Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: 4Ik0MeJ5/oskk4EoiXMMWSVRog1OivzdncCOi0FIQg4=
Subject key identifier: AC:4D:8F:C0:ED:BF:AA:64:89:1A:B0:4B:25:29:7A:B5:A5:9C:A0:09
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 0196C0B87AA2C8A6FAC741C4B4BF86F2BA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 075B
Signing time: Sun 11 May 2025 19:00:37 +0000
Manifest this update: Sun 11 May 2025 19:00:37 +0000
Manifest next update: Mon 12 May 2025 19:00:37 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: aA0AeWAiFQttGK6WW8xuxza/3PZwa15eLL9MvlQl/Io=)
2: YRQ4Vg3A1i1QaO-e977IcW6KB9E.roa (hash: rc17/JwW2r6jYEgRn/1E0O8jtu0CDbAtQ0C5kFjlEwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:7a:a2:c8:a6:fa:c7:41:c4:b4:bf:86:f2:ba:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: May 11 19:00:37 2025 GMT
Not After : May 12 19:00:37 2025 GMT
Subject: CN=ac4d8fc0edbfaa64891ab04b25297ab5a59ca009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d1:ba:d1:1f:c4:fc:1c:40:8b:ae:c0:b0:f9:
37:7e:fc:27:49:c7:94:65:fd:42:ae:28:61:82:93:
1a:df:2d:47:21:dd:e9:2d:d2:91:0e:24:a9:59:0d:
44:05:f9:d1:c4:94:e5:28:58:e1:d4:79:32:4d:97:
f7:f3:38:88:ca:80:18:c5:1c:9f:c1:82:ae:11:6e:
07:5c:6c:bc:e9:c3:bd:f5:12:3c:a0:56:28:07:bb:
64:64:0d:d2:3d:cd:34:be:90:e1:82:fb:95:4a:0a:
37:26:58:01:3c:ba:41:dd:61:a8:9e:e2:fa:e2:95:
d1:ae:d1:ed:4e:9d:9d:92:88:18:77:97:1d:bb:c7:
ce:a5:a0:80:da:30:75:64:77:55:a7:a8:17:43:03:
6f:ca:a5:93:21:6f:d8:9a:a6:8c:6c:1b:77:9b:11:
49:a7:c0:de:f9:a2:9f:66:21:f5:22:d7:0f:05:08:
3b:00:3d:25:f5:1e:71:2e:d7:ee:05:41:e2:42:fb:
f9:13:9b:33:5c:27:8b:e7:26:44:83:c3:da:48:eb:
a4:69:dd:d5:f8:86:7d:1f:e8:05:a4:fd:c9:1a:90:
8a:20:38:fb:5f:41:2b:22:ee:29:05:b9:a7:9e:8b:
13:37:2d:86:1c:1e:ed:81:47:d2:ca:b7:a6:2b:e8:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4D:8F:C0:ED:BF:AA:64:89:1A:B0:4B:25:29:7A:B5:A5:9C:A0:09
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d4:53:36:7a:70:e1:4b:05:98:27:6b:0b:95:69:9b:a6:f0:
fe:f7:9a:4c:e6:4a:42:a3:5c:de:8d:a3:16:67:8d:de:9f:51:
2c:00:45:e4:f0:18:19:c9:7b:c1:ab:85:b6:a3:4c:b9:aa:98:
35:dd:be:99:f8:51:3a:05:58:cc:9b:f2:ff:55:83:d0:4b:65:
f9:7f:84:d7:15:c0:bc:85:d7:10:44:08:1b:95:0d:c5:4a:d4:
9e:35:e6:30:e0:bf:d9:c9:d0:0c:3d:02:70:eb:c3:33:24:f3:
4c:f6:74:91:d7:89:03:93:6d:ca:03:0d:a4:09:9f:84:ac:e8:
52:69:28:51:c9:74:5b:dd:b7:90:e3:7e:0d:8b:ad:db:e8:38:
3c:95:50:25:63:fe:d1:f9:6d:07:54:c5:cd:99:09:7b:59:f1:
bf:85:51:b7:64:7e:7b:74:24:c6:31:de:cf:f1:47:7a:da:08:
91:aa:3b:ed:83:24:13:f6:4f:aa:b4:35:9d:c9:fd:c8:e5:48:
01:56:1d:00:76:de:ac:de:d9:0a:98:89:8a:85:cf:09:fe:c6:
d3:43:d7:11:3d:42:a7:15:48:46:f3:38:53:c2:20:04:67:f0:
20:8d:5e:43:36:d0:30:a7:45:66:b7:52:a6:12:b5:f8:41:24:
0a:47:e9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:08:08 2025 by rpki-client