Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier: H0eqN3JutRBoQLcegAMZsSTTHsR8dHgBIUWORadKpCA=
Subject key identifier: BF:D9:9A:68:59:AF:1F:04:59:46:46:45:87:C7:82:CB:22:C9:56:C3
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 0196C4956A5DC2A7460458981FA47156BA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number: 050C
Signing time: Mon 12 May 2025 13:00:48 +0000
Manifest this update: Mon 12 May 2025 13:00:48 +0000
Manifest next update: Tue 13 May 2025 13:00:48 +0000
Files and hashes: 1: PHlmZzsVHNdtkbgZZGVIzuxsSOI.roa (hash: nURq80w5QR4Tg4i37nqE1f7UXJnobOs0QVmX70MkIAU=)
2: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: zDsDvdb+e0fe05QP1JndGCBLzZ+S2Zp0G0R6AOK6+Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:6a:5d:c2:a7:46:04:58:98:1f:a4:71:56:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: May 12 13:00:48 2025 GMT
Not After : May 13 13:00:48 2025 GMT
Subject: CN=bfd99a6859af1f045946464587c782cb22c956c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:be:a6:8d:50:71:f4:c1:6e:02:ee:eb:63:
f2:d9:b1:f2:a2:ca:8d:68:cb:46:98:40:06:14:fd:
e3:c6:c9:6e:ff:21:fc:c2:77:70:4a:89:d5:c8:37:
04:df:ee:4a:3d:2d:d5:bd:ab:59:a1:6d:77:5a:73:
72:09:6d:6d:41:3b:45:f0:87:18:67:a6:b6:ed:aa:
71:6b:57:8e:21:bc:d5:3f:9c:cb:ff:24:d9:88:b3:
d1:94:12:6b:a6:16:1c:ce:f7:9a:a0:23:63:ca:ac:
4b:35:eb:57:31:9e:b5:8d:91:ee:29:81:77:7b:da:
9f:d5:87:a7:a2:bd:6d:52:a5:9b:e4:8c:4f:01:03:
a8:69:b4:23:46:0f:08:b4:4a:de:1c:d1:3c:63:cf:
dc:96:a3:40:ad:b0:23:c9:68:be:e0:47:35:eb:19:
0e:19:d2:45:55:15:cb:1b:5b:88:24:bc:c3:94:3a:
0c:c0:41:ab:ae:d7:68:99:ba:fa:11:d2:15:48:83:
5e:3e:22:17:12:ba:b0:51:04:e6:ef:0f:ea:a2:6e:
52:00:ca:dc:34:e2:ae:7b:53:96:85:82:03:86:3f:
03:19:82:9b:76:f8:6a:88:ec:fd:a4:dc:8a:99:52:
eb:82:09:48:4b:8f:5a:66:35:e9:5c:9d:01:15:73:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D9:9A:68:59:AF:1F:04:59:46:46:45:87:C7:82:CB:22:C9:56:C3
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c4:08:78:7c:02:9d:a7:65:7f:a8:bf:21:dd:ed:7e:9c:c6:
f8:ae:27:96:45:db:29:f8:68:78:9e:22:a5:23:ac:06:e8:29:
15:be:99:67:f5:5e:bf:57:ae:14:2a:70:f2:68:43:13:f6:d5:
4c:46:d3:89:f9:99:47:a7:95:ff:36:24:10:2a:6c:71:71:62:
af:89:2a:38:84:8e:85:65:a0:7d:52:be:17:4c:e3:73:fe:43:
a6:d0:68:98:35:66:30:58:8e:a0:6d:69:89:ea:72:c9:07:e5:
83:f1:68:ee:74:a9:e2:23:9e:50:04:08:3e:81:11:b2:4c:3d:
b4:0d:62:d8:95:73:54:d3:74:2a:b5:3a:ed:8d:63:f1:e3:d2:
de:33:75:7f:7b:8d:dd:e5:04:e9:3b:fb:6c:ef:55:9b:3a:3c:
61:e3:ad:8e:b7:3b:cb:81:0f:29:86:a7:77:d6:73:66:bb:00:
9d:ab:49:8a:33:a1:f4:96:e7:29:31:0f:30:a4:71:8d:9d:ce:
73:1f:ed:07:cc:4f:ab:c5:7a:ac:4b:79:f6:6d:e4:5e:7b:04:
f9:1b:d2:86:b2:5a:a5:d2:1b:01:d7:8c:e7:9c:00:05:d8:30:
a2:01:f0:7d:f6:16:47:1b:d9:ab:8a:6f:f3:5a:38:b9:01:05:
e5:67:dd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:52:48 2025 by rpki-client