Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
File: rfjUKjroBc6WqpT66fW0QG_0VZk.mft (raw, json)
Hash identifier: EdQNck5e1BhE59NNpdk00+4TmdiAfZzLXj/fIzIxruo=
Subject key identifier: CE:3C:56:2F:37:BF:31:1A:F3:C7:6E:78:E5:38:2B:51:89:45:85:E8
Authority key identifier: AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99
Certificate issuer: /CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
Certificate serial: 0196CD98660B193B8AA53AD2D9BF4AFB6D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
Manifest number: 02A3
Signing time: Wed 14 May 2025 07:00:38 +0000
Manifest this update: Wed 14 May 2025 07:00:38 +0000
Manifest next update: Thu 15 May 2025 07:00:38 +0000
Files and hashes: 1: rfjUKjroBc6WqpT66fW0QG_0VZk.crl (hash: czza9lX69WiX9WsV/5bngFlbOOkVBCHOdjcqhEzlSVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:66:0b:19:3b:8a:a5:3a:d2:d9:bf:4a:fb:6d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
Validity
Not Before: May 14 07:00:38 2025 GMT
Not After : May 15 07:00:38 2025 GMT
Subject: CN=ce3c562f37bf311af3c76e78e5382b51894585e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:36:b7:2b:a5:ea:db:dd:34:d4:ac:fd:60:79:
ff:07:67:a1:2c:7e:88:8b:45:34:f7:1f:16:b9:0b:
cc:51:3e:c5:43:12:0f:09:00:d6:3f:f2:46:3c:aa:
58:9c:9c:f8:9d:a2:9f:21:8b:ed:db:9a:3a:e7:26:
4b:2c:e3:c7:2f:ee:b2:f1:ad:b7:eb:77:da:be:57:
cb:fc:ca:d5:51:56:e8:8e:d1:ad:98:c3:d1:0d:4e:
b6:ac:8b:3b:e8:16:40:90:93:40:e2:eb:4b:43:43:
29:52:ec:ae:05:b6:7a:f7:d7:69:ef:e7:6a:9b:3e:
c1:6c:57:a5:8c:04:ce:45:0c:f8:5e:c6:df:e2:c2:
b9:07:e8:41:64:a3:55:e9:cc:af:e4:ee:30:a3:a3:
67:a8:85:3f:bf:6a:29:49:54:c2:fb:07:c7:cd:6f:
02:a2:cb:75:86:ad:20:88:bc:5d:97:3c:42:39:ed:
2f:7b:4b:81:77:77:61:8d:a6:7f:37:76:5c:64:2f:
76:52:f0:e1:6b:14:91:e4:6a:f0:f0:bd:a5:59:a5:
6a:b3:a2:e5:3f:a3:0f:5e:63:18:05:55:8d:2f:ed:
75:68:da:1a:0e:70:56:98:fd:76:f4:9d:2e:9f:cf:
06:60:a5:de:75:3b:1c:a6:1d:28:36:30:72:eb:40:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3C:56:2F:37:BF:31:1A:F3:C7:6E:78:E5:38:2B:51:89:45:85:E8
X509v3 Authority Key Identifier:
keyid:AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:dc:7a:7c:75:cf:b3:66:36:b9:6a:f2:63:cd:c1:e1:3f:e0:
d9:fb:15:9a:8c:b0:6b:8a:9e:31:5d:b2:25:3d:be:44:cc:53:
e4:a9:df:ce:a2:3b:c7:5e:06:1c:ae:0a:79:ff:cd:4f:6a:b8:
57:c5:67:cf:00:8f:a2:ec:27:1a:f0:be:5e:a6:d4:d6:6d:cf:
69:23:89:04:bc:25:83:3b:79:a2:2f:e5:d5:4f:46:cd:47:c1:
e9:7a:80:fc:41:ca:db:5c:e9:6c:01:58:6e:48:7a:d2:b3:75:
4b:3d:3e:4c:5f:ba:b3:e1:e9:88:58:03:1b:c6:99:3b:32:8e:
18:0c:83:f7:eb:af:19:ab:c0:f1:68:0d:9f:eb:b5:5d:c2:c7:
88:33:e7:03:05:27:16:75:be:c0:52:db:04:86:c4:ec:c9:fb:
3f:c1:a9:7f:27:c9:f0:8a:e7:39:b4:25:45:e9:ed:19:c8:9d:
ba:6e:49:3f:c7:2b:f9:0e:0e:98:a4:b3:cc:fb:3d:ae:e9:7d:
10:e9:39:6a:3b:60:c7:72:6c:a8:5d:b8:4a:a7:b8:0f:f3:56:
6d:61:77:05:09:67:e1:53:93:9b:78:de:0d:de:ba:02:ce:d3:
9a:d4:41:22:7a:6d:b5:95:3b:c6:11:cb:76:20:83:70:fb:d4:
e9:7b:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:50:30 2025 by rpki-client