Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
File: sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json)
Hash identifier: FK33JmxmFant0wZmw08P+puRXo6uRRfxXnKV0zeOoW0=
Subject key identifier: BD:F4:AA:D5:0B:B5:EB:BA:00:3C:75:E6:35:5E:BD:32:59:BB:A1:88
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial: 0196D06240E67AC76380FE440605369AC303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
Manifest number: 12D1
Signing time: Wed 14 May 2025 20:00:22 +0000
Manifest this update: Wed 14 May 2025 20:00:22 +0000
Manifest next update: Thu 15 May 2025 20:00:22 +0000
Files and hashes: 1: SvV3htVhXEPI7wFXdPP_R5R2jOo.roa (hash: ADbpdowWW8HzIQ0XmIe2lqnPixhQxjU2ME36RexdQ8I=)
2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: YgSOX+LlLBquyuFeYCQCJkFTrOy2flxkYeyLGmwo4c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:62:40:e6:7a:c7:63:80:fe:44:06:05:36:9a:c3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Validity
Not Before: May 14 20:00:22 2025 GMT
Not After : May 15 20:00:22 2025 GMT
Subject: CN=bdf4aad50bb5ebba003c75e6355ebd3259bba188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:99:dd:ff:fd:69:57:d9:3e:c4:97:f0:db:
7c:1d:d4:ec:d3:68:34:a8:e5:88:db:d8:74:f6:d1:
66:44:0e:f2:e8:5c:23:ac:57:d7:bf:5e:e2:12:4a:
f7:f3:38:19:89:ce:f4:b7:c4:53:b2:4d:a0:8a:05:
c3:49:07:a0:cc:68:ab:f1:47:3a:a4:ef:48:3a:15:
62:6e:f8:59:31:c7:3d:8f:cb:da:b9:32:01:ea:f3:
4d:05:b5:4f:c3:22:48:bc:1c:9a:d5:80:34:3b:5d:
79:e0:cd:9a:66:55:43:06:70:b1:6b:77:6b:fd:9a:
3d:86:5f:d2:74:bc:99:a0:4d:57:7d:cc:55:23:e8:
a5:b1:1c:f6:ea:bd:b0:62:7e:a5:28:e1:83:c1:0a:
49:b4:31:de:4f:96:7d:fe:19:94:7e:99:0a:9d:c3:
0c:96:45:e2:33:55:76:4d:7d:15:20:44:ef:54:88:
23:69:3d:3e:90:ab:55:4b:51:99:0b:32:2c:b3:14:
df:9a:73:08:40:83:ac:13:2b:b0:ce:84:36:c2:55:
4d:db:88:9e:fa:f6:25:8a:a3:72:a6:4a:4f:d6:2c:
8d:4b:29:1f:63:0e:fc:66:4e:9e:0b:9d:2a:6d:96:
26:e9:b3:3a:69:c6:51:bf:b8:75:52:f0:fe:69:8a:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:AA:D5:0B:B5:EB:BA:00:3C:75:E6:35:5E:BD:32:59:BB:A1:88
X509v3 Authority Key Identifier:
keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d1:b7:7c:a4:60:b2:98:ca:ed:43:7b:5a:61:f0:9f:13:db:
98:5e:31:56:cd:8b:ed:0d:a2:79:01:94:0a:e5:32:8c:ac:55:
75:1a:49:32:17:3d:5a:2e:a1:c1:d0:2a:0a:45:94:cb:d0:13:
bc:76:c2:7f:58:99:db:0a:54:cd:30:20:54:1a:a5:bd:b8:a0:
cf:89:2f:6c:e8:f7:a6:8f:c7:27:15:b5:0a:a9:53:c7:60:e4:
9c:75:fd:88:fc:39:f7:af:7e:92:25:0f:56:98:01:91:34:5d:
06:fe:8c:c0:3a:03:eb:ed:69:bf:1a:3a:70:7c:72:01:89:24:
5d:62:3a:9b:29:7c:2d:46:70:a5:35:24:d4:8a:27:7f:98:83:
4e:60:de:7b:93:f8:ca:f1:ac:07:73:64:83:c8:ea:5e:ae:0e:
95:ec:08:63:bf:d7:ac:f6:fe:d5:ff:7c:56:43:20:50:07:bd:
53:16:70:28:63:fb:a9:a4:6b:6e:60:c1:93:c5:3a:52:28:4c:
18:1c:e8:01:09:47:20:f9:fd:d4:ed:b1:26:c9:de:83:8e:a2:
1d:d2:e7:1a:2d:fb:80:d2:0a:6c:10:13:13:88:6b:67:0a:31:
25:3d:b1:8b:4b:b5:b6:a2:6d:d1:f9:ed:1e:43:53:0e:54:4a:
fe:54:93:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:01:00 2025 by rpki-client