Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: c5nC+tDQmcbnxxv9CD0q9Gfsm17M74oZhcg3MxCt4TE=
Subject key identifier: FE:B0:10:3F:BE:49:68:68:61:AA:AF:97:8B:6A:3E:65:4F:B8:5C:25
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 0196C7CD35BF50AFA92CAA744A919931FD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 5D
Signing time: Tue 13 May 2025 04:00:36 +0000
Manifest this update: Tue 13 May 2025 04:00:36 +0000
Manifest next update: Wed 14 May 2025 04:00:36 +0000
Files and hashes: 1: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: OF76CTOcW+W1OYzcGLDmI1yruqTACteVMCW4f51CCHI=)
2: dG3vSEaAbpBYGMjnVqj3IkRAi0o.roa (hash: gF5q2naGzlJIG0YvikJ9g/7wr5QlHQs7okrQO5XF9dA=)
3: fE-CoC_oBJRa8r51jGuZP6UT1fo.roa (hash: EW07mUQxRP7f97x2KLlPw1Z2VU9hXKfncKzg+1xlCj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:35:bf:50:af:a9:2c:aa:74:4a:91:99:31:fd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: May 13 04:00:36 2025 GMT
Not After : May 14 04:00:36 2025 GMT
Subject: CN=feb0103fbe49686861aaaf978b6a3e654fb85c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:2e:8d:cf:47:60:0b:e6:c2:01:6c:e8:1e:
4e:f5:f3:be:93:d7:f2:b6:6c:0c:e9:28:7a:85:09:
2a:1a:e9:de:b6:0c:6d:2e:3f:9e:f2:3c:8a:19:05:
db:2d:7e:af:33:ea:ef:ff:30:e5:7a:e7:0f:03:e6:
bb:fc:d2:f5:81:85:a7:3e:64:f4:eb:e7:1e:32:f5:
1c:25:aa:04:25:11:60:07:4c:4a:ac:af:3b:37:a3:
2d:b6:d2:08:e6:8c:79:c6:6a:fe:d4:cf:61:17:88:
ee:27:00:7f:77:45:db:59:cf:18:7c:78:38:f7:6e:
05:83:26:2f:aa:d2:ea:45:4d:c7:be:41:1f:8f:30:
0a:2c:7d:58:de:85:bc:60:dd:32:c0:e5:03:d2:22:
bf:67:50:46:8e:97:bc:55:82:63:76:8d:1b:de:ea:
6f:c1:8b:c5:0b:08:91:49:21:41:b7:c8:27:01:f4:
10:d7:a1:49:2b:5a:bf:b7:31:64:db:e8:66:78:04:
ba:5d:fa:d8:28:c9:00:29:32:c8:eb:4a:32:ff:26:
22:20:8e:fa:a9:98:be:4c:6f:08:bd:83:f9:7f:81:
13:b0:f9:7c:5d:e1:40:5e:ff:b3:a9:94:cb:81:1b:
fc:80:25:7f:8f:45:5b:b7:ba:18:26:fd:88:d1:da:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B0:10:3F:BE:49:68:68:61:AA:AF:97:8B:6A:3E:65:4F:B8:5C:25
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e7:fb:b9:4c:58:1c:90:62:6d:44:a6:61:59:85:c8:fd:41:
8e:e9:07:9c:4d:2f:01:2a:39:d4:3c:2b:63:ac:6d:af:e4:c6:
9d:5d:52:54:77:6d:e5:3e:59:bd:b5:b6:cb:d0:1d:65:be:47:
9f:0d:be:81:80:0f:3e:97:8f:9d:de:f4:bc:66:e4:a9:2e:a6:
2f:4b:e5:2b:7c:a5:45:0e:1f:36:c3:32:08:d4:64:1a:20:60:
61:0b:1f:45:14:8f:b5:61:85:3b:7c:4e:8b:f9:1f:ac:e0:78:
3f:bd:46:9a:3d:69:4d:67:c7:60:d3:6e:0a:ec:56:80:1e:05:
d8:b3:ec:0a:04:6f:59:26:1d:84:0e:d0:4f:51:f2:b6:3d:d9:
80:b0:b1:04:82:eb:e8:ef:01:22:2f:46:e1:16:86:d2:70:f3:
cd:db:14:17:0e:fa:4b:5a:e9:37:6d:71:22:9a:42:06:a2:ad:
38:a2:bd:21:d5:c5:ae:fa:2c:78:8d:f5:a9:10:1c:c1:54:d6:
b2:4f:8f:56:c1:1c:d5:6c:1a:a3:bf:84:ff:d6:cc:d5:c7:79:
99:08:f5:cb:1d:b1:ba:ca:7c:a2:49:40:83:14:ae:e6:ad:66:
44:06:df:f1:5e:43:4f:f2:5b:6b:54:b4:1a:8c:65:f2:79:fd:
fd:96:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:54:48 2025 by rpki-client