Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier: 71M/rVE2Izo9kC+1qy/UnYUG6YCKBGw7Cd+zXr8WYoQ=
Subject key identifier: 02:EF:86:0D:BD:24:92:A4:CE:A5:72:18:FB:55:B1:18:A3:03:1D:65
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial: 0196D74077BD47963287E520DC0F20F2908A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number: 04A5
Signing time: Fri 16 May 2025 04:00:48 +0000
Manifest this update: Fri 16 May 2025 04:00:48 +0000
Manifest next update: Sat 17 May 2025 04:00:48 +0000
Files and hashes: 1: 2DvVU95orox5IeGSdibufOYyF_M.roa (hash: zYc2kejhvwZAMUP9rtgZ0VImRS6xXrZBfW+6RhgOP2c=)
2: _vBlwHfpCbgKUBFoqSs3ggu60nI.roa (hash: AsAILNa2VMgTcOZ13cTcAxG+d9Mwo5a4AZ6ZUVGbk/c=)
3: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: o6oyRjBmx5ZpkMbGT+U9s8ceBuZ7DyCMhBQrhMXKOgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:40:77:bd:47:96:32:87:e5:20:dc:0f:20:f2:90:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Validity
Not Before: May 16 04:00:48 2025 GMT
Not After : May 17 04:00:48 2025 GMT
Subject: CN=02ef860dbd2492a4cea57218fb55b118a3031d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:c2:fe:51:17:7d:d4:03:51:d3:05:25:b1:
2f:dc:c7:d4:cb:f2:0f:56:f4:15:a4:1d:fc:94:ba:
b2:cd:85:37:3c:24:48:37:5f:25:0e:5f:77:53:d3:
dc:94:23:73:e8:b5:b6:1f:1c:43:17:c7:5a:b9:7a:
f2:0e:62:ff:82:ac:67:bc:0e:4b:c3:22:b8:87:51:
f6:ec:75:b9:81:24:43:78:1f:94:48:47:52:25:e2:
86:cd:6a:1c:ce:da:da:59:5f:d0:c7:b8:ed:0b:e2:
03:54:84:77:02:f2:45:32:5a:39:15:66:e4:f6:13:
b1:d2:ed:d3:d4:3c:34:74:25:dc:91:d3:69:d4:7d:
82:56:20:07:7b:43:a7:7f:fa:e3:6c:a5:0d:1d:c3:
41:25:f8:b3:a7:d6:ca:89:f7:a1:e4:10:40:31:8d:
a2:e1:1a:e8:3a:d1:90:84:b1:20:50:b9:be:ae:f7:
bf:d4:1e:3e:a6:d4:36:ca:eb:99:da:ad:e7:7c:4f:
22:e1:28:fe:3d:ce:4e:c9:85:b6:8f:3b:2a:4c:b0:
31:e3:8f:9e:c6:cb:5f:45:dd:36:c2:13:98:46:06:
65:84:fa:7e:00:e1:ab:68:e4:6b:1b:84:e8:5b:90:
40:40:40:06:7e:8d:b3:f5:2f:d9:63:f7:10:cc:21:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EF:86:0D:BD:24:92:A4:CE:A5:72:18:FB:55:B1:18:A3:03:1D:65
X509v3 Authority Key Identifier:
keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f9:71:bd:bd:0b:af:bb:2d:ae:b3:a0:5c:ba:01:b8:cf:b6:
bd:e3:1f:a1:17:ae:8e:73:8a:4c:c7:ca:d3:3f:77:2d:6c:3a:
28:3f:34:ac:97:dc:c0:2e:97:04:95:21:15:01:12:59:1d:95:
08:32:a7:e1:56:06:91:f4:7a:13:a1:af:cc:2a:f9:0c:39:90:
e3:78:41:be:16:7b:76:31:96:4c:a9:22:ee:dc:2f:56:a3:f4:
e0:f0:76:fd:79:41:f9:27:e5:e1:e7:85:45:79:98:b3:63:6a:
c7:f5:39:49:6e:c8:78:4d:ff:60:dc:8a:c1:7b:bc:95:2a:24:
4f:3a:74:81:d0:d4:46:12:ce:65:55:f9:fc:17:2a:7e:af:67:
44:12:a9:da:5d:48:14:99:0d:d9:8a:de:12:ee:07:78:f6:1c:
db:6d:c3:c8:01:79:84:0a:a4:b9:96:45:a5:1d:92:7a:76:38:
06:d7:93:1d:10:98:6b:c3:84:c0:e5:80:98:71:53:f5:41:df:
46:12:1b:f1:98:46:8c:7e:b0:f6:2d:18:13:bc:87:0d:f7:34:
4e:2c:b8:1c:99:e9:df:2e:e0:b5:e4:6c:b9:29:1e:de:ba:d8:
ea:2f:f0:8a:44:56:50:04:96:36:1d:94:f9:0b:6e:e1:e8:db:
3c:ee:91:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:13:33 2025 by rpki-client