Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File: ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier: 46Kwj2yluKOlPr+YTAzsqCwani0Ltrmh3xJvUsXBXxU=
Subject key identifier: C4:38:AD:C0:D5:B6:F7:C6:57:E6:7A:31:A2:98:9B:D4:A3:A9:CD:85
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial: 0196C081B1B331F56DD19F684EF06C5D23F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 18:00:47 +0000
Manifest this update: Sun 11 May 2025 18:00:47 +0000
Manifest next update: Mon 12 May 2025 18:00:47 +0000
Files and hashes: 1: 1-oPnzeRnS2wes3eHWFhju7Aog-g.roa (hash: 0Z/IUXs4OK8CJd/fYdgboQWjbgJJCz+sIFSEwO7NpmA=)
2: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: wK902289R79kmiK+9To7vtMCW1/QvIp5qDPkWLzgVwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:b1:b3:31:f5:6d:d1:9f:68:4e:f0:6c:5d:23:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Validity
Not Before: May 11 18:00:47 2025 GMT
Not After : May 12 18:00:47 2025 GMT
Subject: CN=c438adc0d5b6f7c657e67a31a2989bd4a3a9cd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:16:63:ed:72:30:f2:df:5a:f8:5b:93:a3:
85:e1:6f:60:b6:cf:69:4a:77:2a:d0:ec:a4:a1:6b:
ef:64:65:a2:9a:e6:2b:b0:3b:48:80:f1:b0:21:34:
43:69:66:d4:43:df:60:17:dc:5c:45:2a:a1:7b:a5:
f4:ca:18:12:2f:02:13:60:1f:19:cd:be:39:74:a0:
4a:7a:ca:72:e5:18:aa:d6:2c:53:6c:3c:bf:ef:39:
d0:bd:52:80:20:8c:83:48:26:7c:af:b4:70:1d:85:
42:2d:4b:a9:7d:f4:9e:6c:f8:fb:3a:6f:af:2b:6b:
ac:09:39:c7:e6:8a:db:df:ba:40:66:ef:0b:ac:6a:
1d:62:f8:a0:90:68:25:19:9f:fc:ed:4f:c1:90:e3:
da:dd:48:f2:7c:af:8b:2e:90:4b:56:0a:df:d8:d1:
23:4c:73:7c:9f:ee:a6:f6:b7:63:93:4a:e9:7b:cf:
57:44:c0:1d:72:c1:46:f5:d4:bd:0f:45:49:da:ac:
41:1a:08:79:bb:e6:ba:cf:70:99:9f:ae:db:c6:50:
bd:4e:27:6a:94:3b:ef:c2:af:bb:ce:a3:59:d4:70:
c4:1b:13:1f:89:68:61:f7:d1:16:bc:01:5c:e0:60:
7e:df:93:d0:00:44:0c:0b:9b:28:94:a9:31:a6:ad:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:38:AD:C0:D5:B6:F7:C6:57:E6:7A:31:A2:98:9B:D4:A3:A9:CD:85
X509v3 Authority Key Identifier:
keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:77:4e:18:95:70:e1:7e:dc:ad:f2:b6:e0:dd:54:4e:4e:b5:
29:05:7f:7d:4e:86:f9:b0:93:fb:fe:88:3d:4d:20:2f:08:47:
1a:f3:2a:55:ff:cd:9c:77:6e:77:f6:59:81:4e:95:ec:41:89:
81:9b:7e:3e:00:f0:90:4e:bc:40:2c:cf:64:23:de:37:39:65:
af:c3:ac:51:49:3a:85:8f:30:52:4a:44:f7:d3:91:be:0a:b0:
6f:c0:51:dd:d1:83:b4:a0:b7:42:43:5c:37:79:53:83:2b:79:
9b:a3:3b:c7:af:c1:ee:a9:13:78:c5:96:d3:bf:7b:22:9c:5d:
36:c3:27:b6:09:ae:36:32:c3:ac:df:7b:d6:63:ec:bc:54:77:
8b:c7:f0:6f:ae:9d:4d:3a:28:63:73:83:a0:39:05:27:b9:a5:
66:43:69:1f:80:63:39:99:6d:a1:94:f9:e2:18:98:c4:88:e8:
13:d3:72:f2:41:0a:37:96:f2:02:9c:97:10:23:e4:26:82:b6:
71:f5:b6:c8:56:29:97:5e:8a:50:8f:ff:92:48:a2:8c:1c:fb:
60:cc:d8:a4:7a:c8:cc:0b:76:53:12:71:c7:0d:39:52:84:99:
3e:2d:a1:3e:c0:54:74:d7:d3:4a:14:dd:0c:a8:9e:b5:2a:18:
38:57:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:10:27 2025 by rpki-client