
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: oJ0DkVyOYJ1RHeG7ptHjVYB7jw1w7ibIqOSNyj7DyYg=
Subject key identifier: C7:2A:E1:7D:1E:EB:FE:4D:C2:F3:47:07:EE:AE:CC:AB:C1:48:F0:C9
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 0196C9BB944EEAC6C3187A11BA60A811D4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 0279
Signing time: Tue 13 May 2025 13:00:35 +0000
Manifest this update: Tue 13 May 2025 13:00:35 +0000
Manifest next update: Wed 14 May 2025 13:00:35 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: ltB6SqOgm0DjWInbhDCFIo8o0AgJeoW2ed4WC76As/k=)
2: Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa (hash: WkS34pHH/XzAUtEopuzXUXT2LtpQyPdLz2PYfITDjLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:94:4e:ea:c6:c3:18:7a:11:ba:60:a8:11:d4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: May 13 13:00:35 2025 GMT
Not After : May 14 13:00:35 2025 GMT
Subject: CN=c72ae17d1eebfe4dc2f34707eeaeccabc148f0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:80:af:56:c5:07:7e:d5:b3:b2:67:fd:6d:
fe:82:cb:44:89:e0:75:74:77:d3:6b:f0:32:87:6c:
18:b0:9a:bd:38:6d:c4:66:ef:49:e4:7e:6a:04:a1:
39:57:19:bf:e9:8d:ef:cd:3f:1c:2c:12:0c:1e:42:
85:b1:07:8e:d7:64:43:08:d1:ad:d7:d3:b8:48:ae:
cd:0c:55:27:28:c2:00:44:da:fd:b9:33:8e:33:9f:
2a:e9:47:d8:4a:de:77:fc:ce:c1:72:c9:ce:9f:a2:
94:0d:20:ea:05:cf:69:b4:51:24:31:38:3a:08:b0:
39:0a:f2:6a:e7:25:8e:48:2d:3a:61:d3:7b:08:84:
53:20:98:3d:c5:53:2c:7c:45:80:25:7b:9a:ec:e8:
13:31:19:7d:e3:fa:3e:75:89:c7:ab:a7:13:d2:87:
b4:a7:1e:f1:aa:16:75:16:2a:4b:e4:8d:52:d1:00:
21:06:95:cc:8b:5d:66:78:cf:3d:fa:0d:de:b5:73:
cf:b8:88:b1:6d:17:f3:49:b0:84:41:bc:fd:ce:eb:
53:0f:11:51:47:f4:2a:98:03:39:36:85:30:35:fe:
47:53:fc:7e:63:f1:2d:26:08:c1:85:50:7a:0e:07:
f0:53:fb:29:8e:03:3b:4b:dd:92:9b:f7:4f:58:e4:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2A:E1:7D:1E:EB:FE:4D:C2:F3:47:07:EE:AE:CC:AB:C1:48:F0:C9
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8b:ef:87:63:39:70:8c:30:e2:28:a3:53:ba:ab:25:d8:5e:
6d:ed:ff:f2:0e:35:70:a9:63:88:79:1a:a5:f8:e1:99:1d:21:
ec:26:56:02:b8:e7:f0:85:de:c4:26:40:af:74:7c:ca:aa:99:
a6:f9:a0:07:2e:75:de:27:21:f6:52:b7:9a:de:6c:83:02:3a:
08:c4:ba:b1:eb:81:e7:28:ff:12:d0:59:ec:28:ef:8e:3d:b6:
e3:5b:69:f5:c3:eb:1a:bc:6c:e3:f2:39:3a:1e:99:38:20:2d:
a3:35:63:5f:e7:57:77:a7:d8:8a:ac:5a:6a:98:bf:26:1c:b2:
0c:a8:45:6f:c3:1e:70:40:0d:c4:56:bb:62:b3:2e:bb:c6:b5:
d1:fc:ce:d1:f2:d6:c6:9d:71:6a:b9:5e:9e:6f:c4:55:7c:41:
e1:ff:4d:60:16:cf:72:7b:d7:cc:ff:32:95:13:3a:ba:d7:a9:
cd:ae:69:73:1d:28:92:bd:7b:fa:78:a9:6a:fd:2e:30:9f:25:
b9:2f:45:a7:f8:56:1b:fa:b7:24:b2:b9:33:87:f6:cd:1d:dd:
1d:65:ba:70:0a:0f:0f:e2:4f:0f:fe:a0:10:2c:88:66:f7:c9:
c9:c4:d7:3d:c5:27:01:f0:3e:5a:b0:17:de:7d:e3:fb:e5:14:
ad:d6:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:57:07 2025 by rpki-client