Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: YlQ+LUMKgEX1u32fpfj+jq8cYXDc5Lq1BNneXG4Kvpw=
Subject key identifier: 85:D7:11:FF:0C:E6:78:AE:F6:A7:93:DB:90:23:26:52:D0:4B:06:B0
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 0196C6836CF6499A5AAD76A6B251C2184E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 05FF
Signing time: Mon 12 May 2025 22:00:23 +0000
Manifest this update: Mon 12 May 2025 22:00:23 +0000
Manifest next update: Tue 13 May 2025 22:00:23 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: rR9oby73VS6T73WNTRXveHie1zVtFBV61Dfv43pJnEc=)
2: F2c_uapmp4EWBvth9YsoExmggYE.roa (hash: F+OHkAH0cbjuGBPEpniF6/AR3wbSHhM+96aLypnHnng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:6c:f6:49:9a:5a:ad:76:a6:b2:51:c2:18:4e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: May 12 22:00:23 2025 GMT
Not After : May 13 22:00:23 2025 GMT
Subject: CN=85d711ff0ce678aef6a793db90232652d04b06b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:48:47:95:b3:ff:9f:4d:dd:17:e4:87:d4:
85:93:75:b6:67:2f:58:30:e9:ab:6a:9f:22:aa:e2:
52:a9:d5:9b:41:20:fc:bd:49:21:f6:d1:5a:1c:25:
33:f9:69:2d:25:77:7e:cb:4c:22:4a:a6:82:71:21:
d8:6c:57:a8:0e:4f:30:1c:14:c3:ec:ae:6b:ab:9e:
f1:42:33:44:51:b6:9c:4b:3f:c9:b5:a3:70:63:9c:
01:07:76:60:49:e7:c6:78:49:cf:5f:d9:c0:98:0a:
1f:b7:ba:bf:e9:ad:37:f3:40:f9:60:4a:31:fe:ca:
6a:f5:7f:af:8f:1c:1d:c3:c2:c2:4e:c7:3d:03:31:
e7:66:88:ba:19:42:36:51:b9:55:ad:5c:c9:84:4e:
89:35:fe:0e:6c:00:11:b4:2e:c8:2e:e0:f2:77:dd:
64:8a:47:0d:bb:de:6b:47:64:68:9c:70:ab:1c:ce:
da:39:05:79:be:f1:e0:52:8b:c4:fe:63:a9:41:9c:
36:4d:96:1e:f6:80:23:91:23:2b:90:41:90:d9:7f:
e0:52:d8:fe:c5:d4:56:9c:97:08:1a:3b:3c:09:0b:
3b:71:32:d6:af:92:c6:2b:96:e7:15:78:cb:45:82:
46:c7:a3:3b:9d:cc:90:62:79:10:7f:65:29:64:02:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D7:11:FF:0C:E6:78:AE:F6:A7:93:DB:90:23:26:52:D0:4B:06:B0
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:23:47:9d:5c:23:0d:15:09:52:c4:ee:0e:57:4d:21:32:df:
0d:c5:05:07:15:42:5d:d1:c0:03:56:38:01:66:5b:64:f5:ee:
48:d6:ac:32:09:52:3f:fc:9a:86:a7:a8:39:6a:2c:7a:7f:a3:
81:15:a8:93:d1:d8:8d:07:f9:6d:85:21:e2:d0:29:55:73:f3:
3d:d8:78:a9:f3:0e:b1:16:05:55:ca:75:49:3c:13:8f:a7:3b:
5f:0e:02:31:a2:1b:31:81:5f:59:c4:a4:90:61:9f:bf:e7:87:
1f:97:01:fd:cb:26:0e:4e:a6:77:06:26:1a:fa:5c:54:a9:86:
40:f7:e1:39:30:d6:6e:cc:2c:28:17:a6:ca:ae:a4:27:5c:35:
f9:cc:d5:1a:80:87:33:ba:62:54:04:25:52:41:c2:08:44:f7:
a7:69:d3:6c:84:ab:ad:56:69:73:4f:bf:89:f7:d5:3f:cc:6d:
db:8e:56:b1:94:21:94:29:7c:d7:82:ae:48:1a:43:02:4f:e8:
ae:58:bf:fd:00:f8:0e:45:9a:30:aa:e7:76:46:a0:ff:67:b0:
df:7e:a9:36:8c:6c:1b:84:31:56:d7:de:4d:5e:14:2c:3f:08:
14:92:6f:83:ea:a3:b3:7d:60:3f:08:ab:72:59:6e:a8:9d:3e:
61:29:bd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:57:09 2025 by rpki-client