Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
File: DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json)
Hash identifier: n67MYl+nOYUWwNzxmLamwYUDwddABWdGabYMuPOGDRA=
Subject key identifier: 0F:C2:B5:B0:A1:D1:9D:C1:2D:F4:8B:04:0E:3E:ED:9B:55:22:4F:45
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Certificate issuer: /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial: 0196C53A5E3EA6A00E1DF5CC6F3E2EDE0350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
Manifest number: 1489
Signing time: Mon 12 May 2025 16:00:58 +0000
Manifest this update: Mon 12 May 2025 16:00:58 +0000
Manifest next update: Tue 13 May 2025 16:00:58 +0000
Files and hashes: 1: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: 7A+CBUo9gYPp5qL84M4ucA8kU/Dq1GBGgnIJdB7cTY8=)
2: zD8lanFfCKcjzXb5ZLkO_uI8Eww.roa (hash: FP/b4ehPHpPPt6ISCHNjh4J5r42QMToe0aZbLviIqX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:5e:3e:a6:a0:0e:1d:f5:cc:6f:3e:2e:de:03:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Validity
Not Before: May 12 16:00:58 2025 GMT
Not After : May 13 16:00:58 2025 GMT
Subject: CN=0fc2b5b0a1d19dc12df48b040e3eed9b55224f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:75:5f:02:9c:85:ca:12:d5:70:a1:88:c5:
ad:52:60:34:3c:ff:e4:8f:b2:b8:f9:44:28:80:be:
4a:fb:6e:b9:f8:cd:6a:17:95:cc:88:17:52:30:a8:
f7:18:8b:47:3e:aa:ec:45:65:e3:5f:f4:7f:d9:6f:
f0:d5:8e:bb:b4:05:2c:66:c7:a6:69:06:08:e2:85:
26:d2:15:a3:e5:24:29:2d:21:20:b8:8d:4f:11:df:
2a:8f:04:32:64:0a:93:93:ba:c4:df:7f:71:e1:01:
54:2f:93:8f:60:26:6d:15:5f:47:c5:1c:88:58:80:
61:c6:29:ca:d4:2e:68:8c:8b:8c:b9:e0:b9:3e:45:
33:6f:60:4a:e3:fd:e9:12:85:de:d3:0d:ae:f8:07:
c7:69:55:64:bc:54:1e:77:89:6a:6f:f0:fc:9d:d1:
3a:b3:94:0e:74:a8:53:70:84:c0:e8:e6:15:0a:a7:
46:fe:d1:00:2e:4f:0b:c2:01:28:d9:7d:af:f0:dc:
0b:45:2c:7e:a4:13:5b:46:9b:4b:db:f3:2b:84:69:
05:b8:ce:bf:c5:63:7d:ce:a5:b4:55:d1:43:27:5d:
07:a8:11:be:81:1e:0b:a6:47:d6:6e:9f:d9:6f:c5:
c9:be:ea:83:56:66:f8:ac:4d:c6:90:38:f9:0c:78:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C2:B5:B0:A1:D1:9D:C1:2D:F4:8B:04:0E:3E:ED:9B:55:22:4F:45
X509v3 Authority Key Identifier:
keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:35:b8:a3:65:e5:f3:12:84:7d:a1:11:66:2f:3b:c5:88:0a:
32:b2:6e:9e:ed:52:2e:90:93:90:d6:82:28:fa:a8:dd:2b:f9:
15:de:d9:ef:fe:59:d7:df:42:6e:db:bb:b8:00:09:19:1e:7b:
7b:98:0b:15:02:7f:70:4d:da:84:6f:51:13:ea:45:96:29:01:
38:11:eb:70:35:df:0a:cb:fe:20:be:f3:75:0c:88:38:36:f4:
aa:dc:a0:31:60:ad:ee:78:5b:cb:96:2d:33:4d:1a:f4:5a:b1:
9a:76:f3:fa:03:f8:d3:b4:29:66:71:72:3d:01:89:fa:71:64:
aa:66:72:37:1a:82:f7:3c:a1:aa:0d:13:2e:13:da:53:f1:0f:
31:e6:21:fc:3e:4d:1e:65:67:b5:34:86:5c:63:42:0c:00:df:
0b:ee:c1:4d:90:82:7e:bd:91:7b:06:c4:46:29:3f:f8:cf:df:
ed:89:e7:6c:56:42:ec:08:4f:cb:c3:22:e3:20:82:9a:f7:8f:
af:6b:c5:82:b6:15:dd:03:03:f0:8b:da:46:1d:d0:41:de:92:
11:8b:48:dd:70:2e:4f:5b:d9:98:b5:4b:0f:fa:78:4e:e3:a3:
e9:f1:7f:88:9a:f4:e0:cb:01:1c:90:81:ee:ff:94:77:b6:6f:
4d:a7:84:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:45:59 2025 by rpki-client