Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json)
Hash identifier: n/Ri+7vGDLbezQCnmfzt33Cy6b09P+mtefs2f3Hk0Rc=
Subject key identifier: FA:75:C3:08:DF:9E:B8:18:C1:2B:C9:10:76:1C:25:E2:E3:07:A8:A9
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 0196BDB7982781AB76AC10482491234B6B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
Manifest number: 0DF8
Signing time: Sun 11 May 2025 05:00:47 +0000
Manifest this update: Sun 11 May 2025 05:00:47 +0000
Manifest next update: Mon 12 May 2025 05:00:47 +0000
Files and hashes: 1: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (hash: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=)
2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: PV06/NB4HmwJUtMQ0UF6pWpvZvADnJpxM4qDqhLllWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:98:27:81:ab:76:ac:10:48:24:91:23:4b:6b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: May 11 05:00:47 2025 GMT
Not After : May 12 05:00:47 2025 GMT
Subject: CN=fa75c308df9eb818c12bc910761c25e2e307a8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:4a:3e:ff:ab:b3:da:1c:46:e0:97:88:32:
33:fb:6c:5c:49:cf:5e:52:40:0b:e6:f3:e3:44:7b:
8a:e6:17:48:d0:3e:a7:6e:8c:f1:ef:92:a7:a8:4c:
1c:71:a7:f9:eb:7b:cd:10:27:90:fc:3e:41:f3:4c:
d6:ea:b6:e1:f8:7b:b6:22:c1:c5:d0:66:c3:d8:32:
e6:c5:62:a0:0a:09:52:96:3a:82:7d:1b:52:ba:4d:
e8:f4:02:a5:a8:ab:9c:2d:48:18:74:e0:c9:cc:d7:
42:af:59:63:c8:cd:1a:9f:1b:4f:85:c3:af:80:44:
df:4b:96:fb:5c:9e:29:31:d4:0e:0b:58:7e:98:4c:
fc:58:c7:95:c2:af:4f:c3:a8:4c:dd:1b:75:bb:b8:
a4:aa:fa:f5:b0:24:27:e5:97:04:b7:40:68:29:3e:
45:88:42:e6:10:68:64:37:ec:ca:d5:b0:e3:14:1c:
55:5b:9e:57:9b:43:8f:d4:48:1b:f3:25:7c:a5:32:
06:6b:41:da:7e:82:34:ed:ad:4b:7a:d8:1b:bb:54:
b9:e6:06:0c:83:41:50:af:fc:d2:04:58:3a:e3:a5:
41:f9:e7:cd:4a:97:83:a6:00:c0:30:68:cc:97:6f:
df:c1:30:d3:65:e2:0e:96:7e:b6:a7:95:18:33:ce:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:75:C3:08:DF:9E:B8:18:C1:2B:C9:10:76:1C:25:E2:E3:07:A8:A9
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:23:f9:aa:e7:ee:52:ce:fe:04:15:2f:4a:9d:21:4e:f2:53:
cd:df:44:a8:97:b8:d7:8b:bf:60:b3:3b:c1:43:4a:11:32:f0:
95:fa:9d:6b:ed:b7:95:71:24:56:81:58:f8:0c:3a:13:41:f0:
6b:2b:62:d2:fc:29:36:87:84:3c:1d:80:54:56:65:e2:f3:e7:
48:8d:84:3e:ab:5e:41:69:0a:22:11:cd:51:32:05:0b:92:e6:
d0:57:52:0d:86:42:97:0a:59:38:39:81:95:8c:3e:b1:7f:84:
59:9a:a8:e3:16:f7:8d:c2:5d:68:46:e9:75:d8:f5:78:72:70:
1b:9a:1b:01:ae:fd:52:10:54:18:07:b7:90:de:41:72:94:5c:
de:b5:9f:65:e2:4c:b1:29:82:8f:82:da:a4:28:ee:9c:af:c5:
f0:60:01:d0:a9:dd:15:31:03:f8:7e:de:28:37:c9:7c:58:c6:
ca:c1:24:86:70:3f:1b:fb:9e:80:ff:f6:a0:be:0f:90:d7:12:
ac:65:20:49:8d:59:ed:f5:c6:06:95:ab:b5:90:2d:b3:75:8f:
40:25:6c:ea:e8:4f:89:05:06:6d:d2:2b:32:c5:77:dd:95:70:
d7:21:24:dc:b7:e3:23:ce:b9:10:20:2c:a7:5c:9a:fc:c6:a9:
b3:b2:bf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:29:01 2025 by rpki-client