Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: F7487Ce41oaZKodh52AHLBKXaGPEGbwtyYWBxuKy94s=
Subject key identifier: F5:7D:67:A2:13:6A:3B:E2:A9:93:81:3B:D5:AF:12:E1:BE:3F:EE:9D
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 0196A31C367ED9347859CBF3BB52E683D4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 03FB
Signing time: Tue 06 May 2025 01:00:57 +0000
Manifest this update: Tue 06 May 2025 01:00:57 +0000
Manifest next update: Wed 07 May 2025 01:00:57 +0000
Files and hashes: 1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=)
2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: mZ90D6MCDT71BGziGYTDrXnsLMGqoJDaOI8vq+rD5Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1c:36:7e:d9:34:78:59:cb:f3:bb:52:e6:83:d4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: May 6 01:00:57 2025 GMT
Not After : May 7 01:00:57 2025 GMT
Subject: CN=f57d67a2136a3be2a993813bd5af12e1be3fee9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:b2:fd:9f:6f:54:0e:13:ea:b7:19:bb:8b:
38:f2:ab:eb:ba:cc:5c:3c:b0:27:c2:ea:c0:28:70:
21:4d:03:dd:66:a9:f3:d4:51:3f:a4:e6:84:2e:97:
6f:11:08:51:d7:58:2a:d0:9f:5e:92:bc:d0:30:9c:
ed:a7:5a:ba:fc:45:d8:8b:c7:1f:b0:05:60:92:ef:
54:5c:e1:d7:82:df:85:49:03:a0:bf:d3:90:a8:23:
82:bb:eb:e0:7b:26:06:d1:c3:a4:94:35:67:93:76:
32:88:1d:95:cd:f5:d9:03:b5:1b:1e:b1:13:f1:f6:
78:63:cd:16:3f:a1:56:bf:06:37:eb:8f:75:db:cc:
7d:6f:91:c3:3d:95:43:aa:d5:25:46:5c:4e:e0:14:
ad:e5:89:26:e1:fb:62:7e:5c:1a:c9:73:bc:72:57:
a7:23:d2:f0:0d:4b:99:92:76:bb:53:f6:b6:f7:8f:
be:f0:5e:b9:07:82:4e:9b:76:6c:2d:4f:62:dc:d0:
f1:c4:e0:52:40:d7:15:03:b6:4c:0a:ef:9f:49:35:
ab:fa:02:b4:82:48:75:31:ed:a6:28:60:4b:3d:ab:
fa:9d:96:a6:29:40:03:93:61:73:62:41:cb:16:cc:
df:6f:1e:df:f4:d5:5b:0d:73:4c:53:f2:3c:63:f6:
80:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7D:67:A2:13:6A:3B:E2:A9:93:81:3B:D5:AF:12:E1:BE:3F:EE:9D
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2d:23:ef:a4:d2:70:cf:69:6a:ce:24:05:ee:3d:27:fb:82:
cf:48:c6:6d:ef:0c:0f:de:48:25:82:cb:fa:f8:5e:24:fc:dc:
d5:ad:ee:cb:2c:10:ea:c9:2b:3b:23:45:5d:37:2c:14:95:1a:
c0:19:68:ed:de:1d:ff:08:82:fd:b0:7c:e1:d8:0c:c8:90:be:
d4:36:0b:ee:e8:20:ed:5b:5d:be:85:ae:7f:52:90:cc:1c:7c:
33:1f:f5:da:e7:5f:72:f8:a0:83:6d:50:21:80:55:aa:1f:e9:
57:5c:50:4c:80:01:35:8a:00:7b:64:1b:59:f9:35:83:ce:2b:
42:ef:8e:b3:7e:cc:2d:03:01:7e:a0:79:57:49:95:bd:f1:a2:
24:d8:6c:25:c8:3e:af:fc:25:0b:8f:33:96:a8:7d:6d:c9:28:
30:c0:8f:df:0e:ef:13:cd:de:d8:49:a9:99:59:9a:94:f1:00:
5e:b0:ae:5f:58:2f:2b:34:19:ee:ad:19:67:d1:9a:14:e3:7d:
7a:0d:97:08:f6:c9:9f:95:c9:f7:23:f9:65:bd:89:b3:2d:65:
8c:7f:69:4f:19:12:71:d4:25:0b:30:ab:58:13:ad:66:59:9e:
b7:93:56:67:6b:7a:a5:0d:8f:44:98:c6:43:d8:65:a9:ab:a0:
43:8a:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:00:09 2025 by rpki-client