Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: rNhycC1W4vf/mTFp4H+LIdte9ydVt3I9S5Iud0NYQNE=
Subject key identifier: 99:36:1B:37:EC:A4:FE:FE:5C:D0:1C:04:EF:1F:65:1A:5D:2E:B8:BC
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 0196C19424D305C45AA5F7B40CE1D5966C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 0C18
Signing time: Sun 11 May 2025 23:00:33 +0000
Manifest this update: Sun 11 May 2025 23:00:33 +0000
Manifest next update: Mon 12 May 2025 23:00:33 +0000
Files and hashes: 1: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (hash: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=)
2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: gfhuIm08Df6eDH+ZK0jFKnAMv7jrKGBNtsgEkTPm7BM=)
3: qo2a4lO3f4INhuJwHg-a_kb1Uw0.roa (hash: Mq/0MPb+8DLoVQSsA/LmGY9yMeYe1hfS1EX+C5wkfg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:24:d3:05:c4:5a:a5:f7:b4:0c:e1:d5:96:6c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: May 11 23:00:33 2025 GMT
Not After : May 12 23:00:33 2025 GMT
Subject: CN=99361b37eca4fefe5cd01c04ef1f651a5d2eb8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:af:db:08:d9:53:91:d0:28:e5:c4:e6:06:
f8:1f:02:b9:f1:a7:4a:96:cd:04:bc:97:36:11:42:
18:7b:f4:1b:fc:2c:8f:a4:63:36:a3:82:34:7e:77:
f3:09:2b:c3:41:fd:8f:34:cc:85:4e:b8:37:b5:2b:
ec:1f:ff:78:67:14:41:b4:84:8c:b5:5c:90:ae:04:
56:ab:8f:e9:ce:5d:2b:e7:18:d1:7b:8d:70:78:7c:
24:fb:41:e0:50:8c:f9:78:65:be:c6:87:ad:96:c2:
32:96:17:66:2c:23:14:f7:54:bb:d9:c8:63:ba:f8:
2b:ce:45:10:77:b6:50:a2:34:33:ea:0a:cb:7f:aa:
18:fc:31:9f:5d:d8:3f:ac:de:57:38:b6:de:55:3e:
d8:c6:1e:86:1d:a7:80:c2:19:35:12:dc:75:82:e9:
81:c0:6e:d4:10:b0:6e:c9:b5:9f:3f:37:42:54:30:
c8:f4:66:2a:4a:8a:eb:62:cb:54:40:c0:d2:2a:d4:
dc:39:a9:3e:54:9f:39:5b:52:b6:2e:20:20:18:40:
6b:0d:0e:b2:81:28:44:ef:6c:d9:4a:1f:63:c2:e9:
97:93:e4:29:ad:7e:6b:c1:19:30:5b:a5:03:1b:35:
ee:50:70:6c:56:01:a8:7d:74:37:fe:f7:bc:68:30:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:36:1B:37:EC:A4:FE:FE:5C:D0:1C:04:EF:1F:65:1A:5D:2E:B8:BC
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ce:f2:21:3e:18:35:84:5e:c9:1f:80:bc:7c:46:81:3d:6f:
48:4a:f3:3d:0d:13:93:bc:72:92:0d:8b:3f:dd:5f:ed:d2:59:
a5:d5:07:a0:47:ce:21:9f:8e:1e:39:bd:7f:ad:98:6d:db:d1:
6b:c9:f3:f8:d0:41:b5:fe:d7:0a:87:c8:1d:67:40:09:e7:48:
d0:6d:05:d3:ec:fc:a3:e1:41:9e:9b:92:d3:b3:3c:87:05:92:
e4:15:ee:e3:1c:fa:83:fb:f7:73:a8:25:33:f2:da:78:14:8c:
3e:e1:02:b8:74:01:d2:ff:f6:8c:55:6f:3b:21:2a:2f:42:ca:
e9:b3:51:c5:6b:6e:fd:ad:29:59:a9:ee:c6:44:74:17:44:72:
1b:e7:de:b4:34:0c:cf:40:df:66:3e:44:4b:5a:ff:3e:8f:d3:
d7:07:95:ff:d0:03:1b:0c:9b:15:a1:ec:16:8f:ff:d6:9e:5e:
3c:28:54:ea:64:42:cc:15:b9:38:22:76:e3:8b:ca:9a:9c:57:
ce:5a:df:0b:bc:38:00:76:9b:c5:13:50:d0:a8:f7:3a:48:3c:
e3:5d:ed:7b:46:17:27:89:a2:b7:54:88:c0:c8:8b:7c:07:38:
32:37:a8:dc:45:7a:2c:0e:cb:ae:ac:9c:7b:d8:21:dc:60:f7:
21:1f:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:17:28 2025 by rpki-client