Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier: Hzz21+GiijjzfDdo7ntD0eOUR6jTBFVs8LaoJ80kIj8=
Subject key identifier: FE:60:AB:98:2D:B4:59:80:51:6D:52:6F:6A:54:8C:3B:40:02:D1:EA
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial: 0196BE5C863A9ADBE4BBF99CC998D5BA50E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number: 03B0
Signing time: Sun 11 May 2025 08:00:56 +0000
Manifest this update: Sun 11 May 2025 08:00:56 +0000
Manifest next update: Mon 12 May 2025 08:00:56 +0000
Files and hashes: 1: egLJr-eSZpk4sDdrCGxUJjm8wVU.roa (hash: NBKYZF7j3MH2zl3XNbkXJFKVIPixuj4t75EEGhwneCE=)
2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: zjB35fwak8WcDPBSHkPH4XntFskh6XX7zVlKjEM8O10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:86:3a:9a:db:e4:bb:f9:9c:c9:98:d5:ba:50:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Validity
Not Before: May 11 08:00:56 2025 GMT
Not After : May 12 08:00:56 2025 GMT
Subject: CN=fe60ab982db45980516d526f6a548c3b4002d1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:89:c6:18:bd:01:8e:83:79:7f:4a:44:a3:
24:4c:6b:25:e1:04:7f:ab:9f:9f:33:bd:bd:f9:7f:
22:0a:fe:08:3a:37:77:58:77:49:fc:c3:6f:52:2c:
80:c4:7e:d3:5f:3c:29:69:1a:42:c9:c3:d0:e5:c1:
21:d4:03:41:5d:b1:51:3a:63:ea:8e:97:70:25:76:
db:eb:39:7e:cb:ff:90:11:b0:12:ce:3c:99:e6:75:
87:ee:4d:05:d3:d2:dc:07:1d:8d:83:a5:5a:09:a9:
19:90:33:ff:89:88:e5:68:69:b2:6b:9b:91:36:f8:
dc:60:99:2b:d3:76:b0:9b:59:e9:2f:1d:b0:6f:7b:
0d:ec:24:e6:57:4d:40:fd:18:4a:d2:dc:b6:90:af:
9d:8d:20:8d:b2:b8:56:53:50:3a:32:ae:b9:72:07:
99:b6:3b:69:2d:81:e6:27:0b:47:4a:d4:40:c2:6b:
ac:09:11:b4:75:46:e5:f3:cf:76:42:0b:33:89:1b:
51:4d:5b:17:ba:b2:74:8b:01:55:5e:6e:23:16:a1:
95:39:40:1c:0b:da:a3:9e:5f:af:be:76:1c:35:64:
d4:d1:1b:8f:29:22:dc:c5:a1:e4:c4:d6:0f:91:64:
34:b0:18:68:cb:3a:57:39:52:4f:a8:3c:60:e6:d5:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:60:AB:98:2D:B4:59:80:51:6D:52:6F:6A:54:8C:3B:40:02:D1:EA
X509v3 Authority Key Identifier:
keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:35:ad:e4:e4:c4:4a:42:87:ea:e7:71:8c:92:2c:04:11:a9:
59:dc:1a:d9:36:24:c8:97:04:c2:95:f2:18:00:33:0a:03:3b:
28:3a:39:c7:d7:d7:72:ad:8a:f6:8e:76:8d:d7:9f:6d:c4:3a:
b0:4d:23:60:8a:33:3b:97:78:2f:8c:44:d9:b4:52:01:7d:17:
1a:1e:54:80:c8:5f:c4:3e:a5:aa:0e:69:d9:a9:ba:05:aa:30:
40:70:fa:c5:9b:f3:44:9d:78:3c:a9:59:c0:e8:90:64:52:4c:
de:ba:da:a8:89:b3:e3:ed:6f:cc:ce:ac:1c:95:ad:5c:97:58:
74:fc:4b:85:44:e0:b0:f7:d5:3a:92:70:c7:d1:fb:86:80:15:
45:71:0e:35:7b:5e:52:7f:d5:72:7c:ff:e9:d0:ca:24:e9:ca:
3b:c4:eb:55:84:36:cd:ba:e9:81:e6:13:51:dc:7b:a5:74:cc:
01:3c:07:3c:1d:eb:81:ad:52:2c:c4:31:4e:6e:da:ca:aa:89:
7a:6e:f5:19:e0:4c:29:c5:5d:ef:45:1c:cc:e0:08:bc:36:20:
7c:66:7f:19:36:1b:03:27:bb:a6:28:5f:a9:81:cd:f4:10:96:
d1:30:18:ca:c8:17:e1:ea:d4:15:86:2a:6d:a4:40:fe:c9:da:
47:df:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:41:48 2025 by rpki-client