Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: 2uwAJEPpNfqFjxdcmLT6ACFm59kziT+HNuR9aF8fzEY=
Subject key identifier: 9E:83:F7:E0:4E:DA:D4:08:A2:1E:C4:10:9A:2C:22:B2:42:D7:CF:9E
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 0196BD80E7D8C6A3F71FB91965B37F7C40DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0A88
Signing time: Sun 11 May 2025 04:01:03 +0000
Manifest this update: Sun 11 May 2025 04:01:03 +0000
Manifest next update: Mon 12 May 2025 04:01:03 +0000
Files and hashes: 1: NRZRBzkHeQf0inm9C38j74IG3bQ.roa (hash: IhzcvideV20rsOk9qK71z5e+p8/QDxcnP4qjNz1cRxM=)
2: Z0vebwduFrdGsE_iH8mJSQRQtcA.roa (hash: RqX2X64oTENUb7eOcZCl0TrlwK76jUVfDOAyoAGIoKI=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: O/dZzSfTdgtYlc0eYlXYWqYglBg5XsOcUkYry84TpVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:e7:d8:c6:a3:f7:1f:b9:19:65:b3:7f:7c:40:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: May 11 04:01:03 2025 GMT
Not After : May 12 04:01:03 2025 GMT
Subject: CN=9e83f7e04edad408a21ec4109a2c22b242d7cf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:b9:8d:2b:95:27:29:1a:d9:6e:ae:78:9b:
9d:34:54:36:ec:61:66:27:a8:3f:27:c8:11:6c:2e:
bd:d6:77:87:1b:ab:f5:5f:58:a9:11:49:2a:97:71:
44:fc:b7:48:1e:0b:d7:48:61:87:60:58:a6:66:16:
12:39:df:9a:20:a2:a7:f3:ea:d9:0a:de:11:fc:c4:
2c:0c:ba:ac:9a:42:36:bf:45:81:ea:ec:da:dc:0a:
a0:69:d0:24:ff:ea:a4:76:3e:cf:f1:ab:eb:d3:45:
8b:88:53:8c:4c:96:c1:04:63:cd:c0:e2:7a:f6:38:
bc:aa:aa:d4:39:22:ff:78:da:d7:c6:15:26:6d:6a:
fd:3a:e2:5b:90:43:8f:f8:96:f3:d3:2f:03:38:ee:
82:53:09:6f:d2:cf:96:e1:82:d5:62:2b:32:f4:a9:
50:c8:a2:29:bf:35:96:a8:f3:fa:a1:41:ca:7c:8c:
4c:a7:37:57:b5:47:67:ad:af:93:a7:6d:07:29:da:
5f:1d:33:e3:71:d8:c0:f4:74:6e:88:43:92:20:fd:
b0:bb:7b:49:c1:43:18:2d:a0:4c:b7:9a:49:e9:ae:
3e:82:9c:1f:cd:1a:0f:46:46:34:44:39:9c:e8:5e:
4c:48:06:bf:6f:7d:c1:40:3e:07:f1:71:0b:a3:48:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:83:F7:E0:4E:DA:D4:08:A2:1E:C4:10:9A:2C:22:B2:42:D7:CF:9E
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fd:16:5e:87:42:85:bd:0b:ba:de:ec:9a:a5:99:43:90:e8:
2f:6a:8a:30:ea:62:fa:e1:3d:48:d1:cf:7a:40:b5:3c:09:24:
8c:f4:d4:01:b6:2b:ce:46:19:ec:97:13:4b:ff:00:12:d1:d7:
ee:07:1c:80:bc:17:71:74:6b:e4:5f:08:a0:89:7d:b7:c5:24:
31:e9:9a:a3:ac:2e:c3:b4:69:6e:7f:76:cd:8f:be:e4:e7:b5:
62:8f:f0:c3:86:c0:f9:fd:c3:9f:f4:d6:9b:aa:da:ef:f1:c2:
20:0c:74:5b:03:b9:fa:8b:57:8b:5a:b7:4c:ca:50:1f:d3:34:
4d:c9:d1:32:84:28:4b:a5:d1:80:e4:2c:19:f9:dc:56:cb:77:
7d:1f:1d:62:42:ee:c0:9c:20:d1:54:45:d6:35:1a:e2:09:58:
9f:fa:56:c7:bd:33:f2:28:8b:8f:08:72:38:b7:8e:67:8e:37:
9e:f2:e0:18:c0:b1:18:c2:cb:33:d5:fb:74:ec:f3:6b:da:4c:
2f:e4:f8:12:49:fe:c0:f8:ee:8a:86:84:52:35:78:c6:15:6a:
14:bc:a6:b2:74:3a:37:c5:5b:38:52:99:6d:ec:ad:33:32:bf:
73:d4:38:c7:91:38:8d:5c:4a:41:0b:f9:06:64:76:77:28:2e:
7a:b8:72:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:47:30 2025 by rpki-client