Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: 1ncgJGVTTKpaafiPTYpbO4RD+ReegBT7tcWUJSblipc=
Subject key identifier: E0:2F:C0:3F:85:C6:54:B6:57:6F:66:56:D7:7A:07:4D:E5:0A:82:E5
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 0196A3C0B6798A120AB6772D22D4A0C28D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0C79
Signing time: Tue 06 May 2025 04:00:37 +0000
Manifest this update: Tue 06 May 2025 04:00:37 +0000
Manifest next update: Wed 07 May 2025 04:00:37 +0000
Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: plVCyrj9Uhr9O37O1etDDSVflm3C5rDzJ1peDQ2/SIY=)
3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:b6:79:8a:12:0a:b6:77:2d:22:d4:a0:c2:8d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: May 6 04:00:37 2025 GMT
Not After : May 7 04:00:37 2025 GMT
Subject: CN=e02fc03f85c654b6576f6656d77a074de50a82e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:83:15:01:31:8b:b3:b7:f8:e5:00:19:1c:
b2:70:65:5f:d0:1e:dc:7d:81:d6:28:33:8d:77:32:
ff:c6:e0:c5:cf:f5:45:47:a3:df:07:67:36:48:b3:
07:cc:52:9f:ca:ba:57:c6:86:29:33:ca:1d:c9:ee:
f7:a1:62:fa:5f:a3:87:f4:50:fa:a5:de:35:2c:7a:
7f:e8:f5:a7:57:a8:ab:e3:99:9b:6f:82:92:e0:64:
38:0a:c1:91:fd:8b:02:2d:d7:3c:f5:21:a9:68:f4:
7b:eb:f4:ce:e6:50:77:46:ca:d9:8d:3f:32:4f:ec:
80:8d:fc:b6:fe:ec:56:26:4e:eb:41:e1:b6:a2:fd:
0a:e0:ad:29:e0:df:7c:44:6e:f8:90:e4:03:a9:3b:
1b:e5:97:63:79:cd:14:c4:cf:5c:27:cd:70:28:c6:
3f:29:21:af:cb:c5:22:86:e5:a5:0f:17:37:71:ee:
84:9e:dc:36:94:58:2f:13:1c:79:91:1e:23:37:56:
6d:8b:06:d6:e3:2f:06:46:4f:67:5b:18:69:c5:84:
85:db:77:ad:4b:13:fa:70:f5:38:74:1e:46:ec:53:
cc:a0:84:1c:db:fd:38:04:b7:0f:15:14:48:ef:e8:
d5:68:4e:5f:54:b7:3f:27:19:ad:84:2e:6f:f0:9f:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2F:C0:3F:85:C6:54:B6:57:6F:66:56:D7:7A:07:4D:E5:0A:82:E5
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ef:9e:58:11:52:58:c2:3e:dd:6f:c9:95:fc:a0:77:fb:db:
c1:c5:3c:b9:63:8f:d5:f1:49:00:ba:9a:f5:0e:8f:a3:91:0e:
c8:19:a1:e6:36:09:0a:fa:55:1c:b8:56:d6:55:96:d0:c7:a6:
ec:d6:66:dc:76:c3:87:cd:e8:d2:12:47:8e:cd:91:c6:ff:90:
93:ee:aa:11:b9:6a:48:c3:cf:17:74:a6:d0:7a:7d:f2:4b:e2:
49:d1:38:70:4c:5a:61:9a:8d:7c:ff:59:1d:e8:b0:df:34:97:
be:be:94:3c:a2:a9:e1:b0:e9:be:81:d1:6c:fe:5f:b3:75:d2:
cb:71:88:83:b3:6e:41:64:58:36:c3:e2:f8:0a:15:56:b8:f0:
62:34:17:19:f6:5b:d5:27:bf:8d:a8:38:70:69:be:43:55:e6:
5b:4e:f7:23:9f:b4:0e:c4:71:fe:df:88:ea:e2:8b:40:86:13:
11:82:ea:8b:6e:61:68:fd:ea:02:2e:f9:2c:a2:3c:e6:8d:b6:
c7:c6:87:df:4e:c0:5d:cf:8e:6e:dc:a7:13:19:a8:e6:ce:08:
be:fe:d5:a3:97:c5:f9:4c:8c:7c:ef:91:31:f3:91:8f:5e:25:
b6:86:7f:c9:aa:44:49:34:18:35:63:03:1e:fc:3d:5c:9b:9a:
64:8e:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:17:16 2025 by rpki-client