Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: My//vXTzsBKTmd25igNZX0UHTlrZDWwOf2A8xIt+Ga8=
Subject key identifier: 2F:8C:3F:D4:96:93:76:62:91:23:12:D3:06:8C:A0:29:B3:82:7F:5B
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 0196A54107FCF7ED71961C22D3E244580CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 1317
Signing time: Tue 06 May 2025 11:00:24 +0000
Manifest this update: Tue 06 May 2025 11:00:24 +0000
Manifest next update: Wed 07 May 2025 11:00:24 +0000
Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: mjcVzYhdEPPC6roaw1v4Lxt4nIXgXyiaQBKXC6CyJO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:07:fc:f7:ed:71:96:1c:22:d3:e2:44:58:0c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: May 6 11:00:24 2025 GMT
Not After : May 7 11:00:24 2025 GMT
Subject: CN=2f8c3fd496937662912312d3068ca029b3827f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:01:14:a1:45:a4:f7:99:72:8a:83:04:ec:
e4:d7:f9:da:8e:ec:10:4a:a5:23:8e:13:b5:59:f2:
40:80:98:48:52:9c:2a:a2:11:ec:79:ab:e9:c7:22:
ef:92:30:1d:0d:d0:99:a7:ef:08:df:9e:56:03:a5:
4a:a6:c7:34:f5:e3:d7:e0:77:cd:d9:c7:8b:a8:4b:
80:fc:8d:df:60:34:f9:53:0f:17:b5:b0:7c:7d:7e:
ab:35:e3:8b:c7:c8:aa:63:92:65:1e:a5:78:4b:33:
61:ff:8b:9c:b9:1f:cc:79:88:07:9a:05:22:1d:b3:
08:29:e8:2e:e5:d5:6b:26:bb:66:6e:17:40:ac:ff:
f2:89:64:8e:96:4b:13:cf:12:42:b0:17:12:78:44:
a9:b5:90:a5:e7:a7:4a:bf:18:e2:b0:c1:f2:0a:cc:
c0:c7:77:b6:2a:52:da:e7:72:d9:78:a0:74:c4:93:
b2:77:87:7e:aa:3e:be:3a:0b:f1:82:3e:71:43:44:
39:67:ce:1a:ba:b4:6f:ea:a8:88:d5:bd:f7:42:c6:
c8:24:13:7a:7e:7d:19:97:4f:18:d3:88:03:51:1e:
5e:17:33:98:dc:09:ad:1c:18:80:79:ce:a3:61:ea:
26:ce:5c:6b:98:75:72:f3:7c:fa:c6:1f:9f:6a:57:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8C:3F:D4:96:93:76:62:91:23:12:D3:06:8C:A0:29:B3:82:7F:5B
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4a:37:6c:61:ba:9b:f5:ca:8c:06:47:b3:56:1c:ca:bf:48:
cc:fb:b9:d9:e9:f5:7d:fb:9d:68:9b:7c:4f:d8:bb:ee:3f:cb:
a5:b9:3e:0f:fa:f0:72:3f:0c:84:50:7b:db:5f:25:9c:6f:9d:
c0:4b:83:b2:d4:66:12:7f:c7:05:85:ee:d4:91:9b:71:84:6c:
d9:c9:22:b2:fb:46:79:0d:24:1e:9a:14:3d:74:79:4c:21:a0:
a1:c9:7f:69:94:f4:05:0d:12:0a:71:2e:30:10:9c:16:7b:e6:
e2:be:f0:9a:26:d0:25:f9:3b:56:40:9f:cf:b8:52:79:91:4d:
0d:d7:70:62:d7:9d:71:e8:6a:0a:d7:8c:3d:ac:e9:55:fe:5d:
87:90:b7:31:d3:31:dc:5f:65:db:69:f5:a4:fc:d6:ed:9b:1b:
49:e0:d0:03:5f:b0:57:d9:9c:81:a6:ba:dc:85:44:2a:b6:4d:
66:16:5c:b6:ed:09:ed:e5:4e:0d:b6:f3:95:32:7f:76:fd:3f:
b3:13:e1:bb:c7:63:b7:56:fa:62:0b:93:f0:b9:13:2e:6d:c8:
bc:a3:4b:6d:2d:96:e9:d2:0c:69:75:e2:2f:51:3f:a7:cb:4d:
27:30:32:28:e1:90:f5:1f:c7:28:7a:ae:54:d0:2a:ee:6a:c1:
1a:89:e0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:00:55 2025 by rpki-client