46:34:69:11:9e:92:57:09:2b:
b7:ed:15:b1:42:71:b5:e9:1a:75:47:4e:fb:56:67:
d4:80:b8:97:81:7a:e9:21:7c:86:bd:0b:85:33:a4:
f1:13:60:1c:36:61:e8:63:83:63:50:74:92:ce:cf:
ba:76:20:30:6f:5e:54:d4:37:0a:9b:d7:a6:6c:1b:
99:27:70:bf:a3:72:9a:48:f2:9e:6f:5c:43:d9:71:
b1:85:41:03:c6:39:25:12:72:a4:97:3e:84:b9:78:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:18:96:0C:16:B4:57:31:67:C3:83:85:25:EF:C0:E6:FE:B5:B8:9D
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:97:27:4f:1e:7e:87:3b:69:a0:87:8f:44:31:8e:47:1d:5f:
ce:17:a3:cf:c6:9c:d1:67:fe:34:e8:5d:a6:61:e4:c8:6e:01:
f1:cd:1c:fc:53:42:53:97:ee:5f:34:a7:9c:8d:5c:b5:3c:5c:
96:90:1e:a4:ab:f8:c0:66:63:57:3a:79:34:c1:8a:23:b9:6e:
57:1a:e6:dc:28:46:a2:64:3b:2f:81:5b:df:4d:af:be:25:ef:
ff:d5:50:bd:4a:3e:9d:2e:36:1e:cf:89:0c:8b:eb:f9:7d:fe:
23:e9:19:e0:44:0c:bc:88:a0:3d:24:04:3a:0e:14:27:53:24:
70:17:51:c3:c3:48:7b:86:90:f1:73:d2:2a:1b:9a:fd:03:cd:
1d:66:32:41:fb:2c:ef:a3:94:5d:b1:79:ba:93:6f:de:de:98:
03:ce:f5:ca:0b:6c:af:aa:de:03:14:f9:e5:a2:c5:31:26:9e:
a8:d4:c4:e4:38:0f:00:71:17:17:8a:15:f5:a9:5e:fc:d5:c5:
69:66:25:18:79:fa:5a:00:b2:0d:d3:95:5a:78:da:eb:ab:57:
92:f8:71:c2:4c:6b:15:8b:9a:d7:f2:a7:86:27:ec:cb:63:e0:
6e:0d:a4:36:4d:50:7f:47:78:dd:2d:03:73:d7:98:cc:0d:6c:
d9:be:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:33:44 2025 by rpki-client