Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
File: fD2KpDg1BKMa_0sAaBCga88DBa4.mft (raw, json)
Hash identifier: o2gBPcE37NbpyEWUDQthMOVqowwbUXWFb5YqBGt1jhE=
Subject key identifier: D5:79:0B:71:9A:00:2A:62:48:A5:22:6A:57:35:65:FE:54:99:F3:4E
Authority key identifier: 7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
Certificate issuer: /CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Certificate serial: 0196BFDCC339549434E39E69B3BB4BD7D56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
Manifest number: 1110
Signing time: Sun 11 May 2025 15:00:38 +0000
Manifest this update: Sun 11 May 2025 15:00:38 +0000
Manifest next update: Mon 12 May 2025 15:00:38 +0000
Files and hashes: 1: 8L2O5GlhNp_lrqBMRrzhkCl_FU4.roa (hash: MpUCXGi4iU4O/s2W0Ri/evmaR2tEREi873mtgHCWuJE=)
2: fD2KpDg1BKMa_0sAaBCga88DBa4.crl (hash: tFLeyK+TKomiaBljDskK1RlZx5TAtJ9gjA0OOP79AtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:c3:39:54:94:34:e3:9e:69:b3:bb:4b:d7:d5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Validity
Not Before: May 11 15:00:38 2025 GMT
Not After : May 12 15:00:38 2025 GMT
Subject: CN=d5790b719a002a6248a5226a573565fe5499f34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:c3:04:7f:8f:fc:fb:dc:e9:7a:08:bb:8b:
64:2b:56:0d:db:d4:14:76:21:25:07:97:e4:88:3b:
a2:9f:e1:69:a8:e1:b6:45:cf:6b:fa:46:1c:57:95:
c2:cf:ec:69:82:65:c2:ed:6d:2e:5c:51:ac:fb:7e:
f1:02:21:3c:94:0c:48:ce:01:29:9a:eb:ba:8d:db:
df:b1:55:a2:e7:8c:3e:f8:0b:e2:26:ef:b9:09:32:
88:1b:9c:84:4b:57:a7:2f:4f:98:5a:5f:15:74:88:
0f:ca:f8:fb:96:e7:e4:4f:29:a7:a2:ce:9b:16:96:
1a:a3:48:fe:16:5b:30:7b:48:63:98:c3:3b:38:c0:
a8:38:4f:ca:b3:95:73:f6:73:6f:10:35:ec:d7:91:
7b:f8:fa:c5:13:37:f6:b5:29:d6:31:c8:2e:29:f4:
bd:08:10:81:a6:61:7c:69:ad:1c:fb:f2:89:73:2c:
71:5e:f0:02:d1:c8:3c:67:71:9f:93:b1:1b:b2:a6:
f2:50:4b:0d:a6:65:58:32:4d:59:52:7b:8e:b6:18:
99:08:80:87:11:a6:4c:03:4d:ce:a2:be:32:a9:2a:
40:80:50:45:d5:68:07:a9:67:14:cb:59:c6:9e:cd:
78:69:ff:5a:dc:39:20:df:95:8e:34:4a:a0:3c:23:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:0B:71:9A:00:2A:62:48:A5:22:6A:57:35:65:FE:54:99:F3:4E
X509v3 Authority Key Identifier:
keyid:7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:45:e7:10:03:7a:86:c0:40:f2:2a:d8:21:79:3f:51:4d:e6:
31:3f:76:ea:06:d8:67:63:04:de:ba:47:d6:d1:c9:bd:52:06:
cf:5b:77:73:97:9b:d4:27:70:8d:b7:44:61:90:eb:19:2e:f3:
c6:f7:45:15:69:2a:34:ac:8f:dd:9e:15:23:a3:fe:16:2e:70:
f8:df:9f:ac:5c:29:5b:31:5d:8c:22:38:e1:85:0f:08:f1:21:
ef:f9:69:b4:ba:5f:48:a1:06:ad:21:b4:62:df:0d:af:87:9e:
6d:03:e0:bd:90:d6:60:09:e5:b5:cc:f3:ec:6a:32:4c:3e:9d:
d5:96:94:de:4f:9f:ef:6e:c0:87:ae:c1:9c:f4:f8:35:9a:42:
41:ee:1b:58:ff:3b:28:f4:7b:d6:03:df:90:6f:19:78:ff:ce:
aa:fb:b6:a6:78:78:21:3a:de:cc:31:64:30:87:1f:ad:80:70:
22:60:b0:df:01:42:8f:db:df:f8:72:6a:e2:1d:53:ec:0f:fa:
80:6a:85:87:18:80:55:1c:06:92:29:c7:1f:3f:cf:70:d1:6f:
a9:6f:1e:90:fc:86:81:d4:1d:81:44:a0:57:c4:d0:c0:ac:76:
2f:26:19:80:4f:52:9f:95:e2:ad:50:68:db:fa:9b:7b:07:02:
28:89:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:59:20 2025 by rpki-client