Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: YhenCC1JD6CnFZRCFV3RYtAERhnI6VqZzuJLJDIXBmQ=
Subject key identifier: B1:E1:CC:C0:28:72:5C:D3:BE:80:93:FC:35:92:0B:3E:9A:68:24:C3
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 0196A4D38DC9E36A74E71267595BFA388F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 09D5
Signing time: Tue 06 May 2025 09:00:49 +0000
Manifest this update: Tue 06 May 2025 09:00:49 +0000
Manifest next update: Wed 07 May 2025 09:00:49 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: spysKopTpCF55CFbup8et9kDgGZlVpIyZ7xvBfPb4zc=)
2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:8d:c9:e3:6a:74:e7:12:67:59:5b:fa:38:8f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: May 6 09:00:49 2025 GMT
Not After : May 7 09:00:49 2025 GMT
Subject: CN=b1e1ccc028725cd3be8093fc35920b3e9a6824c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:37:c8:11:0e:39:7c:76:4c:03:8d:ff:a2:
bf:e8:c9:e0:8f:ef:49:ba:25:31:22:64:3c:26:2e:
8e:50:c6:ad:50:ce:20:df:01:79:23:18:b2:fb:4e:
88:6e:7a:47:24:0c:22:46:d8:38:d5:cf:7f:b5:6f:
0b:b4:1d:76:66:d9:67:ef:05:e0:cf:71:4a:47:1b:
f4:ae:fc:16:9f:1e:57:e6:98:aa:f7:5f:78:ae:26:
a3:1d:ca:43:34:3a:72:e1:53:dc:13:31:e8:ec:25:
1e:3d:3b:94:b6:3f:3d:73:62:89:dd:2c:a1:93:f3:
da:f7:03:c1:6b:3c:64:34:ac:19:ce:e7:99:2d:b4:
ad:95:6c:ce:8c:22:6c:32:8e:e9:17:47:cf:3f:68:
a4:51:f8:1c:2a:f4:b7:19:2b:22:77:01:9c:e5:46:
2d:09:eb:81:20:5c:a5:1b:a4:50:5c:34:66:86:11:
51:ee:8b:ea:b1:ac:2b:0a:ff:5e:6c:de:1a:10:f5:
b8:a7:02:1f:9a:54:13:84:e8:3e:2b:4b:86:45:0a:
9f:c6:d6:d5:fd:61:1e:21:b8:4f:92:81:51:67:2a:
71:f2:9c:bf:f6:86:a2:8b:4c:76:a5:aa:47:eb:13:
97:63:d2:ac:ac:3f:dc:ce:50:2a:9f:81:61:4d:9d:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E1:CC:C0:28:72:5C:D3:BE:80:93:FC:35:92:0B:3E:9A:68:24:C3
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:87:8b:ea:f5:cf:76:b0:f7:19:4b:6d:e8:8a:3a:1f:20:a1:
c0:3d:b7:55:84:90:83:10:94:d0:94:27:d0:9d:cf:38:e1:26:
99:8d:be:80:43:08:f9:22:5a:ce:24:fe:15:1a:02:16:c6:59:
c6:9c:b1:bc:05:de:32:1f:d2:65:1c:e1:f3:60:21:b6:b3:f3:
2f:7d:a4:ca:3b:2a:8c:69:b2:2a:f0:67:8f:b4:04:58:83:48:
d6:db:70:9a:8f:be:ac:6b:a1:86:78:ce:97:94:e3:ec:82:fc:
5f:6e:16:0a:95:04:9a:a8:32:aa:62:5a:28:a2:57:cc:fc:90:
b5:7a:ec:57:4f:a6:d7:40:7c:d2:b1:1e:43:90:c8:af:b7:30:
d0:d3:98:34:b3:2f:49:b4:c0:e4:1a:29:d0:b5:66:0c:de:41:
8c:90:12:b9:13:07:9f:40:1c:6a:7b:53:ed:8c:8f:67:e9:d8:
51:5a:37:fd:d2:b1:2f:89:97:91:83:ab:4f:86:3b:71:c7:7b:
71:00:3b:03:d8:3d:78:c9:d1:5e:0c:b8:95:3e:81:63:c3:64:
75:4e:df:f1:8c:7d:a0:17:72:97:06:92:1b:45:e5:27:c7:ac:
1e:6b:08:bc:24:bb:2c:21:21:ae:11:55:8b:8e:9f:88:3f:6f:
a6:9c:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:54:30 2025 by rpki-client