Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: O3/GDKb+nST6Lp8h7n4UX7ZRQD9ipoSKaY/aGWeLosw=
Subject key identifier: 21:C9:1F:52:76:A9:2A:2E:E0:45:21:08:92:D3:90:3C:B4:88:C3:A1
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 0196BE25C32A7055A9F8DB8155146BAEC320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 06DF
Signing time: Sun 11 May 2025 07:01:07 +0000
Manifest this update: Sun 11 May 2025 07:01:07 +0000
Manifest next update: Mon 12 May 2025 07:01:07 +0000
Files and hashes: 1: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: LkCrw+82neGn0y439+uQEr7LXvPeLJ37Fr1bpkOhwWo=)
2: saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa (hash: evXXOhKr0k/9XMT8MxumeZizzHV0YoG5/EuRYGW5sl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:c3:2a:70:55:a9:f8:db:81:55:14:6b:ae:c3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: May 11 07:01:07 2025 GMT
Not After : May 12 07:01:07 2025 GMT
Subject: CN=21c91f5276a92a2ee045210892d3903cb488c3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:02:63:30:a6:a6:e3:83:ed:b4:d7:0d:6a:
20:d3:30:0f:59:a8:f8:8a:06:69:5e:73:d9:75:f8:
98:1a:a6:58:0b:ce:e6:9e:af:93:02:d2:fc:bc:46:
dc:e2:67:f6:c6:12:8d:63:15:d7:13:46:e7:ba:20:
f4:a4:83:bb:76:91:fd:e9:95:42:f2:8b:fb:b5:12:
b3:d2:62:de:0d:bd:4f:54:6b:59:42:1a:15:db:65:
28:f7:1c:60:5c:e6:32:9a:a1:0a:f2:62:3f:a3:62:
ad:af:fc:8c:98:53:07:13:44:36:61:a7:b4:92:40:
f2:e9:4b:e1:15:6e:8c:33:03:28:ec:69:8b:e9:ad:
5c:fe:10:c2:f0:45:45:82:25:60:0b:ed:34:a9:3e:
4b:2f:bd:cb:8b:dd:34:cc:b9:fc:fd:b4:b5:a6:37:
64:b1:af:9b:f8:9d:dd:49:8f:a1:8f:c9:62:0e:d9:
89:62:6c:6d:51:d9:58:c1:44:c2:00:7f:a8:15:33:
7e:4f:b3:e7:74:e0:e9:fb:f5:ca:61:95:3e:60:f4:
8f:0f:b2:e4:5c:57:2e:6c:0b:a6:e9:cc:15:f0:c9:
4c:19:19:0e:1f:e9:52:f5:97:12:0f:90:76:30:23:
20:1b:59:a8:cb:6b:33:9a:b2:78:9d:0e:6b:61:c9:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C9:1F:52:76:A9:2A:2E:E0:45:21:08:92:D3:90:3C:B4:88:C3:A1
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:98:31:f5:bf:c7:8b:27:82:1c:77:e0:9e:ff:fd:64:4f:0d:
51:d1:64:56:1d:17:6a:43:3d:0c:e6:f4:85:b8:7a:e1:de:b7:
1c:ee:4e:5d:52:d5:3b:b7:d7:3c:21:0a:93:8b:9b:46:08:45:
c9:d2:52:f0:8d:ed:47:db:f7:da:0b:22:67:f5:f8:ed:7a:30:
3d:5b:05:81:77:32:97:dd:39:1f:b4:16:5e:3f:b6:b2:8e:2f:
ab:b1:a3:04:63:c6:2f:05:17:97:ee:1c:ce:ce:a3:12:5c:a4:
dc:61:0c:7f:c2:a5:ce:72:5d:9b:72:b0:c1:00:ea:26:2c:4a:
14:78:17:75:29:5a:08:0a:3a:c6:93:4e:8e:84:49:bd:4a:0c:
2f:81:70:f0:f8:ef:a3:ad:45:f5:4e:2d:a2:0d:2a:4d:f6:46:
a9:61:16:44:4e:ab:0a:db:c3:83:91:56:4b:6b:bd:ce:03:cd:
dc:4b:b5:31:66:d3:4e:89:28:3f:9b:0b:bb:e2:5c:24:51:20:
a9:28:b0:61:64:89:97:65:f9:f5:da:f1:f7:0a:71:82:6f:e9:
8d:f1:37:d6:50:37:7f:e9:2b:34:0a:50:1b:3f:8e:17:8b:8b:
b5:d0:81:10:06:70:de:6e:31:8c:e2:87:03:0f:d9:2d:13:9d:
a8:88:ed:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:03:57 2025 by rpki-client