Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier: FDFqEPOmzH5JuSCU2xkn47eIfwIM0rWdD/DMQ4LQJIM=
Subject key identifier: F1:DD:23:82:1B:C5:35:09:32:8A:49:8B:40:FC:9C:3F:C9:01:18:AF
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial: 0196B3A16EFD221E55B2857FEE5B402C7EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number: 0F2A
Signing time: Fri 09 May 2025 06:00:23 +0000
Manifest this update: Fri 09 May 2025 06:00:23 +0000
Manifest next update: Sat 10 May 2025 06:00:23 +0000
Files and hashes: 1: 9QkZQFFq52UED9EyY0jKnFH-pX8.roa (hash: qLNZsCVw5BE1cHr6HyybImHSaQWc8kutbUnGNRzqfeU=)
2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: gQDd4UHukSO2ANMxCL9YmTdFpCkCPB88x1s90QQcRv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:6e:fd:22:1e:55:b2:85:7f:ee:5b:40:2c:7e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Validity
Not Before: May 9 06:00:23 2025 GMT
Not After : May 10 06:00:23 2025 GMT
Subject: CN=f1dd23821bc53509328a498b40fc9c3fc90118af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:25:9a:3b:85:4b:92:fe:4d:84:03:b3:1d:
ed:bb:20:7c:7f:0a:d0:d1:21:64:1c:e1:73:a7:18:
05:6f:04:54:5a:47:d5:18:bc:86:30:3b:c6:bf:5a:
f8:64:7b:25:58:dc:59:c8:61:66:67:ad:83:39:7b:
00:51:c5:c5:0c:25:27:e0:36:3c:e5:34:2b:ea:0b:
c7:c5:27:d0:b1:77:69:98:11:19:82:39:c1:8b:9b:
93:1a:62:5a:77:76:8a:79:75:a7:d4:eb:11:b7:10:
05:97:1b:23:9a:04:1b:f5:6c:45:c9:f5:af:07:64:
f3:e3:5b:6c:83:55:1f:90:00:62:26:e7:b8:98:19:
92:8d:12:32:2d:11:c0:4e:6f:04:0e:d2:48:e8:32:
84:60:af:db:ac:c0:0c:80:ec:fc:2e:56:bb:5d:de:
bb:c6:ea:cc:52:b5:49:dd:35:4f:5d:26:45:b4:aa:
b7:a5:64:33:69:11:36:7a:c9:68:88:ef:51:5b:ee:
6a:74:eb:96:57:22:9e:c8:3b:a5:d8:eb:5e:ee:44:
ed:32:eb:2b:1f:21:34:ec:9b:2a:ae:f7:70:f3:03:
97:08:2b:e6:29:88:e9:43:1f:08:2c:32:06:1a:74:
52:4b:62:8f:cf:b8:0d:41:b2:8c:c0:04:88:1c:72:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DD:23:82:1B:C5:35:09:32:8A:49:8B:40:FC:9C:3F:C9:01:18:AF
X509v3 Authority Key Identifier:
keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:43:5d:3e:16:87:ec:41:8b:60:1e:56:fe:00:4c:17:5f:73:
c0:4e:9d:c1:41:e9:5b:77:60:c4:26:9d:18:c1:44:9b:9c:eb:
49:6e:2a:c4:1a:aa:f5:2f:e7:5a:8d:2a:b1:9f:33:c5:5e:2c:
b0:8a:e6:93:6e:5b:ef:6b:b5:0e:fe:f7:f8:ad:76:dc:aa:47:
7c:3a:52:56:0f:40:d1:c6:20:93:ae:d4:86:7b:8e:52:13:91:
08:44:f6:6d:18:59:97:6a:5a:cd:e4:f6:ff:c7:7a:b2:84:5f:
2f:cb:c4:6b:dc:bd:d4:58:05:08:1b:21:c1:41:cf:b2:d6:7b:
35:4e:75:03:ca:12:ba:a7:f2:49:dc:14:66:4b:5a:f4:d8:4c:
a7:3f:63:d4:47:2c:99:bf:6a:f7:5d:86:4a:b8:0e:ce:4d:b9:
01:8c:df:d5:e2:39:f9:af:16:b6:6f:2e:25:f8:1a:b6:a6:74:
dc:9d:b8:90:95:e6:9d:e3:bb:97:68:a1:07:a2:44:ac:c7:e0:
77:c9:3a:1a:24:c4:bc:94:ba:d6:d2:eb:50:a3:0e:a6:69:4d:
d6:be:c9:ac:77:b5:94:b6:3e:b2:c9:80:68:93:1b:96:68:35:
9a:d3:2f:4a:65:f4:5c:47:1e:5a:e1:a7:b2:22:ff:48:74:e9:
e8:a0:a5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:58:28 2025 by rpki-client