Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: rM3DeKmQE+y8X3LfIfAI8lpIctR9QUS431N4XW2giEI=
Subject key identifier: 0E:0C:80:EA:45:E5:04:5B:20:AE:F9:2B:04:8A:86:75:0B:6F:FB:27
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 0196CC859D87F7E6175C90D5921047C7D2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 0A02
Signing time: Wed 14 May 2025 02:00:30 +0000
Manifest this update: Wed 14 May 2025 02:00:30 +0000
Manifest next update: Thu 15 May 2025 02:00:30 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: Zg+WD/Gi95Fh/pi2YaLLW73UD2sfzIdJEVpiXUFtzME=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:9d:87:f7:e6:17:5c:90:d5:92:10:47:c7:d2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: May 14 02:00:30 2025 GMT
Not After : May 15 02:00:30 2025 GMT
Subject: CN=0e0c80ea45e5045b20aef92b048a86750b6ffb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:31:65:cb:85:4a:51:73:21:17:c5:0c:e5:
d4:f6:dd:3c:39:bf:c5:e3:34:b9:76:8f:27:4b:cb:
b4:37:cd:2c:fa:91:36:6b:03:7b:08:13:f4:b9:ff:
b9:cb:4d:1a:59:06:ae:30:75:9e:7e:87:5e:bd:12:
c9:73:25:0a:1c:43:b4:2f:b8:f3:7a:cb:29:64:68:
9c:93:81:be:92:b5:92:a5:d6:9f:a1:0b:5f:07:fe:
92:70:f5:9c:41:7b:bf:2d:c7:d6:ef:23:bb:45:25:
41:4c:9e:70:7b:3f:6c:7d:82:2e:0b:38:ca:8e:9c:
a2:67:34:bc:61:e1:9c:f8:a7:62:bc:d8:e9:90:87:
8c:4b:87:8d:b6:86:1d:e1:8e:3f:4c:2c:a4:95:69:
37:86:fe:39:73:22:86:c7:1c:54:70:1c:94:50:6c:
3b:d9:7a:2e:02:cb:2f:9d:c9:43:19:d9:01:4e:54:
8e:a9:7e:4f:38:4f:64:0d:51:9a:3d:22:96:07:76:
07:08:e6:ac:fc:a7:00:fa:a1:68:a3:fc:45:34:25:
5d:8b:ae:89:0a:a5:b6:d7:3a:1c:d0:a0:b4:6c:66:
a0:29:7d:af:0e:bd:67:4f:74:c3:05:47:42:6e:10:
f8:e1:92:fe:65:da:50:6f:98:f9:01:c1:cd:18:5b:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0C:80:EA:45:E5:04:5B:20:AE:F9:2B:04:8A:86:75:0B:6F:FB:27
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a1:14:76:61:7b:c1:11:57:9b:7c:9a:77:61:ac:23:72:24:
45:26:f7:47:2c:77:24:6d:b7:82:ec:e5:2c:a2:36:f0:b2:ef:
76:b8:ff:cf:01:d7:8f:d3:75:ec:47:4d:fc:2f:a8:4b:af:d2:
85:7c:a6:40:b9:1d:aa:39:d6:28:de:c0:fa:f5:80:3e:91:b2:
fa:78:38:5a:13:0c:fe:df:50:a0:4d:42:4c:25:2f:b1:2d:4a:
b8:7f:aa:bb:74:0f:ff:22:22:90:ff:06:61:de:e5:e7:44:b5:
e8:ba:12:c6:6e:fa:5c:bf:8f:4a:9f:ac:c1:3a:18:44:26:7a:
6c:37:6c:2c:37:ec:52:f6:6f:da:38:f4:df:dd:e2:39:cf:98:
d4:e2:37:dd:bb:16:78:30:ae:5f:a3:00:b7:b0:97:31:54:89:
52:2f:2f:37:1a:c5:83:47:24:5c:16:12:dd:9e:c2:e0:3c:84:
32:f0:fb:7c:90:1b:04:aa:bf:4d:fc:fe:c7:36:eb:24:87:b1:
ec:1a:5a:3b:30:72:b6:53:af:21:24:3e:ba:ae:b5:79:6b:60:
76:c6:a6:17:0e:78:fa:7e:44:19:f6:59:3c:9a:05:5b:fd:0c:
4c:be:77:a9:28:31:0b:ca:52:d8:71:94:6f:cd:3d:d7:0c:50:
07:a6:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:20:54 2025 by rpki-client