Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json)
Hash identifier: pq8RcXIGmm1VZEzgmt3a3QOobSFtIKS3kEoTezwoL2Y=
Subject key identifier: 1E:A9:70:49:70:BC:A3:DE:79:30:F5:0C:08:C4:6B:95:DB:2B:D1:88
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 01969D50E35CB2DD2249A33AE07EC47F072A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
Manifest number: 02D0
Signing time: Sun 04 May 2025 22:00:46 +0000
Manifest this update: Sun 04 May 2025 22:00:46 +0000
Manifest next update: Mon 05 May 2025 22:00:46 +0000
Files and hashes: 1: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: Ul7SiHbnCYRM0OgaZLjuP+L86tIofHhSqjP5tnyF4AY=)
2: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (hash: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:50:e3:5c:b2:dd:22:49:a3:3a:e0:7e:c4:7f:07:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: May 4 22:00:46 2025 GMT
Not After : May 5 22:00:46 2025 GMT
Subject: CN=1ea9704970bca3de7930f50c08c46b95db2bd188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:17:12:e4:c7:51:14:29:d5:38:d8:ba:9c:
3e:83:99:96:6b:7d:27:b4:e1:d6:bd:13:97:a4:1e:
3b:31:51:96:5f:44:eb:af:ec:ca:c6:00:bc:e5:5d:
74:33:1f:bf:2d:72:4e:6f:98:e6:dd:4b:e0:db:82:
81:47:01:cf:1b:fe:ae:f7:31:04:93:f1:a0:4d:17:
9d:d2:a8:45:28:46:6d:53:72:51:2f:2b:85:cc:25:
a2:18:33:6a:1c:42:fe:d9:c9:2f:f2:43:01:79:a6:
2a:f6:93:0c:ec:f9:18:ec:0e:cf:59:a3:e4:60:46:
15:e3:20:76:ef:7f:aa:d9:cc:c1:3a:a2:7f:2a:4c:
55:ba:ee:91:82:f4:40:6a:db:76:52:59:e3:eb:15:
b5:d2:21:a9:96:ac:00:86:af:4f:1d:47:c8:10:3c:
ee:4c:e1:1f:12:ba:3b:9a:f9:1b:21:55:81:fc:ab:
39:0f:91:b6:db:db:28:97:d9:7f:1f:68:01:a6:73:
10:1a:80:ee:27:ec:a4:36:2e:9a:68:5f:a2:2c:25:
f9:c0:a7:bd:0c:6e:f6:fd:9c:eb:10:5a:d5:35:ec:
3f:9b:03:b1:e7:c3:d2:a7:f1:55:6c:c0:42:56:5a:
aa:47:a2:0f:77:68:55:45:bb:47:af:71:b5:da:97:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A9:70:49:70:BC:A3:DE:79:30:F5:0C:08:C4:6B:95:DB:2B:D1:88
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bf:a6:79:4e:05:02:24:a1:4e:c8:79:63:59:45:8e:b4:36:
c1:14:26:90:0b:a7:81:fc:60:33:de:72:22:b3:b9:3b:c9:3b:
38:8f:18:23:bf:92:b7:a9:9b:52:c7:c2:72:a4:1e:6e:f2:d0:
d3:f2:43:54:e5:95:bc:06:d1:75:5f:08:f0:83:fa:3a:c5:95:
59:f4:5d:30:d6:08:e8:50:ea:1c:89:9b:2e:23:5f:c2:a6:70:
2f:61:7d:18:e4:e1:13:72:71:f9:e5:b6:10:3d:49:d8:78:6c:
3f:3f:a9:90:01:85:29:cc:80:69:09:4a:a6:01:c3:ca:29:11:
bb:41:99:8f:9f:48:95:7c:43:05:68:1f:33:fe:63:d3:5e:42:
62:dd:7f:e5:c5:87:61:49:61:bb:1b:76:80:ac:94:40:67:49:
93:3d:0b:b5:42:fc:bc:71:d5:a5:1e:0a:29:a9:62:c1:6d:cb:
31:6e:78:4a:8a:34:7f:08:35:e4:d8:8b:88:24:b9:a5:d8:99:
70:ad:ea:55:51:13:16:58:d9:a7:b3:0a:6d:24:22:09:cf:b5:
07:f9:40:a2:bf:4c:82:27:8b:5b:08:b0:49:fe:de:b2:0c:a7:
55:ba:42:f9:49:16:83:b8:5d:04:89:a0:48:42:c3:e0:8c:ff:
c2:56:c1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:41:29 2025 by rpki-client