Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: 8XyxMk4EJQgNbdHSrUjn4rtUFuZdl0NDynMfL2KHWbw=
Subject key identifier: EF:4A:39:58:06:51:15:3B:83:2F:13:3E:63:4E:78:EF:FA:88:D3:AA
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 0196BF01172DA676F488A154026EB3E63692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0794
Signing time: Sun 11 May 2025 11:00:41 +0000
Manifest this update: Sun 11 May 2025 11:00:41 +0000
Manifest next update: Mon 12 May 2025 11:00:41 +0000
Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: hXz8qCa1/6tRgCxmhuyPV0om/ZxXUOy3N1MLrNNf4pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:01:17:2d:a6:76:f4:88:a1:54:02:6e:b3:e6:36:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: May 11 11:00:41 2025 GMT
Not After : May 12 11:00:41 2025 GMT
Subject: CN=ef4a39580651153b832f133e634e78effa88d3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:7b:2a:8c:c3:7a:16:fe:00:3e:74:fb:52:
ff:52:40:2a:bc:4c:3f:7e:37:85:1f:15:1b:3a:51:
24:08:64:16:e1:27:4a:12:9e:ce:62:b0:8e:d0:b8:
f4:f9:a1:33:bf:c9:68:95:86:bf:79:45:1c:0b:6a:
e5:05:ce:bb:e9:83:03:f7:c2:0a:77:64:57:73:23:
92:7e:be:0a:d4:1f:b2:f4:8c:ca:14:7e:41:c7:ce:
78:01:48:43:0e:12:9c:f5:c4:96:1b:06:63:aa:b7:
e4:2d:1c:ab:d0:48:96:e5:33:20:6f:4a:ca:2d:8f:
a7:6f:4e:56:42:39:bd:e1:46:1a:a9:79:71:87:c9:
e2:57:2a:43:d4:46:96:1e:9b:b2:92:9e:7e:f7:08:
15:64:a0:03:c0:7c:78:d3:59:bc:c0:b8:1d:4b:93:
7a:61:f9:49:b0:34:6c:56:bf:be:74:70:4f:42:67:
cc:b4:13:2f:8a:85:49:2a:40:b5:bb:68:d8:25:46:
63:27:a8:27:28:65:fe:3c:17:99:2b:b6:bf:06:cc:
28:6b:b4:07:d8:1c:ac:44:f4:98:ed:dd:6e:45:43:
ac:60:98:2e:53:9a:f3:b7:76:63:cd:9d:07:4f:fd:
d1:0a:cb:b3:db:45:cb:37:a5:79:44:cd:c4:c7:d4:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4A:39:58:06:51:15:3B:83:2F:13:3E:63:4E:78:EF:FA:88:D3:AA
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:04:c7:8a:da:f3:53:5c:49:aa:6c:35:d3:c2:f5:19:f1:66:
67:d3:59:1c:a6:12:19:a4:6f:57:28:44:fc:b2:41:fa:c3:0c:
b5:17:81:11:31:c3:b7:30:cd:38:d3:6e:09:50:a0:ab:86:10:
49:b6:43:e9:a6:37:1f:64:2d:bd:14:ed:2b:6b:10:e6:af:38:
8d:f3:3c:32:43:3f:be:17:b6:bb:5e:1b:51:51:66:53:39:f0:
4f:7d:5e:49:5f:73:1f:93:14:bb:47:f5:3c:e4:b5:aa:67:be:
8a:54:83:fe:eb:c1:35:42:fe:e5:a8:19:db:31:13:72:c0:87:
91:29:92:94:e2:1f:d1:e8:8c:fb:a9:03:e8:10:f9:42:64:55:
29:ac:43:45:2e:36:fb:3a:7f:21:87:a8:15:92:a1:76:b9:19:
8d:2b:6b:ed:f4:7a:72:91:7b:85:51:f5:4d:b7:33:b9:df:46:
16:69:6d:34:89:bb:39:31:48:fb:fc:5b:fa:db:e4:c3:2c:45:
9f:93:90:aa:17:4e:71:23:5f:16:ca:6f:8b:62:9c:b7:cb:0c:
3d:77:fd:7c:94:b5:bf:f7:82:7e:5a:5f:14:76:20:b8:68:f9:
59:78:eb:a0:49:12:9d:2c:fb:fb:6e:c5:d6:be:d5:a4:dd:b3:
33:6a:86:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:58:21 2025 by rpki-client