Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: mLOLsIL2M+eRnVl2Wg+nEczxUZQ1EuWHX5Mrv30Iz8U=
Subject key identifier: 07:7E:BC:9F:B2:BC:CB:A8:A9:55:3D:53:27:B4:CB:CA:BC:57:34:B8
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 0196B9DAD46F380BCA0D3BFA68767F5D9031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 1103
Signing time: Sat 10 May 2025 11:00:48 +0000
Manifest this update: Sat 10 May 2025 11:00:48 +0000
Manifest next update: Sun 11 May 2025 11:00:48 +0000
Files and hashes: 1: 6nn-10KbmPgCc6evrpm-TWzQPN8.roa (hash: o4INP15AI01CmXxJKcY1+iiTvm9rSpAtz6YN4QZ0dG0=)
2: ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa (hash: rQ9TfGtesxjebHDlAk08FQJ/mYhxwGmDbJSu6X6Tu58=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: juwWhvBH0aP6H8toPx0/NaEOBjCV2uyop2SKs15kz0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:d4:6f:38:0b:ca:0d:3b:fa:68:76:7f:5d:90:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: May 10 11:00:48 2025 GMT
Not After : May 11 11:00:48 2025 GMT
Subject: CN=077ebc9fb2bccba8a9553d5327b4cbcabc5734b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:2c:38:67:ac:f9:07:c6:e0:82:bc:1b:da:
cc:4b:ff:4c:41:ff:89:f2:ab:b9:22:ec:d6:3a:11:
d2:85:50:06:37:ca:61:fd:6d:67:68:9c:f1:a3:27:
6a:da:d9:fe:a4:68:56:1a:01:1a:fc:4c:f4:20:ed:
76:1b:87:1a:64:59:44:af:05:f2:8e:e2:b3:20:cc:
89:88:ad:0c:c1:08:0b:f6:85:10:77:52:bb:1a:c6:
fa:a2:6f:9b:55:53:a1:27:5f:ee:fd:74:6a:18:34:
d5:52:1c:00:d9:4c:ce:a5:d2:bd:2b:a8:8b:29:43:
9a:34:d0:58:5a:00:b5:d1:4e:c0:6e:79:bb:6d:6b:
db:30:49:5a:ee:a0:e5:be:27:ab:03:73:c6:ba:3c:
98:91:94:eb:04:1b:37:a0:56:cf:d9:56:63:b7:14:
d2:34:0a:f7:f1:0b:a8:51:dc:18:ab:d8:eb:15:7a:
16:03:d7:83:c5:b0:d6:ee:6f:76:83:d3:ed:ca:11:
d3:48:0b:a6:56:37:b1:65:5c:ec:1e:3b:6c:3c:da:
e7:18:71:98:7b:ea:47:bd:e0:87:e6:53:9e:69:51:
31:cd:2a:64:8b:c0:a4:96:78:0c:94:b9:90:fe:35:
a5:91:7c:b2:4e:1c:05:e8:6b:2f:32:e3:8e:bd:73:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7E:BC:9F:B2:BC:CB:A8:A9:55:3D:53:27:B4:CB:CA:BC:57:34:B8
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7c:e6:30:3f:c1:80:e4:37:6f:e4:e8:fa:f1:f8:63:5a:f5:
ce:6d:8f:db:21:02:fe:dc:01:25:25:af:40:2b:0e:96:d7:6b:
77:94:52:02:37:ee:ee:d6:4d:80:07:25:93:a8:8e:33:1b:36:
14:be:7b:43:0e:99:67:ab:50:eb:ac:58:c3:c6:61:c6:a2:f8:
05:3d:ca:62:70:d5:e6:6e:79:95:8e:5b:62:ca:07:04:c0:bb:
10:a9:8a:04:4f:7b:75:fd:e8:a2:44:f5:fc:c8:82:85:c4:d8:
59:02:27:86:1d:50:21:47:50:b9:67:c8:c8:5e:60:0c:cb:8e:
46:26:f2:24:6f:70:57:51:71:20:93:bc:16:c2:01:e0:27:b3:
70:fa:ee:d8:aa:27:78:e4:a4:c8:39:65:e1:65:25:8e:49:55:
6f:3d:b1:78:3f:66:eb:55:bb:cc:16:3f:44:d8:c3:1e:2c:14:
45:f7:d7:7d:e8:da:55:14:a6:b9:53:4b:8e:45:41:a7:a8:ac:
b9:57:a1:8a:ee:11:fe:33:f1:74:61:b1:c9:8f:97:4b:da:29:
ed:db:a3:39:6a:a5:29:33:d8:e3:ec:ee:7b:41:c5:b0:23:ef:
44:bb:82:35:7a:4c:86:0a:ac:4b:4c:65:8d:ba:48:be:1e:07:
2e:0c:66:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:03:32 2025 by rpki-client