Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier: umLrw3yX/Sj4F7WQLUrwJrDOFLef/cmwp3R8x01Z9l0=
Subject key identifier: F4:E8:99:0B:5E:AD:93:2D:8B:1F:2A:A5:E5:03:85:AB:F5:48:DE:0D
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial: 0196B823AA08FAF19DFE7E9542620BF3AF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number: 0F16
Signing time: Sat 10 May 2025 03:01:07 +0000
Manifest this update: Sat 10 May 2025 03:01:07 +0000
Manifest next update: Sun 11 May 2025 03:01:07 +0000
Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: 6acqJDgf7ar1+APF+keAEBl31eW1gSzmOOnqWdLxTCQ=)
2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:aa:08:fa:f1:9d:fe:7e:95:42:62:0b:f3:af:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Validity
Not Before: May 10 03:01:07 2025 GMT
Not After : May 11 03:01:07 2025 GMT
Subject: CN=f4e8990b5ead932d8b1f2aa5e50385abf548de0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:ef:24:bf:36:b2:d4:18:16:ab:69:61:2a:
8c:18:c1:3e:d9:14:de:00:41:42:c5:ae:4f:86:69:
04:60:b9:04:de:e3:b2:e3:d8:25:72:66:f0:8a:03:
4a:4d:18:1f:9b:01:5b:2a:a0:f7:36:c1:20:f5:0b:
1a:c3:bf:e7:63:d1:65:c5:78:e1:da:72:df:67:33:
bb:4b:da:b3:4e:a6:a8:bc:d5:80:ac:ed:b8:0f:b6:
bd:57:5e:0d:45:52:55:ba:ad:a4:da:88:6d:8d:cc:
3c:8e:36:38:87:2c:51:ba:34:3d:e1:93:89:79:56:
95:81:57:93:e7:7f:e4:e5:9f:a6:db:47:77:1c:f3:
b7:a8:b0:70:1c:1f:1a:69:cf:13:9d:fb:ba:05:a9:
54:b2:b6:6c:5c:89:28:62:31:e4:79:f2:b9:d2:c8:
f1:b9:4d:da:7a:0f:32:3c:f7:ef:17:73:8f:4f:72:
94:a2:5a:2f:24:96:8a:33:dd:f3:88:9c:46:f1:70:
70:1d:d0:11:1a:21:cb:55:f0:2a:75:8f:61:85:0f:
d9:b4:79:4e:9f:5d:95:51:61:f7:af:70:69:5a:a3:
6e:15:0a:a3:00:2b:a3:2d:bb:2a:36:d6:a6:4b:6d:
27:d3:45:a3:0b:d8:a2:1c:a6:df:dd:75:f1:c5:4a:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:99:0B:5E:AD:93:2D:8B:1F:2A:A5:E5:03:85:AB:F5:48:DE:0D
X509v3 Authority Key Identifier:
keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:55:d5:73:ac:72:56:cf:6d:64:11:8e:d4:3b:e9:da:f3:53:
27:42:e6:f0:d3:a4:4c:90:da:dc:6b:e9:a2:c4:06:7a:ea:a5:
ce:da:36:d4:87:7e:68:31:7a:a0:d2:84:89:70:d9:46:a4:92:
12:c8:16:65:b8:65:00:87:9d:63:cf:f2:57:c1:6f:db:a9:a9:
c8:8b:1d:84:6e:fa:f3:7f:ae:91:c1:5a:e2:e3:b8:29:20:17:
1c:ac:30:97:4d:0d:80:40:ee:f4:29:76:1c:4e:7c:b0:6a:f7:
58:06:86:83:00:8b:a5:6a:b9:19:a2:60:bb:c1:49:0b:34:1b:
50:e6:ce:49:f2:41:dc:6c:84:54:fc:1e:7a:0a:04:4e:9b:71:
91:44:0f:09:b7:c9:2e:12:3b:80:b1:b1:73:ed:4d:60:af:09:
49:bd:aa:0e:4e:bd:c6:bd:5e:a0:15:fb:a1:ca:3a:83:d4:22:
e3:b2:0b:4e:84:2a:a7:1d:87:f2:50:48:d9:e7:f0:6f:f3:3f:
13:c9:da:2a:7b:92:60:b1:c9:4f:a3:1a:b2:17:8b:6c:fb:6b:
2a:9a:0d:20:2f:34:65:d3:b8:ab:54:de:65:00:e7:60:5d:37:
c6:ae:d8:9d:c6:85:9a:df:02:24:fb:33:16:8f:43:33:32:1b:
62:67:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:25:33 2025 by rpki-client