Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: CiUr0Zl24zEuXhfXdSjTVilAq7cwL9/en9Iosy+cqR4=
Subject key identifier: 18:78:5D:8A:B5:44:02:A8:2E:04:88:02:8E:9D:7C:09:FA:17:B4:7D
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 01969ED16C8AD771B3DF594BBD4C8AF0478C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 090B
Signing time: Mon 05 May 2025 05:00:47 +0000
Manifest this update: Mon 05 May 2025 05:00:47 +0000
Manifest next update: Tue 06 May 2025 05:00:47 +0000
Files and hashes: 1: Oc5Exwy6ZGrRe3cJEpFcoAoZ8LY.roa (hash: GCIh2gF/E3yjQMebTbwaKQU3aGp4E0TQ+qUjMjQObt4=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: XsAzHUD5D7mooOuiTILgkpHLKJ+pwVrWjo01vGmvXnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:6c:8a:d7:71:b3:df:59:4b:bd:4c:8a:f0:47:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: May 5 05:00:47 2025 GMT
Not After : May 6 05:00:47 2025 GMT
Subject: CN=18785d8ab54402a82e0488028e9d7c09fa17b47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:4b:e5:87:f9:93:62:51:30:82:af:9f:16:
08:2f:0c:20:58:57:15:0d:1d:3f:34:38:d8:8a:c6:
26:93:00:fb:8f:e3:b5:22:8c:81:9c:1a:77:41:13:
cc:9e:f6:06:ce:dc:63:70:1b:c5:e5:7a:4e:ab:32:
e4:03:dd:36:d0:69:f7:ee:50:48:22:e5:41:a3:cd:
14:e9:4a:27:d3:4f:b2:f0:8e:c5:45:c8:fa:69:6d:
4e:fc:07:30:27:02:1f:9b:a1:cf:84:20:a4:d5:e2:
96:56:fb:81:67:fa:96:b1:57:a9:bf:5a:d4:b9:34:
dd:a9:d8:2c:72:fe:d1:7d:0a:9a:c3:7e:e5:bb:88:
ee:ae:a4:c8:98:8f:6f:40:87:4c:ab:54:39:67:94:
32:83:bd:e7:f5:52:90:f1:c2:b0:8b:10:c9:d6:ff:
02:67:0d:06:ad:5c:fd:3b:90:7c:58:7a:d2:d8:55:
55:03:32:e9:d1:0f:47:45:92:16:4c:19:e7:32:50:
5e:b0:1b:0a:9a:92:e1:b5:a2:d3:cf:a4:f0:cb:6e:
71:20:aa:70:cd:61:38:b8:6a:49:ac:54:a7:90:be:
b9:21:98:bf:ae:eb:1e:bd:9b:ee:18:2f:ee:dd:5b:
81:ee:33:b6:e4:a2:81:53:7a:da:8b:cf:ed:2a:19:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:78:5D:8A:B5:44:02:A8:2E:04:88:02:8E:9D:7C:09:FA:17:B4:7D
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:34:62:92:6a:89:18:c8:46:22:ed:8c:46:fa:fa:9a:46:72:
81:80:82:aa:bc:05:ba:53:26:0b:29:3a:bf:b5:f1:44:91:e6:
44:5c:38:80:f2:cd:55:1c:74:0d:f1:ba:5f:02:a6:a8:d9:de:
38:f1:eb:5a:36:8c:2c:5c:95:97:a7:d0:0c:5e:aa:cb:ff:5e:
24:c1:02:1d:75:dd:f9:16:f2:66:81:ee:d9:82:ee:a5:ce:00:
ec:4c:73:8d:b6:25:4a:f2:5b:7d:a8:03:9d:b5:54:c1:d7:0b:
51:ad:92:28:28:8d:7d:1f:49:a3:df:2d:9e:ff:7f:24:2f:95:
7b:94:2d:25:fe:e3:91:a0:4a:1d:90:27:87:90:e8:ee:29:35:
d7:1e:30:9e:e0:7c:dc:62:50:4f:44:cb:fd:e0:ac:b9:f4:15:
85:27:2e:df:99:ee:de:61:18:85:0d:16:f1:b6:38:c8:de:44:
f7:76:6a:7c:8f:e5:b5:fb:65:84:34:9e:ed:68:9b:3c:5b:a0:
59:23:6e:66:1d:5a:de:da:4c:73:c6:7a:78:38:f9:7b:0d:22:
eb:ed:00:98:99:48:46:fb:2f:63:79:ff:ef:91:d2:42:3a:50:
40:b9:b3:b2:66:38:37:1b:fb:7c:35:fc:81:17:d6:eb:25:78:
83:28:2f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:34:43 2025 by rpki-client