Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
File: 1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json)
Hash identifier: jTMOLr8f0QXbxHXVc4fe2ajYTmNg1ozmSa1dOycK1DQ=
Subject key identifier: 60:4E:44:E9:D8:AC:68:2D:05:28:73:8C:57:B5:3E:33:E8:AC:D1:0D
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 0196BF37E6A981700A85158396453ADCFA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
Manifest number: 0961
Signing time: Sun 11 May 2025 12:00:33 +0000
Manifest this update: Sun 11 May 2025 12:00:33 +0000
Manifest next update: Mon 12 May 2025 12:00:33 +0000
Files and hashes: 1: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: tmkIBlZ8pDZy7mFgOHgdlus6/0sxttGFQ+kKpgGFaGQ=)
2: XjL_VzQpHSFAWpxr8LGCRwpbqdA.roa (hash: Brx7GKcJBpG7UwHG4ArWnTWvC9k75AexdudLOh9h/Pw=)
3: _iMkYM2SlDhb8BiWpSMXooueyD8.roa (hash: S5QL6kGITU62oZ1okwVbSjZ25wXtKrDyDz3OlnPy3eo=)
4: r8lD_AoxI_vqECkRvj5MGM36UnA.roa (hash: 3Vhj0OvbLDXudkl6wnwYXZg0rj1sNr06FqG4dJbW2C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:e6:a9:81:70:0a:85:15:83:96:45:3a:dc:fa:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: May 11 12:00:33 2025 GMT
Not After : May 12 12:00:33 2025 GMT
Subject: CN=604e44e9d8ac682d0528738c57b53e33e8acd10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:eb:28:9b:af:e0:c8:6c:df:3e:d0:37:ef:
c6:b8:f6:7f:d0:ec:c1:8c:72:08:6a:88:9d:89:3b:
67:b9:b3:df:2c:d5:c5:a2:cc:73:8b:28:08:7e:bf:
9c:1e:2d:17:7a:24:81:17:04:8c:87:13:9e:91:75:
e1:44:c1:76:59:cc:1a:9e:88:16:8e:07:41:1a:29:
2c:f8:a6:58:76:9a:5d:f4:d4:33:54:b3:0d:1f:d0:
19:aa:b4:05:08:d2:77:c8:9c:3d:d9:49:96:b1:85:
85:78:05:3f:a6:b3:66:7d:6a:26:0a:ab:a2:b4:2e:
12:cd:3e:40:86:4f:e1:f9:ef:97:e6:9e:76:1d:35:
d8:a1:b7:22:26:b3:51:06:cf:ce:0b:e9:7b:fb:4e:
25:3e:e0:fc:05:0e:98:a9:0e:62:14:53:5a:da:2c:
76:09:95:6f:00:d1:f4:21:c7:40:b9:ce:da:69:4d:
42:d2:5e:6f:3e:77:1e:7d:66:86:cd:6e:06:a0:fe:
bd:7c:6b:34:5c:45:9e:95:5f:1c:6e:70:07:35:e7:
2c:e9:c2:38:95:03:c4:74:27:5c:8e:f1:74:a3:4a:
82:bb:bc:92:e1:1d:77:24:4b:fc:1b:d2:38:0d:65:
7e:cc:0e:63:ca:72:ca:6c:6f:66:af:0f:17:74:b2:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:44:E9:D8:AC:68:2D:05:28:73:8C:57:B5:3E:33:E8:AC:D1:0D
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:8d:d8:2d:cd:8e:f5:91:a1:a8:70:e0:a8:e3:34:bd:c3:a7:
8f:de:bb:37:9e:01:d9:fa:a1:56:3f:3c:8a:88:9a:e3:c0:c9:
bd:ac:92:f6:c7:a8:d1:28:be:4b:a4:2a:88:37:4d:0c:f3:8d:
c5:8a:ab:a2:17:a3:d1:f1:1c:e6:91:22:7f:88:ee:57:fe:00:
6b:bd:c2:23:1e:19:af:6f:bb:b8:70:4a:7b:0d:8d:38:91:e2:
91:dd:4b:ef:5f:01:b3:6d:67:53:cb:f1:3a:c0:54:9d:77:5b:
6b:9b:33:0e:bb:6c:1a:ff:95:d2:78:5d:79:13:5e:f8:da:69:
08:3f:60:c4:56:bd:a5:28:2c:53:bc:89:62:8f:13:2d:dd:8a:
60:36:af:6f:29:80:79:d1:de:f2:83:17:59:b9:cf:2c:2e:85:
a3:dc:87:c2:8d:fa:f9:0b:88:a5:89:0e:f9:c6:8f:63:18:0d:
64:84:a0:44:f8:f2:a7:40:8b:e4:12:f9:07:a0:f6:f6:fc:54:
88:e9:e5:de:ec:f0:d2:fe:3e:0b:3d:8e:65:02:1e:c5:0c:8d:
1c:b1:c6:34:72:dd:b3:65:a5:12:a1:84:b7:18:1a:54:d3:be:
1e:9d:25:fa:a1:9e:99:e0:40:91:0d:66:47:96:20:85:3b:ee:
93:de:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:57:38 2025 by rpki-client