Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File: v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier: 3pQKyzacyuMX5A/2Q4FRRdlHQCLuurngQzPb0uz0XRc=
Subject key identifier: 78:E5:FE:F4:85:17:93:75:E3:26:B8:70:1C:73:CD:E9:14:0D:12:F9
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer: /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial: 0196C202625B3C0EE1AB1F36132256B8604D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number: 0512
Signing time: Mon 12 May 2025 01:00:58 +0000
Manifest this update: Mon 12 May 2025 01:00:58 +0000
Manifest next update: Tue 13 May 2025 01:00:58 +0000
Files and hashes: 1: Z2OOQN_xvDinvSk0PjmWHnzGsnE.roa (hash: +MwSX4X4GjxkZcy+4f+CH7/gMqlsDpwDxxCncAgans4=)
2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: KcDmo8oL0IPmXa1ymTRH8rsvFker1A1ErpJGQ8HJKq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:62:5b:3c:0e:e1:ab:1f:36:13:22:56:b8:60:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Validity
Not Before: May 12 01:00:58 2025 GMT
Not After : May 13 01:00:58 2025 GMT
Subject: CN=78e5fef485179375e326b8701c73cde9140d12f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:b2:b8:87:4e:66:31:f8:6d:5f:dd:1a:0e:
86:e1:06:2e:91:03:61:e9:c1:ae:57:88:a3:a9:8f:
23:6f:5e:6d:50:71:07:e6:1c:91:48:3f:1c:ce:7a:
44:9e:1c:21:51:4e:d3:af:64:15:c2:d3:6d:c5:2d:
5d:3a:85:27:e9:0c:1d:cc:12:42:fa:90:c8:ca:e1:
a5:bf:5c:09:08:b9:4c:57:85:e0:c5:1d:48:f7:91:
29:3f:7f:40:8a:f2:de:f0:24:53:88:a3:12:1d:4e:
c4:e0:9f:ab:12:02:7a:4a:6b:5f:0e:52:b9:21:96:
e8:d8:c5:de:40:45:d5:4f:d7:57:60:e9:83:3c:90:
f2:b6:af:bc:6b:41:76:82:e5:ed:cd:42:89:ae:39:
3e:26:a9:77:0f:56:5b:cd:f3:c1:9d:e0:02:1e:52:
05:5f:13:dc:ea:37:84:0f:b1:19:02:b9:e9:f1:86:
af:06:10:80:87:6d:03:dd:a4:1f:be:70:a0:70:17:
ec:79:51:be:d3:03:27:b6:20:62:ca:b1:cd:64:37:
02:2e:05:8d:fe:e2:b0:f8:60:83:8a:1b:d3:49:96:
47:65:0f:be:d0:4a:a8:87:8b:40:e8:07:1b:c5:8c:
39:1a:c3:54:5a:0d:80:5c:10:4a:fd:8f:86:6c:4f:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E5:FE:F4:85:17:93:75:E3:26:B8:70:1C:73:CD:E9:14:0D:12:F9
X509v3 Authority Key Identifier:
keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:79:fd:87:bb:2f:d2:62:d5:f7:d5:91:74:ae:00:d1:ba:2d:
2c:c3:12:31:ff:b5:ae:0c:23:b9:76:b0:e0:b3:5e:fc:0d:39:
ad:fb:83:2b:f9:93:89:af:08:83:84:ec:82:86:63:a7:d8:9e:
53:4d:1d:87:38:16:48:a6:c8:7a:a1:1a:d9:62:f3:db:2e:2f:
c0:ed:22:dc:36:d4:8e:c5:c5:1a:76:e1:26:84:f8:aa:8c:63:
78:2d:ec:fa:a3:99:fc:8f:bf:76:88:5a:ac:0e:9e:7a:54:a0:
84:b2:56:1f:6b:7f:b2:6f:33:dd:ee:16:c2:65:4d:7c:12:d0:
ac:e4:dc:7a:8d:de:69:03:8c:4e:fa:f0:65:e7:b6:26:7c:a0:
60:5b:2d:9f:78:b6:5d:07:a6:a4:ba:6a:fc:c1:29:77:8f:4d:
50:7b:ca:bc:ac:f8:56:49:6b:aa:d9:04:d5:d5:96:68:89:ce:
01:a6:70:f3:d7:03:38:e3:2f:6a:68:22:0e:a4:1c:4f:13:75:
b0:8a:ac:9a:7c:3f:9e:09:06:37:1e:64:81:e3:7f:4d:d2:87:
ee:d2:e9:60:e3:90:82:73:4b:90:ea:4d:1c:86:53:eb:c6:8a:
6d:d2:e2:90:6b:b2:cd:2f:33:50:38:6f:75:bd:7a:68:ee:c6:
e2:9d:71:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:12:15 2025 by rpki-client