Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: iyg4djx8WgbZu3tDEYKupf7z7w/oiRdJskPjN1Xn3aY=
Subject key identifier: B8:AC:A8:52:89:82:BC:CE:BB:16:1A:A7:05:F5:C9:2F:83:51:82:8E
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 0196BECA576EAB900CD5F3350416DCDF17CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 0D40
Signing time: Sun 11 May 2025 10:00:53 +0000
Manifest this update: Sun 11 May 2025 10:00:53 +0000
Manifest next update: Mon 12 May 2025 10:00:53 +0000
Files and hashes: 1: DUVtp5rmZWhjlPTwXejQEd3V8J4.roa (hash: qTcPo/VJaQTji8d15MDDjiWvnKJ389xtHOegN0VgXp0=)
2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: pmSTSSuKvs/yhERNEvje84SXlzXbPNTr/Cd6p3aG6jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:57:6e:ab:90:0c:d5:f3:35:04:16:dc:df:17:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: May 11 10:00:53 2025 GMT
Not After : May 12 10:00:53 2025 GMT
Subject: CN=b8aca8528982bccebb161aa705f5c92f8351828e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:01:e4:ea:c9:16:5c:48:07:27:55:76:4a:
93:ed:72:02:af:cc:f4:e9:68:df:3b:12:c8:3b:38:
93:0b:c7:0e:d3:0a:24:51:e1:da:9f:51:bf:e1:c9:
5a:c3:ae:1c:98:3d:4d:9c:14:44:39:48:b4:05:a0:
7a:59:6b:2d:f3:98:5b:19:da:73:20:fb:34:ac:15:
98:03:75:18:43:a2:99:5a:83:a1:08:f5:c9:06:be:
f0:09:32:a5:ed:73:0a:64:68:f6:02:b9:3b:ad:f7:
a5:eb:0a:04:e1:1f:87:61:37:5e:ab:de:38:e5:bd:
ef:79:12:be:64:a6:10:44:63:b8:9f:a0:1f:d4:77:
78:97:09:db:53:1b:4d:96:90:c7:ae:14:c8:e1:71:
1a:b7:37:b5:1d:1b:17:22:a6:48:5b:fb:5b:ed:5e:
bb:bd:a4:01:e0:57:41:0a:a5:b0:b7:a9:33:05:35:
8d:3e:c8:b9:40:45:e8:0c:2e:b2:d4:b8:87:00:f9:
7a:8e:a5:f8:75:5e:4d:49:19:7f:c1:94:0a:9e:2e:
4e:61:d4:1c:79:66:5a:a3:d5:92:d4:c6:76:e3:c4:
11:7b:09:92:a7:42:ba:cf:d7:4b:80:68:df:ce:95:
86:d5:f2:4d:7f:53:de:39:ef:61:f6:90:d4:09:40:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AC:A8:52:89:82:BC:CE:BB:16:1A:A7:05:F5:C9:2F:83:51:82:8E
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b6:1e:72:55:53:13:f1:7e:cf:a3:83:05:48:73:79:58:28:
72:93:aa:c3:d3:18:5f:0e:4d:8e:25:1c:f1:88:67:7c:2e:a1:
28:77:81:17:30:9a:6d:84:be:f4:5f:4b:25:62:55:31:7f:51:
8a:c2:14:b6:0c:e5:60:c5:8f:c3:03:40:06:a9:6a:fb:e3:35:
f2:15:f2:33:34:07:01:11:aa:90:49:3f:1d:99:5f:2f:7a:4c:
a4:56:3c:21:de:c9:a3:a4:8f:a6:e7:6a:81:52:3f:48:4b:10:
03:b9:58:9e:df:3e:08:86:5b:d3:c3:2d:34:c6:b9:e4:06:fc:
63:40:1f:2e:01:07:34:61:89:30:30:3e:3d:3f:b3:da:21:8b:
a2:99:0f:a2:e4:35:28:8e:87:4c:b0:84:82:66:1c:d5:e9:b4:
c7:41:a0:91:dc:b4:3b:d5:37:55:19:f7:6e:6e:1c:47:6d:35:
0a:f3:7a:64:b3:63:de:93:5d:14:0f:71:e8:22:90:8b:6d:ee:
7c:88:b5:09:c5:2b:d5:d5:2f:ce:fa:a5:b5:48:38:70:15:f3:
c7:9b:72:15:c7:23:51:33:62:96:ac:bc:5e:5e:f2:ce:3c:01:
d2:e6:62:4e:bd:53:bd:3f:f4:70:1b:0b:78:3b:9b:bd:bd:b5:
42:68:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:13:09 2025 by rpki-client