Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
File: _0ywnegmUO5MxDJ-q2dwt6sUfvs.mft (raw, json)
Hash identifier: 0wlKcJCx9OdDF7mc2YQ32I2+0g0pbt9TkdX1PDJfoVU=
Subject key identifier: D5:5E:9D:3B:34:BD:08:CD:85:54:BD:FA:48:58:23:7F:E7:36:6A:EB
Authority key identifier: FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
Certificate issuer: /CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Certificate serial: 0196C4270AD86A2BC7EF1C5AE7779EF5E92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 11:00:15 +0000
Manifest this update: Mon 12 May 2025 11:00:15 +0000
Manifest next update: Tue 13 May 2025 11:00:15 +0000
Files and hashes: 1: RcUeax2IJNxx-VLzmeCKMxA0SJU.roa (hash: vene8siI5AmwNR1jjMXzcgVgONNVdoSDnnxQWvu3CqU=)
2: _0ywnegmUO5MxDJ-q2dwt6sUfvs.crl (hash: 6aOM2+3Ep4qwAKiWQORxm2bS2GhPkjDX6j/VnEA8iQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:0a:d8:6a:2b:c7:ef:1c:5a:e7:77:9e:f5:e9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Validity
Not Before: May 12 11:00:15 2025 GMT
Not After : May 13 11:00:15 2025 GMT
Subject: CN=d55e9d3b34bd08cd8554bdfa4858237fe7366aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:ba:dd:0b:82:a0:da:55:95:93:88:db:66:
9d:f5:69:9d:cd:cc:4b:de:e6:5d:b4:e3:7f:ef:51:
05:53:0e:9b:b0:cc:a1:c0:03:24:33:f0:58:db:9c:
3d:c7:f8:4b:3d:8b:24:93:65:f0:67:f8:68:a6:45:
70:31:20:66:42:b1:d0:0e:64:da:9d:f6:24:3c:8c:
7e:32:3d:52:89:2b:6b:98:9d:cb:b6:35:09:37:f4:
f6:e0:d5:2e:c2:b1:b1:8e:8c:ef:b1:31:74:b8:fe:
fc:2d:2b:aa:53:70:95:32:95:23:6e:c2:bb:ae:2b:
b1:a0:a3:a8:c7:2f:cf:96:65:b5:ca:37:0a:98:73:
80:74:2c:8a:d4:f0:b8:95:67:fa:33:99:6b:76:cc:
57:76:24:96:7c:41:0c:de:03:7b:1a:ae:84:04:8d:
47:e2:02:eb:8a:e7:d5:82:7a:5f:52:a2:b8:f5:4d:
71:8c:a3:96:50:54:53:0d:1c:ab:8b:5a:2a:eb:ea:
48:e5:77:28:34:b3:4f:80:1a:0d:85:ce:cb:42:f4:
35:45:bd:ca:41:12:4a:dd:4c:10:5b:59:36:7c:b9:
62:d5:44:d7:50:05:69:8b:e4:a5:d6:d5:a2:d6:1f:
03:9f:d7:f9:c7:6a:55:9c:b0:00:4b:cd:46:94:25:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5E:9D:3B:34:BD:08:CD:85:54:BD:FA:48:58:23:7F:E7:36:6A:EB
X509v3 Authority Key Identifier:
keyid:FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9c:94:5c:5f:17:2b:fa:bf:80:28:93:10:67:b3:9c:33:89:
20:a7:2b:b8:db:f0:73:dd:b8:b9:9b:11:4c:61:03:c1:c3:f8:
c2:ed:4e:5d:82:b6:56:17:02:c4:eb:43:3c:c5:39:a8:c5:16:
d4:47:7a:f2:14:6b:79:fb:08:9f:1c:4a:86:82:20:52:0d:40:
53:95:f1:fa:35:b6:5a:0f:22:c1:9e:56:82:d9:21:fa:7a:73:
20:24:18:40:6b:a4:1f:bd:f0:2a:ab:de:cf:ac:fc:24:e4:b6:
81:3b:41:5e:48:d5:3a:61:f0:f7:cb:ef:87:e5:da:cf:aa:ae:
08:31:d6:4b:d6:c3:36:b9:4d:9e:bc:af:9b:ad:9d:db:2e:ce:
2f:27:e5:2a:fa:0c:21:c5:61:5d:c9:a2:f4:04:82:94:97:90:
9f:b9:93:ae:a4:ff:6a:20:5c:38:1d:9b:4c:8a:7f:74:73:a6:
38:16:fc:eb:9f:f3:40:eb:44:53:f1:ce:78:05:4d:56:64:43:
e2:96:50:1c:be:31:68:9b:35:a9:02:e3:49:43:7b:2e:c1:db:
4e:e4:cd:3e:59:9b:36:11:47:df:32:ff:10:08:a9:08:3b:0f:
e1:de:e1:f0:6a:4e:12:fc:0c:09:c3:c5:70:a2:cf:0d:54:dd:
58:b3:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:26:24 2025 by rpki-client