Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier: UxvPHlu8FauTKG+y2ZK7UFCvnxLjtOnzMPQlz6tSTFI=
Subject key identifier: 97:E9:8D:39:73:65:F9:70:77:60:4D:53:CD:5A:6C:9C:D1:6F:01:6B
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 0196B3D86BDA4B553082B40B1067BCD1DD8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number: 1536
Signing time: Fri 09 May 2025 07:00:27 +0000
Manifest this update: Fri 09 May 2025 07:00:27 +0000
Manifest next update: Sat 10 May 2025 07:00:27 +0000
Files and hashes: 1: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: Rhm4tFdiyEOink/es3G7nvjdAdXY42xdiyCmLoBBcZ8=)
2: yAlyRVhdV45Fhlz_SXSaEBYr95c.roa (hash: hbq+j/95NHgwMsXopbiJ/iZdMmpOcPkLx/w1fsKJD10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:6b:da:4b:55:30:82:b4:0b:10:67:bc:d1:dd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: May 9 07:00:27 2025 GMT
Not After : May 10 07:00:27 2025 GMT
Subject: CN=97e98d397365f97077604d53cd5a6c9cd16f016b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:ef:ee:30:74:51:a7:6c:6b:1d:76:bf:27:
64:26:b8:3f:f2:df:a2:08:d9:95:f3:86:0e:2d:5e:
7d:f3:cc:b7:e1:f9:9e:e3:c0:2d:e1:6e:b4:d9:ea:
e4:d1:9d:8b:c4:e2:a3:a0:e9:34:22:63:e8:cb:82:
98:fc:05:5a:6f:8d:a9:fd:10:e8:88:03:8d:58:be:
80:22:cf:77:f8:a9:e2:1e:76:1b:4e:41:78:61:5c:
a2:99:0c:e3:8a:fb:51:cd:71:fc:4f:a7:b8:40:59:
50:67:bc:12:f0:c8:32:f2:92:c7:f8:68:c9:0a:b9:
a4:8c:df:ee:54:13:0c:01:e3:3e:67:91:49:5d:fd:
2a:e0:c0:b8:58:0c:97:f4:45:87:36:61:f3:19:e0:
10:89:4a:c7:a8:df:0a:4e:72:a2:81:89:67:9e:78:
74:fa:e3:0c:d5:ca:f6:ab:8b:73:c5:97:78:f1:3d:
a9:5e:bb:c3:b0:f4:14:3b:4f:35:67:50:97:d1:20:
10:98:aa:ee:4c:2b:da:8a:36:99:53:34:ed:ba:75:
ff:9a:a1:6b:d9:62:1b:7a:e2:b6:60:75:e7:c8:75:
f6:2d:89:82:38:f4:76:23:38:5d:82:f5:a8:c0:0f:
a2:7b:f2:9b:41:85:bc:4b:04:ec:01:94:40:6f:88:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E9:8D:39:73:65:F9:70:77:60:4D:53:CD:5A:6C:9C:D1:6F:01:6B
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:dc:9c:92:52:ad:ae:b5:87:27:63:fc:50:2d:30:1f:c7:c3:
50:51:a2:8e:bc:ed:00:9a:3b:ae:75:64:f4:64:72:d9:57:9c:
d3:c5:50:51:78:2e:e3:c5:d7:6c:85:d4:25:31:2a:00:57:25:
e6:fd:a2:b4:d0:4c:19:1f:58:eb:0b:93:48:5f:8e:26:b3:25:
4a:0c:2f:ba:7e:74:0b:30:41:0b:68:ff:4f:49:e0:21:bb:c8:
1a:c4:93:32:f7:14:2b:65:c6:db:78:18:da:6f:7b:e1:7c:06:
57:20:c6:75:b6:b4:41:44:bf:ad:08:89:db:e3:71:be:46:f6:
06:3c:54:57:54:ab:6a:e6:16:90:a5:62:1a:41:5c:aa:23:8d:
ab:fc:64:ec:21:12:ad:58:60:24:fa:6f:3a:b2:63:ab:9f:7d:
d4:3c:93:1a:27:d6:2d:35:ec:63:a5:27:13:da:9b:e9:9d:d3:
74:b7:a1:e5:17:fd:66:b9:09:f3:fb:c7:4a:a4:9a:dc:d6:11:
e0:9d:30:77:be:c1:46:57:04:5c:15:1d:e0:40:6f:82:35:31:
12:97:e5:9b:fe:72:e6:ae:4a:33:f9:cc:09:be:64:25:28:1a:
ba:a3:72:c3:b7:5d:d9:da:49:b9:c0:87:99:ed:87:57:dc:16:
1b:2b:40:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:49:48 2025 by rpki-client