Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File: t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier: ocab+ZMHgwq1NOyTPY25wngw9bUJ6AfxUO6AUwDbCjY=
Subject key identifier: D8:E7:76:51:B4:C4:DA:89:F1:7E:D7:F6:37:C0:25:02:DA:B4:66:55
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer: /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial: 0196B9A3CFD7CB86F123898053C57A214D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number: 09D2
Signing time: Sat 10 May 2025 10:00:42 +0000
Manifest this update: Sat 10 May 2025 10:00:42 +0000
Manifest next update: Sun 11 May 2025 10:00:42 +0000
Files and hashes: 1: 96zfb_as6Uu1dQBioEPRjkMoH0A.roa (hash: ZbDgERbOZ82dnNJrpA+vEp4hFeMsEzejOuHoVOcv55k=)
2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: GX27IcvGZF5aHKm7JdqAPph6PAvEn92ryjUG9gkkBUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:cf:d7:cb:86:f1:23:89:80:53:c5:7a:21:4d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Validity
Not Before: May 10 10:00:42 2025 GMT
Not After : May 11 10:00:42 2025 GMT
Subject: CN=d8e77651b4c4da89f17ed7f637c02502dab46655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:d4:cb:05:08:0b:28:ad:58:d6:ad:21:e1:
4e:7a:93:5b:f0:12:5d:64:9a:46:0a:51:bf:41:5f:
b1:ee:74:d6:42:0c:ff:b3:49:39:ef:d7:98:d0:c7:
47:75:f7:ea:48:39:64:26:7a:8e:78:7c:ec:3d:14:
b6:eb:48:8e:1a:54:30:2d:a5:cb:93:ae:9b:71:dc:
0b:72:e6:68:2e:46:41:21:af:03:05:63:d6:3c:45:
cb:bc:d5:0b:f8:4b:ba:ad:64:49:f5:76:9d:15:e6:
8c:2f:f1:93:63:6a:e2:70:b4:ff:cf:88:67:15:38:
0b:61:e9:e2:ee:9a:09:c9:1f:99:02:20:39:21:81:
5c:1d:36:e0:6a:cb:63:e9:dc:60:10:9d:0b:72:38:
2c:3a:8f:04:1f:41:ac:39:a6:22:29:63:d5:f7:5d:
09:d3:06:ea:6d:8f:bf:b1:55:6d:d1:dd:4d:d4:3c:
83:46:e7:45:98:2c:75:8e:4e:6c:b6:ae:cc:41:0d:
2e:86:94:14:df:25:1e:92:8f:c5:3a:fe:8f:42:b1:
96:6e:cd:39:ea:4d:97:9a:3f:29:4a:52:d6:e8:a4:
95:1f:30:fb:2a:e7:19:ec:2b:0b:f7:ba:39:22:03:
ce:34:90:1f:0b:7e:70:02:63:a3:85:51:22:88:f2:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:76:51:B4:C4:DA:89:F1:7E:D7:F6:37:C0:25:02:DA:B4:66:55
X509v3 Authority Key Identifier:
keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6c:75:5d:13:d5:12:c5:01:dc:52:83:65:12:06:a6:d8:41:
0a:50:18:7e:75:54:a6:80:54:16:ad:d2:10:07:07:d4:46:3d:
a4:c8:09:4f:b3:3b:fc:5f:3e:f8:69:01:f4:b0:a9:55:d6:0e:
63:40:e9:53:70:7e:f8:da:a5:9b:5e:7d:83:08:2d:8a:c3:45:
e0:72:83:84:2e:61:23:8e:f5:83:75:c0:dc:cf:a3:7b:e3:8b:
a8:51:9f:b4:b0:fe:9e:40:e0:56:b9:bf:8d:d2:34:ca:ec:a9:
a4:a7:bf:c8:56:6e:d8:b2:38:7a:b2:7a:2d:7a:b9:43:67:4f:
b2:7d:2e:77:61:fd:c0:9f:17:77:11:3e:67:de:26:5c:77:23:
86:9c:e7:63:60:2a:d8:70:b9:db:3c:c6:ff:9d:80:8a:80:f2:
26:3d:fb:b1:82:2f:87:b1:d1:ea:75:b0:06:f8:90:f1:96:9d:
c0:75:34:28:a1:8b:03:c0:78:77:2a:5f:d8:cf:6c:9e:2f:3f:
5e:66:59:d6:37:31:7a:ab:77:bc:fb:07:fc:ac:00:02:7e:63:
52:8f:7e:d4:af:01:3d:cf:ea:76:59:6e:12:b0:8d:05:4b:42:
80:a3:b1:73:9b:08:e8:db:1d:4b:39:3f:c9:6e:3a:c1:14:09:
3b:0e:41:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:59:01 2025 by rpki-client