Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: DpMvGZYgE8Ue4BXq2bhND4xPENIh21hw06fEd11AASM=
Subject key identifier: 56:1D:D8:2E:E2:AE:25:5A:42:13:4C:6B:5C:05:A1:C9:2B:24:EE:F9
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 0196A051D53801AA01D60C60F110E9A35CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 11D0
Signing time: Mon 05 May 2025 12:00:39 +0000
Manifest this update: Mon 05 May 2025 12:00:39 +0000
Manifest next update: Tue 06 May 2025 12:00:39 +0000
Files and hashes: 1: SSnanM1-AOhB6jazpGw2Wx5qtsA.roa (hash: PJm2LHbdL6q86F0ojR19eAq4coi3I/A843rYXRGwOLE=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: NYBaux1+Ci2tVjW3CphfOJZbF8cBdcWScCHWxqki3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:d5:38:01:aa:01:d6:0c:60:f1:10:e9:a3:5c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: May 5 12:00:39 2025 GMT
Not After : May 6 12:00:39 2025 GMT
Subject: CN=561dd82ee2ae255a42134c6b5c05a1c92b24eef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:56:c3:2d:33:42:35:52:eb:e6:ea:e0:7d:
13:64:28:57:fe:f0:a2:75:e8:3c:11:8c:6b:bf:11:
fe:02:3e:b1:3d:2c:db:fc:e2:78:aa:cb:98:5b:1c:
84:1d:c9:a3:8c:8c:7e:11:9c:a5:05:e5:8e:57:e6:
b9:1e:f4:a9:f6:1e:ee:4a:d4:51:ed:d4:7e:89:2d:
dd:87:8a:7d:e7:ed:89:36:69:8c:00:ba:26:c0:c5:
0c:21:6b:a6:b8:89:03:cf:64:04:53:a5:19:c7:2e:
f2:6e:3d:0e:fd:21:01:aa:94:4c:87:b1:61:67:bd:
d6:d8:a7:0d:a1:a8:91:b2:f2:ed:30:e0:2e:b7:dc:
35:70:a0:d1:d4:6f:10:53:8e:18:5c:09:65:46:7d:
81:45:a3:67:23:db:4e:0e:05:42:d4:3c:f5:f6:e1:
17:49:b4:22:a1:7b:68:48:8f:38:d4:db:88:a0:3a:
b0:46:8a:4d:9f:f3:76:6e:79:3c:15:46:dc:d3:46:
6f:d0:80:d8:c3:c5:8d:cf:49:c1:23:08:46:b8:fd:
22:4a:a4:50:55:49:90:71:9c:70:7a:3d:52:85:56:
95:2c:f2:f8:17:d6:54:28:e0:79:cf:02:6d:8e:8a:
1d:31:50:d6:5a:f6:41:3e:3e:71:c2:56:b4:0b:bb:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1D:D8:2E:E2:AE:25:5A:42:13:4C:6B:5C:05:A1:C9:2B:24:EE:F9
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9b:03:56:e9:78:37:ab:c7:a3:89:d5:b1:bf:1a:a4:4d:ed:
26:6a:65:af:fe:40:f6:c3:e2:4e:51:78:c9:57:99:e5:52:8f:
8b:ae:2b:12:05:c3:fa:0a:e0:d3:4b:29:19:89:19:32:18:b5:
c3:f6:f0:84:71:c2:70:83:e5:7f:f1:26:91:5d:17:f3:15:26:
f0:c6:1f:fd:e6:fb:32:f6:c5:0c:62:79:e4:88:d7:20:d5:ff:
b9:40:b9:25:16:98:3e:05:8e:30:b5:b1:41:75:06:f6:43:ae:
8c:fb:c0:6a:48:69:65:11:89:13:f8:ff:2f:cd:f6:d5:c5:95:
c1:65:ab:42:4d:f2:10:44:ea:71:43:c3:9e:c5:6e:1d:be:76:
f9:8a:0e:48:c7:51:04:d8:39:d1:dc:77:bd:2a:72:d7:6e:af:
94:66:dc:fa:81:54:5c:95:c7:46:c4:ca:29:39:f0:14:60:73:
8f:0c:4f:ec:92:83:4f:1e:e7:68:86:1b:d4:9c:b4:5b:f5:5a:
7b:fe:89:cc:5e:45:72:12:ec:13:e1:6e:28:85:29:d0:69:99:
8b:04:1a:b8:e1:a6:3d:4b:b1:b8:3b:c6:ba:62:9d:35:5f:5d:
40:ae:a9:64:7c:b0:b4:3d:55:8a:f2:35:06:c4:76:15:a6:69:
1b:02:d0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:51:57 2025 by rpki-client