Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier: dAV4JKGl11GfzsFtvQalArtYcFE6Wtmg/s4/WemrGn8=
Subject key identifier: 7A:E2:92:EA:F3:CF:F5:7F:5F:E7:B0:82:D0:2D:95:63:6B:CC:5A:A1
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial: 0196BE93074DCE10044E4B8746E994EAB239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number: 02AC
Signing time: Sun 11 May 2025 09:00:28 +0000
Manifest this update: Sun 11 May 2025 09:00:28 +0000
Manifest next update: Mon 12 May 2025 09:00:28 +0000
Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: 0xoMrBTdtarrGgevWwS+Jhps+yqxFLSaEsakjfLnHmw=)
2: zVisEWOE63cgJitrBEvJgl69e3s.roa (hash: XbX4/gD81xbjCKcZpF0h9K2QmjSBOOrAtln50jZvE7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:07:4d:ce:10:04:4e:4b:87:46:e9:94:ea:b2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Validity
Not Before: May 11 09:00:28 2025 GMT
Not After : May 12 09:00:28 2025 GMT
Subject: CN=7ae292eaf3cff57f5fe7b082d02d95636bcc5aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:76:d2:ad:5a:12:d4:98:8e:57:90:f0:9c:
a0:58:fe:e4:12:95:fe:eb:cd:be:3c:e4:2e:90:e3:
15:2d:c3:8c:be:e8:1e:80:35:ca:8a:66:3d:71:11:
5d:be:3a:69:8a:f0:4a:5c:e2:60:1a:86:ec:f4:f4:
cd:19:08:aa:95:39:01:90:c1:c6:08:46:e9:7f:a5:
f6:04:a8:71:8e:14:11:c5:0b:b2:15:e2:7c:6f:9d:
15:00:d1:2b:e3:2c:94:02:2f:e3:b9:2c:8a:f4:f5:
f0:47:43:1f:da:82:cc:a7:c0:d1:66:16:2d:c8:f1:
81:59:9f:2e:29:cf:b7:7f:7a:c0:7f:bf:fe:1f:30:
bd:ca:b4:06:d6:14:c8:a3:1c:b3:ad:72:b7:3f:a8:
3e:66:4b:55:00:91:29:84:95:03:5d:36:8d:b0:c9:
3f:50:8a:89:1e:dc:5e:3b:14:c0:c3:01:65:47:fc:
3f:70:9e:b4:c1:f6:b1:5c:b9:95:06:78:c5:df:ea:
a8:47:e3:96:8e:eb:ae:8d:7d:93:6d:cd:e7:75:37:
41:a5:a2:4c:ff:86:e5:d7:77:85:45:c8:c1:fb:22:
4d:e9:c9:d1:7c:cc:10:2d:bc:c8:a3:62:46:0a:1d:
18:6b:e9:dc:3b:d5:f4:83:9a:bf:27:bc:de:1f:56:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:92:EA:F3:CF:F5:7F:5F:E7:B0:82:D0:2D:95:63:6B:CC:5A:A1
X509v3 Authority Key Identifier:
keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0d:95:fb:d3:a5:00:e7:05:55:81:c2:a6:3b:aa:b0:05:11:
84:1b:c3:61:cf:29:41:76:ad:c7:2a:ac:f7:89:eb:89:1a:6a:
e7:63:88:ca:92:f6:5b:70:e4:f9:c9:45:d0:ad:e4:b5:c3:a3:
7b:45:23:3f:68:b0:ea:7c:10:bf:52:68:32:70:c3:52:44:20:
e8:ab:41:bb:2c:8e:9e:28:19:c2:12:fd:72:82:63:8c:d5:54:
50:f1:54:21:8d:fe:bb:83:6e:15:8b:78:04:d4:2c:ec:1b:d6:
91:d4:74:17:f7:dc:e6:b8:18:1c:34:60:1e:a0:aa:42:9a:f8:
4f:d8:1a:9e:75:5b:fb:a6:ac:be:08:c2:13:14:05:11:13:3f:
08:88:94:be:bd:78:b6:e4:3d:d5:fb:8e:2d:be:85:31:6b:56:
7f:3c:08:b4:86:d6:6c:06:22:60:df:26:32:9a:d6:50:8b:59:
8a:68:11:2d:2b:b5:4b:4a:21:05:2d:df:0b:05:d1:77:02:6f:
e0:9e:15:b4:2a:eb:1e:4d:e4:e4:f7:85:01:b0:9c:51:89:50:
9e:1c:82:20:f2:aa:a8:c7:64:12:2c:d1:02:dd:52:a0:6c:0b:
4b:a7:a9:d1:2f:57:fd:be:53:75:d0:60:d9:74:fd:ac:61:90:
69:12:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:35:57 2025 by rpki-client