Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: RqlWDXDkSeop6J64e7sxlebV9uht9C21+qMYmTku6LI=
Subject key identifier: F9:39:9C:96:1A:6A:57:D9:F4:29:A3:36:E2:AC:7D:A5:9C:05:3B:1A
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 01969FE437A43C297736F713E13F68578481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 08FA
Signing time: Mon 05 May 2025 10:00:55 +0000
Manifest this update: Mon 05 May 2025 10:00:55 +0000
Manifest next update: Tue 06 May 2025 10:00:55 +0000
Files and hashes: 1: DTF9ONSmCnj34QSV3oz7U0spqDo.roa (hash: Kw2YkPP6grSzeM7Vvpfj0GyDu4r4ER5vZalMBblwx+c=)
2: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (hash: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=)
3: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: W+zWfi/CtQzsi+JnLCdSIyZRcmGII7YNHOWW9YnJosY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:37:a4:3c:29:77:36:f7:13:e1:3f:68:57:84:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: May 5 10:00:55 2025 GMT
Not After : May 6 10:00:55 2025 GMT
Subject: CN=f9399c961a6a57d9f429a336e2ac7da59c053b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:40:f7:63:58:a2:8a:c0:37:94:86:1b:20:
c7:e3:e8:7a:f9:d2:39:43:a0:6e:c6:32:74:96:9d:
6a:70:03:2e:a3:30:95:d9:0c:31:c0:01:57:df:0f:
8b:af:e3:13:30:c9:6f:c6:03:81:c6:76:79:ce:60:
23:a2:24:db:ad:15:53:1f:9c:bd:eb:67:46:76:11:
be:b8:dd:46:33:4b:cc:64:7c:00:f5:81:cf:6d:36:
a9:91:bc:c8:5b:cd:27:31:b9:07:f1:26:cb:d9:74:
ba:08:e0:fe:43:3a:ff:71:0e:c5:4f:eb:3a:97:dd:
a7:31:54:80:6d:2c:bb:a6:40:bd:a6:8b:8c:91:fb:
2c:52:52:ed:65:09:45:44:ca:91:22:b9:e3:48:a5:
1a:82:26:7b:ef:40:75:ec:6f:bf:d5:30:26:8c:cc:
ca:49:86:5c:9c:e8:b3:51:db:cf:5c:dc:ea:77:ae:
58:28:6c:17:34:9e:71:92:2c:8a:ec:01:cc:80:16:
e2:bd:ce:c0:15:4f:bc:0b:ff:23:40:f1:ff:1b:82:
ac:29:80:da:7f:5d:7e:1b:de:a0:6c:ae:af:23:53:
7e:df:26:7e:12:65:a5:bb:43:bc:1c:86:75:be:8a:
c8:2e:18:97:d1:3c:ed:e3:08:a0:f6:40:c1:56:86:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:39:9C:96:1A:6A:57:D9:F4:29:A3:36:E2:AC:7D:A5:9C:05:3B:1A
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8d:3a:eb:9d:85:cb:5c:19:59:0e:73:f6:07:62:7f:a3:b1:
95:b8:b2:5c:1d:6f:5e:a3:9e:53:14:4f:f3:9d:ff:13:3f:a5:
eb:2b:ac:a6:e4:09:eb:78:7a:5d:ba:55:7a:67:52:8c:9d:d6:
06:c2:41:32:c1:18:61:6c:d2:e3:81:6a:6c:06:53:a4:61:7c:
9f:a1:89:80:91:45:7d:07:24:a4:67:8d:84:a5:22:6b:65:a2:
1c:0b:f7:ea:c5:51:dc:64:ef:34:0d:14:19:5e:85:41:47:3f:
a2:5a:02:fd:fb:da:37:9a:a3:8b:cc:82:73:91:bc:20:d8:1d:
6f:e7:fe:1e:34:cd:ec:1f:18:24:7f:81:8b:53:e5:94:78:32:
ef:67:01:5d:c5:61:a0:5f:73:a6:53:b0:21:9a:68:45:ab:f5:
54:34:fe:da:60:00:9a:6c:2f:20:5d:6e:21:e7:46:4a:d1:3f:
42:1f:b0:7c:66:df:08:de:df:c3:cb:35:33:91:4f:cd:d6:21:
e8:fc:c6:d9:3b:79:83:ab:e7:46:71:e9:59:6e:f5:81:94:a5:
56:49:02:c8:ff:8f:92:78:72:17:82:47:a8:d7:bc:a9:9e:b8:
d4:3c:e1:05:b3:a3:e1:99:6f:a9:8b:e1:e4:cc:38:a5:02:bf:
b4:a4:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:14:41 2025 by rpki-client