Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: epffxWTwEH9Z+ZpmjKxNkiyKDu+CtlJ/MkfxeojKnXU=
Subject key identifier: 12:18:D6:D9:10:81:92:5E:58:FF:7A:DE:47:D8:91:E4:BD:21:1D:1F
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 0196B06A31174A86C46D1940416E2B6859D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 0223
Signing time: Thu 08 May 2025 15:01:11 +0000
Manifest this update: Thu 08 May 2025 15:01:11 +0000
Manifest next update: Fri 09 May 2025 15:01:11 +0000
Files and hashes: 1: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: r9Xo9N7XEGQZdLKRaOLjpiGwMgG1shMGgcE0nQybqk8=)
2: pTTtPKmhE713zQ-lNSyfapckqck.roa (hash: Z4OXgVLMtdMbDgwAv+QfBL8XpAweOau33nbHajpmsxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:6a:31:17:4a:86:c4:6d:19:40:41:6e:2b:68:59:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: May 8 15:01:11 2025 GMT
Not After : May 9 15:01:11 2025 GMT
Subject: CN=1218d6d91081925e58ff7ade47d891e4bd211d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:cf:c6:9e:15:22:95:2b:aa:a2:98:cf:bc:
26:eb:af:d1:78:f4:63:71:cd:19:73:b6:74:8b:10:
90:8e:13:9f:3c:71:15:f4:7f:09:b3:51:3a:f0:8b:
2c:a2:31:34:de:57:b7:f2:95:cd:99:2f:d9:8c:76:
88:68:1f:73:b9:2b:59:ad:e5:d2:27:4f:02:ec:10:
ce:92:69:b3:b8:8f:49:36:6f:58:4a:76:34:3c:09:
a3:dc:fd:c9:cf:ef:34:87:dd:ef:b7:40:eb:88:f4:
fa:23:fd:6c:f4:95:9d:35:0b:e3:2f:49:05:f8:05:
6d:8e:cd:e4:3f:bd:10:06:55:32:91:bb:49:32:e2:
51:27:46:a7:b8:22:ce:a4:c9:45:ea:99:14:41:c0:
eb:06:57:a8:ef:08:10:3e:e0:36:30:5a:24:3c:cd:
7b:dd:83:9b:c0:36:89:bb:05:c2:c0:99:60:40:6d:
cc:a9:47:a2:5e:a8:3c:ec:7b:ab:fc:6f:2f:d0:ac:
1c:e1:2f:0f:9c:10:44:e7:fa:bd:38:3a:12:77:f5:
a5:16:bd:b8:24:4e:6d:79:69:ee:4a:dd:82:65:4c:
a7:ed:c5:27:7f:ed:58:bf:f2:0d:d4:48:dc:bd:d5:
e1:c6:e6:b9:70:72:ae:e7:4c:bc:32:ad:3d:1c:c1:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:18:D6:D9:10:81:92:5E:58:FF:7A:DE:47:D8:91:E4:BD:21:1D:1F
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6f:b1:55:35:59:aa:c3:b3:92:c2:d2:8a:d4:3e:1e:a7:c5:
23:cd:de:f1:e3:c2:67:e2:ed:1b:28:81:bd:b7:a5:ce:6e:d1:
4b:0b:8d:c4:53:79:b2:2f:a5:bb:7a:ed:e3:5d:a4:01:0c:7f:
fb:0e:27:54:dd:dd:e1:90:39:3c:6b:d9:f7:8e:6d:99:49:4e:
76:c6:83:f1:68:ad:6c:d9:65:8d:35:1d:ef:d7:d5:03:68:92:
35:1c:e3:06:cf:bb:f0:5b:ef:a1:25:ff:10:8d:9c:02:d2:9d:
cf:6c:9d:6f:66:76:c8:90:21:18:82:62:b0:7c:39:98:02:a5:
b0:65:76:93:32:9e:8c:f3:b5:f2:e8:b1:05:f0:fe:d0:e9:e9:
2a:b3:f7:5c:e1:4f:11:3c:5c:31:0d:37:f3:35:ab:38:96:3f:
d5:19:ea:c1:4f:cf:1a:aa:e3:a6:d5:51:69:6c:56:60:53:19:
a6:73:0d:da:ac:6d:11:25:30:98:3a:a5:60:fd:31:42:73:ac:
27:e2:bd:f0:5b:b3:6e:ff:24:fc:9d:0f:49:f1:99:35:83:2e:
8d:bd:49:b2:ee:09:ee:66:91:90:5e:dd:e6:df:09:7b:b8:ba:
f6:d2:e2:0d:6a:16:08:93:56:3e:ce:d7:00:5f:63:7e:94:18:
bd:9f:20:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:59:50 2025 by rpki-client