Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
File: 1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json)
Hash identifier: stnlqmksQuhwmxLa/UeeR37eRc0l4i7w9xEV41/YTXg=
Subject key identifier: 0F:F5:50:B1:80:9E:0E:2F:2B:E7:F6:10:06:44:DC:21:C5:B1:38:3E
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Certificate issuer: /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial: 0196BDB71CD3C3B64F293D62D1B2C7143C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
Manifest number: 0A3D
Signing time: Sun 11 May 2025 05:00:16 +0000
Manifest this update: Sun 11 May 2025 05:00:16 +0000
Manifest next update: Mon 12 May 2025 05:00:16 +0000
Files and hashes: 1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: DYolPkpgMhCbJPDAWmQoKi3X95WWJvfCUzZWwMATjf0=)
2: 30wxplZBtekiYfq89WhRrKa7cbQ.roa (hash: A+ApiR7nBxu7bspZZM8VxqWi7UoEVIuDQiaPLO/t9cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:1c:d3:c3:b6:4f:29:3d:62:d1:b2:c7:14:3c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Validity
Not Before: May 11 05:00:16 2025 GMT
Not After : May 12 05:00:16 2025 GMT
Subject: CN=0ff550b1809e0e2f2be7f6100644dc21c5b1383e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:61:c9:38:25:2e:6c:d1:23:d8:e6:86:b3:
21:52:99:5f:40:47:a0:b7:0f:dd:db:ab:9d:0d:05:
86:93:f7:d0:8e:9b:84:96:d6:ec:c6:b1:0b:d5:bf:
f1:c3:af:5b:b7:20:10:a2:84:e7:e2:ee:49:8b:fa:
e2:2c:03:2c:15:6a:02:84:36:c7:c6:a2:3a:99:b6:
3a:2c:3a:1f:b0:3e:7f:a6:38:9a:98:ae:dd:80:d2:
7f:b9:aa:02:22:50:19:33:f0:dd:e1:c5:36:e1:81:
46:62:ab:7d:50:0d:f7:e0:49:e7:92:77:03:fb:d8:
03:1f:1c:80:46:90:73:00:bd:9d:87:33:7a:fe:42:
36:ba:0b:2d:1c:20:94:cb:e5:2f:dc:b4:88:dd:5a:
9e:13:a7:50:3e:a0:9d:2d:d2:1d:be:ed:24:63:7d:
ef:74:f7:00:ca:52:19:f2:fe:f3:0f:bc:5f:03:e9:
76:87:36:ae:3d:71:32:57:a5:03:a1:e5:21:81:0e:
09:46:5d:94:94:ae:cc:28:9e:72:d9:68:29:70:72:
94:70:4f:14:01:78:a5:2b:ae:6d:cd:d3:c6:2f:b5:
b9:56:9b:b4:c2:00:e7:b0:65:18:fb:d1:ae:a0:40:
ff:af:7b:da:64:d0:59:0d:eb:b8:0d:26:f2:b5:69:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F5:50:B1:80:9E:0E:2F:2B:E7:F6:10:06:44:DC:21:C5:B1:38:3E
X509v3 Authority Key Identifier:
keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:6c:ae:49:51:f6:27:dc:8c:79:66:da:98:52:16:9f:f3:e7:
83:84:22:0d:97:b0:df:58:6c:bc:d2:e0:06:54:7f:74:26:4c:
e0:68:4b:54:39:34:c1:cb:d9:b5:a2:b6:6e:95:c6:5e:b3:b4:
e0:57:69:2a:22:89:f6:ec:75:91:00:a3:b4:fe:77:71:ca:65:
8b:a1:3c:39:28:5d:bb:6b:db:b9:42:d7:dc:be:0b:d6:89:04:
0b:d5:08:20:28:73:93:9c:31:ed:b1:5c:e5:dc:66:d2:1c:a3:
7d:57:8d:a6:87:28:62:48:2f:11:38:c4:e3:a4:d6:55:8f:d7:
a0:37:1d:22:26:9c:2f:b6:0d:b2:17:b1:91:fb:75:1f:bc:45:
37:3a:2f:22:ba:0e:76:9a:68:21:32:8c:ea:70:f7:40:cb:76:
ba:72:22:d0:6c:91:19:11:21:e7:04:75:cb:33:a1:64:4f:30:
30:82:7f:9c:d3:cd:cf:ec:c4:9f:e2:e4:54:7b:c2:f8:8b:60:
6c:6b:e6:39:c6:5e:00:bf:4e:60:f0:bb:1b:ec:38:4c:af:9b:
6a:3b:17:f6:be:d7:dd:42:71:eb:74:39:e1:33:7f:e2:5c:95:
c3:02:54:82:da:c0:33:eb:68:ef:41:50:61:bb:4c:4c:91:d3:
82:17:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:29:02 2025 by rpki-client