Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
File: a0dcb7gDO14R19tfLJl8hLpyXKI.mft (raw, json)
Hash identifier: mhea2xwAvbt1r/wnsEpMMSqcGD5F6oyEcTkVuQIBXTs=
Subject key identifier: E8:A3:E4:B2:F0:D5:6B:04:49:79:0B:F8:CD:0F:88:BD:85:14:6C:41
Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Certificate issuer: /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Certificate serial: 01969CACD4A36366193E60592D5DA22169B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
Manifest number: 14B5
Signing time: Sun 04 May 2025 19:01:34 +0000
Manifest this update: Sun 04 May 2025 19:01:34 +0000
Manifest next update: Mon 05 May 2025 19:01:34 +0000
Files and hashes: 1: OVBxJN_E7KClOVOyQO1dITqXrDc.roa (hash: gtF4A20X0QOWLiRvuhbFqEg7fy+sAd/zI+eINNfliv0=)
2: a0dcb7gDO14R19tfLJl8hLpyXKI.crl (hash: CKwV1DpCFVhYS3MpSmn8pbmAKpT2y1UWvYZkWspgwec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:d4:a3:63:66:19:3e:60:59:2d:5d:a2:21:69:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Validity
Not Before: May 4 19:01:34 2025 GMT
Not After : May 5 19:01:34 2025 GMT
Subject: CN=e8a3e4b2f0d56b0449790bf8cd0f88bd85146c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:3a:f4:12:70:3b:e9:5d:0d:e5:dc:b4:70:
56:5f:04:ec:66:4d:cd:e3:ef:33:12:97:b3:77:33:
fd:7c:62:d1:3f:3e:bb:86:9f:be:bc:72:37:47:24:
da:74:11:d6:3e:4a:79:2b:ed:6f:3c:1e:88:ba:6f:
2b:e6:8d:02:ae:04:22:35:3f:63:ab:53:37:f9:5e:
ca:c7:64:c8:63:1e:81:cc:00:e1:4f:4e:04:d0:2d:
87:54:75:65:50:3f:b1:fd:38:58:77:86:bc:93:16:
08:ed:6c:3d:43:f3:67:97:b7:d8:a9:a3:77:63:84:
c7:60:db:68:55:d8:6e:c7:6b:b1:23:79:1f:da:75:
f4:4f:16:c5:55:2f:99:b2:3e:33:b7:af:90:39:b9:
9d:d1:13:0c:17:a6:a0:ae:ff:69:e2:43:ba:53:f8:
3f:68:d6:62:c7:86:5c:71:81:c8:74:aa:62:c4:b6:
36:9d:cc:26:ff:fe:bd:18:1e:8a:14:3f:07:3e:98:
13:5b:30:28:67:8f:a6:45:a5:4f:7e:7b:c6:b9:17:
8c:1e:e2:7e:3e:40:65:21:13:b1:cc:f6:87:f5:7c:
f5:9f:c8:41:97:4c:0e:29:9b:5a:f5:fd:28:47:34:
7a:8b:19:a6:28:85:03:9c:dd:5d:b2:3e:ff:3b:b0:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A3:E4:B2:F0:D5:6B:04:49:79:0B:F8:CD:0F:88:BD:85:14:6C:41
X509v3 Authority Key Identifier:
keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:29:86:ad:94:14:3c:f8:e0:93:c8:b7:7d:52:a6:9f:46:b1:
24:a4:8d:7a:21:4b:4c:a8:87:9c:03:80:da:e1:29:ce:ac:b6:
80:5b:bd:58:1f:0a:f1:9e:78:59:b2:f5:39:2f:16:d6:bb:fb:
1f:0e:63:f7:88:73:05:61:f4:d8:ab:03:5d:52:9a:49:d6:e1:
80:4f:dd:d2:51:cf:6d:a7:81:1a:58:84:08:b1:5e:6f:70:cc:
f3:e3:1f:4e:19:1f:03:1f:d6:8a:98:6f:3f:37:60:7f:39:db:
db:50:79:1d:08:2c:02:21:04:8b:9b:36:db:70:94:19:b7:2f:
04:22:f0:9b:e5:c3:ad:cf:13:e6:b6:10:84:03:a6:c3:08:d4:
e8:04:d9:c7:fa:8e:89:05:d5:c1:2b:d2:d2:f1:e8:86:5b:c0:
a0:26:2e:30:5e:6a:ed:c4:7f:89:c8:74:46:a0:d6:61:3c:cc:
65:4e:b5:b7:73:9c:9a:a6:42:57:56:09:d6:5b:c9:31:88:7b:
ca:e0:66:13:a9:89:85:83:bc:3f:3d:bb:99:71:f2:49:72:c0:
93:e4:6a:6e:b4:9d:ad:5b:1b:78:71:91:6f:ca:cb:96:d8:3c:
a3:fb:d4:bc:cd:1e:de:4d:37:98:ab:1e:34:a9:48:48:28:3c:
37:6c:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:40:56 2025 by rpki-client