Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: cDgtPusQP9fHNu5ZG8fO0gynjIcrMPonEXZGSiVSUpU=
Subject key identifier: DB:2D:B7:8E:5E:EE:F5:C1:66:15:09:BD:DF:29:2E:1E:CF:72:3A:7E
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 0196A2ADC53BC5B7CD9BB733774A6C9728B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 23:00:19 +0000
Manifest this update: Mon 05 May 2025 23:00:19 +0000
Manifest next update: Tue 06 May 2025 23:00:19 +0000
Files and hashes: 1: 4MlBcLkACtQP09DCmTzQOZzBiyU.roa (hash: VC+StI3JXPJWvc2fZQnaWQlAtRDc6F/BQhSkSjXucPs=)
2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: 93zdj4yxzzAdfXOGOF2gjKb1xjRM35zqQaYlRTGwi00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:c5:3b:c5:b7:cd:9b:b7:33:77:4a:6c:97:28:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: May 5 23:00:19 2025 GMT
Not After : May 6 23:00:19 2025 GMT
Subject: CN=db2db78e5eeef5c1661509bddf292e1ecf723a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:78:b9:a9:09:81:37:6b:14:ad:a0:51:8c:
1e:aa:76:ef:dd:17:92:8a:06:c2:ab:95:11:30:2b:
8f:56:cb:f7:3a:9b:63:61:53:b3:0a:0b:f2:de:27:
d0:6d:a9:0b:6a:36:d1:ae:38:dc:e6:2d:69:84:0b:
74:1e:68:63:c8:c4:c0:1c:00:2b:dd:9d:ac:67:3e:
65:2b:96:90:6e:58:4e:f3:1b:c4:4e:66:e6:da:05:
57:fe:88:8d:2d:48:7d:42:29:7c:cb:c2:96:79:23:
26:53:b7:15:ff:42:8b:60:20:d6:b0:6d:5a:08:07:
8b:7e:92:a3:8f:3a:0f:97:63:d0:35:bb:10:af:6f:
63:c7:da:89:45:d9:06:27:ac:ad:78:86:9e:f4:00:
82:d3:46:28:06:9b:6a:32:d2:b8:3c:ef:b6:9d:37:
a7:5b:ba:20:f4:27:c1:e6:d6:6c:b5:6a:e6:bd:bd:
3f:82:88:c9:30:80:5b:f6:1c:9b:e0:a5:2f:96:4e:
c7:cd:b3:6d:9b:f6:d1:a5:42:91:b7:71:a2:01:38:
54:d1:71:36:c9:08:df:5f:83:c3:f6:21:bf:a7:9f:
45:48:12:0f:e1:80:56:19:1a:78:3a:4b:86:e6:78:
74:ab:2b:07:40:b7:49:b3:80:2b:e9:72:f6:92:b9:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2D:B7:8E:5E:EE:F5:C1:66:15:09:BD:DF:29:2E:1E:CF:72:3A:7E
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ae:01:05:89:31:3d:d3:3f:1c:93:0f:f2:fb:98:6b:f7:99:
28:63:06:5b:ee:6b:7f:f5:eb:1f:84:f3:cf:77:5c:81:63:21:
ab:bb:76:f3:2f:6d:c0:8e:d2:14:07:91:fe:03:85:9f:9d:25:
a9:f7:9a:01:fd:dd:98:d8:e6:05:0e:64:0e:be:37:90:7f:df:
54:34:2d:cb:dd:3a:a1:14:19:bb:d3:9d:38:b0:dd:80:bc:02:
ae:2d:17:49:ee:3d:ea:62:1e:73:02:17:2b:8b:01:53:e2:d5:
89:1e:b9:1a:95:7b:54:0f:9d:91:e6:39:d5:96:a4:08:35:dc:
21:00:cb:c9:ee:67:2d:fd:20:90:30:dd:92:cc:c6:a1:18:8c:
65:dd:b3:fd:46:c8:21:35:22:cb:ae:51:fc:a9:d0:2f:77:70:
bc:8a:dd:2d:f6:95:e9:1d:ab:ef:f4:e7:b5:ba:5b:b8:08:c2:
a3:bc:0a:68:17:d5:da:ca:9e:60:64:07:b1:b0:8b:43:0e:c2:
21:6a:8a:70:dd:91:c3:48:94:13:18:41:ac:79:ce:64:ce:b0:
4e:03:c7:07:f9:e3:c5:23:1e:83:29:33:ba:f9:bf:d2:83:e6:
74:9f:00:34:a5:f9:dd:68:b7:32:85:70:44:88:dd:47:2a:d9:
92:d3:5c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:25:01 2025 by rpki-client