Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: Iq/msUymmq8L/KWcUknLk+ZhP3JHgDWgmTchlGlhac4=
Subject key identifier: DB:EA:39:10:EA:B0:FE:6F:D9:58:76:F4:77:6D:09:51:81:20:CB:34
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 0196CE05EE72F0421F624E954B84D9A9BD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 10FC
Signing time: Wed 14 May 2025 09:00:17 +0000
Manifest this update: Wed 14 May 2025 09:00:17 +0000
Manifest next update: Thu 15 May 2025 09:00:17 +0000
Files and hashes: 1: epViL3MVi9bWXcuzA24cAMVu98I.roa (hash: SrcEH3xgjkVSJRtnVeoxwKETukrMGUr8rXBzqe4u9C8=)
2: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: vFMaQSGHaXBP7k2IWyItmpj0QvuEwRyJIeeaKu3dUoU=)
3: t21KiufosQo5FokIl-zuM5q85cQ.roa (hash: ORk8mRTrURZ5LhEnK810DaoqajLoQtqn9GMcGAQKm3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:05:ee:72:f0:42:1f:62:4e:95:4b:84:d9:a9:bd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: May 14 09:00:17 2025 GMT
Not After : May 15 09:00:17 2025 GMT
Subject: CN=dbea3910eab0fe6fd95876f4776d09518120cb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:d8:7e:b6:5b:ad:db:b3:1b:a0:d0:aa:ce:
be:38:14:c6:a4:ea:79:e3:10:b7:f0:6a:4a:f2:9c:
3e:60:a2:65:71:b1:89:6e:f2:ce:d3:5e:1c:3a:d6:
e1:66:c6:de:dc:f1:f2:d2:2b:4f:7c:9c:ef:f4:5a:
10:c8:87:ba:bd:67:ee:c8:a8:00:0a:e6:a8:cb:4d:
f0:29:b3:19:8a:f7:42:f3:20:9b:00:cd:29:39:4f:
eb:b6:9f:0a:57:6d:05:9d:15:8a:0e:66:d2:b1:ae:
e2:f3:fb:48:ea:b4:1a:85:7a:33:ab:43:be:90:86:
a0:17:8d:ea:71:8f:d0:94:6d:3b:bb:12:c0:8f:93:
a0:de:45:90:9b:5f:05:49:be:e4:ee:d4:21:b0:0a:
ba:ed:7d:81:cc:fc:fd:fb:0f:d0:d3:05:0d:10:08:
a8:20:80:aa:c6:ac:70:a3:69:81:2a:fe:a4:4a:5d:
83:1e:b8:b0:27:36:44:52:97:6d:cb:b2:68:37:9b:
a6:ce:45:0b:2c:67:b2:f3:44:7a:5b:20:a8:3c:28:
d5:8a:0b:99:d2:83:a7:34:c7:5f:6e:96:1a:87:c0:
54:16:66:51:8b:c0:86:35:15:78:60:61:44:ea:53:
96:3a:b7:ca:47:8f:43:fb:ab:95:e7:35:5b:d4:f1:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EA:39:10:EA:B0:FE:6F:D9:58:76:F4:77:6D:09:51:81:20:CB:34
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:72:a2:a7:03:84:ed:e9:e7:d6:62:48:12:a3:c7:f1:a1:f5:
df:44:e8:ca:86:1d:74:0f:7d:45:90:15:59:c6:fd:bb:2b:4d:
48:0c:96:be:86:7f:4c:f7:2c:67:24:97:81:2a:1a:e2:65:8f:
c2:b9:cf:ba:a4:9d:07:e5:38:7c:a3:a6:b6:77:4e:3a:98:1e:
a2:c8:fa:f9:44:a3:34:81:02:a0:99:d2:81:50:ba:1e:58:fc:
57:97:5c:43:71:94:9e:04:0f:18:12:9e:41:ef:3b:46:a6:71:
c1:4b:a6:d7:ca:4d:62:14:68:e6:5b:a9:73:e2:04:a8:e3:b9:
c3:b3:53:5f:d0:16:55:92:76:ca:42:f2:3d:e8:27:33:37:a3:
72:4b:3d:57:5c:30:c8:56:44:a7:3d:9d:49:0e:de:c2:c5:77:
ae:96:8b:fa:7a:6f:8d:f5:2b:70:01:d0:b2:c2:4d:c8:ff:86:
08:6a:02:5b:1c:d1:2a:40:ee:75:1d:80:f9:b2:84:c2:c6:e2:
ae:00:f4:5c:0d:e3:a0:be:8a:a8:74:78:f3:9a:2a:c3:9a:8d:
a3:19:a6:46:34:81:e5:96:63:5f:04:9e:07:d5:78:4d:93:a7:
ed:88:5d:8e:15:23:9c:2a:bb:15:0a:47:8a:0e:49:f2:95:d9:
42:a9:41:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:24:37 2025 by rpki-client