Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
File: roNVKZN0KXkz0oH1HrdLpcLJHME.mft (raw, json)
Hash identifier: kdDmhABxqGa2Xv1oJRy15ObnykXPqNKrFsT0Mcej7VM=
Subject key identifier: 57:68:A2:D6:B4:5D:C2:55:8F:6E:05:52:13:27:C9:96:17:C3:9D:AF
Authority key identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
Certificate issuer: /CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Certificate serial: 0196BF3807BA388DB0E6FF9809DCE17DB7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
Manifest number: 1088
Signing time: Sun 11 May 2025 12:00:42 +0000
Manifest this update: Sun 11 May 2025 12:00:42 +0000
Manifest next update: Mon 12 May 2025 12:00:42 +0000
Files and hashes: 1: RaM_OWQwVXsafD9lAhumGxuaVJ0.roa (hash: 9wqEU77JRh8FONfv1sMAYtuNvig1s1ZaVt3dre8RnDg=)
2: roNVKZN0KXkz0oH1HrdLpcLJHME.crl (hash: 3beXCBcp0+paLDqSDCX4c7L+U63Ycj4wNcgvMiaO4JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:38:07:ba:38:8d:b0:e6:ff:98:09:dc:e1:7d:b7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Validity
Not Before: May 11 12:00:42 2025 GMT
Not After : May 12 12:00:42 2025 GMT
Subject: CN=5768a2d6b45dc2558f6e05521327c99617c39daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:a5:c0:f7:c9:16:89:85:2a:a0:b2:3d:c9:
0f:1b:d2:2f:0e:82:80:f9:93:c4:80:22:a2:64:a5:
3c:27:1c:c0:38:9f:4b:1e:3b:36:4a:a6:ff:73:cd:
27:e9:d7:9a:7e:de:2a:a8:a2:2d:40:8b:e5:e7:a3:
19:9c:18:8f:c7:9e:38:41:7d:d9:86:cf:ce:6a:60:
31:ed:ba:97:aa:90:52:1d:64:f2:e4:2e:23:9f:06:
c5:56:8b:84:2c:1e:73:7c:12:97:95:99:3b:22:d3:
35:69:00:88:fe:b2:0b:09:01:ed:fe:17:31:25:76:
c8:b6:cb:b5:f7:f4:61:03:15:2a:81:4f:1a:49:56:
06:42:42:82:2c:4c:2f:5b:3f:17:7b:6a:8a:fd:c9:
87:fc:52:e6:3b:7a:3d:e9:f8:d2:00:d4:c1:8b:e1:
aa:00:99:c7:38:58:f6:71:a7:92:a7:38:24:a3:63:
53:db:12:14:49:7e:ab:d5:a3:34:59:b1:a6:ac:9a:
28:16:b5:b7:3a:44:da:9c:6a:89:51:11:2b:b1:12:
7e:47:b3:68:6d:99:98:5c:0b:8b:97:28:ce:b2:a0:
82:ba:92:9a:86:ae:e3:7a:73:b3:d8:17:61:5e:c0:
98:df:27:4c:6b:53:cd:03:53:c1:1e:6b:fd:dd:45:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:68:A2:D6:B4:5D:C2:55:8F:6E:05:52:13:27:C9:96:17:C3:9D:AF
X509v3 Authority Key Identifier:
keyid:AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:48:f5:f3:3e:1b:4e:69:1d:3c:17:b5:e0:7e:dd:a2:8b:41:
2e:e3:24:b3:4b:02:61:5a:2c:b7:d7:bf:f8:45:95:42:27:8e:
6d:be:d4:03:b4:3a:13:99:f4:64:b8:f2:10:d5:00:8f:fb:65:
85:4f:36:8e:df:0a:e0:85:c1:f8:5a:5c:46:57:47:2f:f3:f1:
98:ac:14:fa:27:d7:2c:c5:ca:e6:1e:24:cb:e3:87:63:35:e7:
d7:56:d0:f3:b1:95:a4:13:65:70:79:0c:43:32:66:9a:20:29:
c1:28:ea:80:69:07:a5:4a:9f:d5:fc:c5:ed:40:0d:09:83:dd:
77:aa:e9:ad:78:34:6e:8c:31:42:79:f0:78:7b:da:51:73:84:
7a:f9:19:7a:2f:ee:73:d0:e6:17:de:23:05:a8:46:e3:96:77:
51:e4:28:b6:2b:c2:00:4a:bc:f7:16:de:b2:61:86:9a:6b:f4:
54:e9:b3:02:1f:8b:b1:d9:08:50:d0:81:dc:83:8f:3f:e5:9f:
f4:16:2d:1e:49:26:fd:5a:3c:1b:0d:7c:2b:88:b4:2f:bc:d6:
f2:17:a2:8f:13:f8:a1:61:51:51:82:8f:6a:aa:9d:1f:16:0a:
06:51:a7:03:21:62:b0:fc:6c:46:61:da:34:c8:01:9d:0a:65:
f5:00:f5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:36:44 2025 by rpki-client