Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
File: iF5uZejXQYIDljRWbNH6KysyVwI.mft (raw, json)
Hash identifier: VaNtnj9mrr7iDaYa/W5WLWLSwyr3QJRkXotRLVj3Ox0=
Subject key identifier: A3:D6:06:C6:73:23:71:E2:2D:C7:0C:05:E7:1B:48:28:ED:5B:02:A6
Authority key identifier: 88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
Certificate issuer: /CN=885e6e65e8d74182039634566cd1fa2b2b325702
Certificate serial: 0196C2A68B9F603D20D83F85DAB55FDDE12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
Manifest number: 0137
Signing time: Mon 12 May 2025 04:00:16 +0000
Manifest this update: Mon 12 May 2025 04:00:16 +0000
Manifest next update: Tue 13 May 2025 04:00:16 +0000
Files and hashes: 1: 7R9_GJs-RL0ErJSF-LSh2qvUnoE.roa (hash: vAKa7err3VX58GgPpqscTS8KcHYZ802QYuzRZdVwrE8=)
2: iF5uZejXQYIDljRWbNH6KysyVwI.crl (hash: X4SWSdU++i3ZA09257ATUWah4VlfxMYbpJQzQD6M6Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:8b:9f:60:3d:20:d8:3f:85:da:b5:5f:dd:e1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885e6e65e8d74182039634566cd1fa2b2b325702
Validity
Not Before: May 12 04:00:16 2025 GMT
Not After : May 13 04:00:16 2025 GMT
Subject: CN=a3d606c6732371e22dc70c05e71b4828ed5b02a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:f2:e8:0b:48:6e:00:54:c8:5f:05:d6:a4:
00:68:01:59:06:b7:f6:32:78:49:04:c9:d7:bb:52:
55:69:35:b7:98:14:60:f6:0d:15:c1:0d:89:1c:85:
69:2c:04:a5:21:52:64:ad:0e:ea:fb:70:8a:c1:c6:
9a:c7:30:03:0d:22:82:08:a3:af:3c:5f:16:9e:11:
34:c6:09:28:d3:cf:8c:bc:a3:fd:af:98:4e:c5:96:
11:fe:f2:bb:d8:39:d7:0d:f5:59:b5:4f:e4:95:25:
1b:b7:09:0b:d4:0c:0a:f4:56:3f:b6:6c:b4:e8:31:
04:cc:d7:cf:23:8b:95:e1:de:1e:52:5f:4c:a4:2f:
25:f1:5e:8d:90:28:c7:2e:3d:79:47:ba:e2:12:f7:
77:85:cc:64:ce:dc:a2:bd:48:4d:aa:86:ac:25:b3:
e7:ea:96:6e:e9:0b:15:a9:b6:d7:dd:0d:a2:2d:84:
0f:49:b3:59:93:cc:19:66:a1:95:a9:ef:d5:1a:10:
06:4a:55:bf:ed:10:b8:da:22:bb:21:56:b0:be:79:
1f:92:a2:c1:ec:68:70:6d:e6:87:ed:0c:2b:4d:bf:
88:1a:b6:e2:d0:df:5c:84:87:8d:b0:3a:2d:f3:ed:
5d:a0:63:fa:9b:dc:64:1d:6e:56:17:f8:a0:21:fe:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D6:06:C6:73:23:71:E2:2D:C7:0C:05:E7:1B:48:28:ED:5B:02:A6
X509v3 Authority Key Identifier:
keyid:88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e7:68:d7:e4:d1:5d:c8:55:b9:28:14:19:55:b6:32:4f:55:
2f:ba:f6:e5:2c:90:2c:87:77:80:e7:64:94:aa:c8:85:3b:77:
d4:dc:49:e8:dd:89:f0:87:22:99:f8:ac:dd:c0:8f:6e:5f:e1:
57:c9:93:82:8e:7c:b8:90:b7:3b:d9:45:43:67:35:71:88:4d:
f8:a8:7f:e6:40:9e:c9:11:f1:5c:f2:2e:f8:80:dc:80:df:b1:
b8:69:1a:d1:93:ce:a9:94:a2:53:52:17:1d:d6:46:97:66:e2:
59:a9:72:c7:d6:b3:d3:ba:d3:a4:76:ca:34:a5:47:50:91:14:
eb:a9:8f:c7:a6:52:8e:50:86:35:e9:a5:38:54:12:6b:47:63:
4c:3f:9d:bb:43:02:b8:e9:1f:97:ad:d4:e3:14:53:ac:58:64:
a5:fb:d2:a4:e3:9b:e5:22:54:ae:79:02:64:13:88:d0:63:d9:
76:3e:8d:66:4f:fe:3c:1f:38:be:e7:9d:b9:9f:e6:d9:af:2a:
cc:66:cd:63:19:72:9d:00:82:d3:73:2b:8d:3a:95:ba:dc:82:
79:72:d8:77:2e:b4:d4:7a:11:93:97:06:93:b8:3b:c4:b9:b6:
04:e4:13:4a:ea:2d:47:2d:c2:2a:09:65:b0:8c:33:10:58:5a:
5e:bb:17:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:18:08 2025 by rpki-client