Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: arcpcbtjzJIQrY7yCA5VZblJMMWKuWdSbaZZmnBLaxs=
Subject key identifier: FE:90:2C:82:CC:4E:71:50:E2:6C:6A:95:77:51:A2:9C:AB:A5:F6:81
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 0196D664FA60674C624FBE20725FC176F324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 0440
Signing time: Fri 16 May 2025 00:01:03 +0000
Manifest this update: Fri 16 May 2025 00:01:03 +0000
Manifest next update: Sat 17 May 2025 00:01:03 +0000
Files and hashes: 1: O9Ajtyg883LEr8Ee-m5Sgn7FXHw.roa (hash: Im6AzYvYZrYyzytszKHEKC4yclMHkP5K8b4hpoNpsHk=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: 1yrlXcmmyTQVZ7syKX3D0fdHb1xXbhRWSfkAarRrO/Q=)
3: tx8PeD2NpfiRfHK9lGj-BUDFkyM.roa (hash: d3qvWfloftoYFMAYjWvL1QMprH3WKAy7gGfoEkSLBEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:64:fa:60:67:4c:62:4f:be:20:72:5f:c1:76:f3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: May 16 00:01:03 2025 GMT
Not After : May 17 00:01:03 2025 GMT
Subject: CN=fe902c82cc4e7150e26c6a957751a29caba5f681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:3d:1d:6c:3e:c4:dd:d3:a4:2b:9e:be:d3:
40:1f:b7:cb:1b:06:4b:1e:b8:b4:5c:2b:a6:c1:ad:
04:e2:c1:1a:65:ab:29:f2:9d:7e:47:a6:36:46:0d:
ef:dc:58:a3:d4:3a:e5:f0:e7:5a:31:a9:7f:6d:47:
0b:2a:53:5e:18:5a:ca:a4:fc:08:d2:82:8d:6c:e8:
a0:fe:16:c8:fd:fc:45:59:ad:01:61:04:75:63:9f:
cb:e2:19:56:df:81:e1:44:34:bb:56:a1:97:d5:c0:
52:dd:42:a4:3a:a7:7f:f6:72:af:ee:7e:17:1f:6d:
bc:06:06:b3:8d:87:b1:6b:01:2f:90:eb:20:a9:82:
38:36:43:65:33:99:60:b9:d6:af:33:2a:bc:7e:10:
73:e8:78:73:93:49:c2:aa:de:3f:89:29:96:d6:e4:
53:1d:ff:7e:7c:35:a6:ea:03:72:0f:69:ac:54:89:
ac:e7:a6:d6:66:a6:40:f4:31:48:d4:2a:3b:d1:af:
2f:c0:a8:72:9d:51:91:ae:87:d7:11:3e:68:47:54:
85:05:e8:8a:8a:12:27:01:f5:aa:0d:8d:e6:a6:f1:
b2:05:90:41:52:8a:d0:ad:9b:1a:a0:15:7e:09:6f:
dc:e7:c9:6d:06:cf:dd:b2:a2:00:4d:94:44:60:7a:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:90:2C:82:CC:4E:71:50:E2:6C:6A:95:77:51:A2:9C:AB:A5:F6:81
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:01:07:03:89:c7:8f:44:c1:ab:7c:f1:24:17:28:a6:cc:f1:
c9:3c:dc:8e:5d:d8:69:6a:26:15:fd:5b:59:f2:3a:e9:e0:57:
96:09:7a:a2:c2:2c:e4:5b:15:67:4d:ad:b4:51:16:67:32:69:
58:ab:2e:c2:76:59:48:ea:c1:75:ae:15:51:33:1c:75:b6:fd:
c9:06:53:78:09:22:ce:db:cc:fa:93:12:06:ad:5f:1d:cc:ca:
32:67:38:e6:ff:ed:a9:47:37:f7:84:26:ba:b5:33:45:82:07:
c0:27:6b:75:18:55:43:4c:82:1a:4b:64:e4:e2:32:6b:18:71:
80:11:d6:6a:b7:9b:1d:6e:fc:52:b9:fe:a3:1f:fa:75:cf:31:
5d:95:f1:0b:71:21:04:de:aa:09:aa:7c:3f:57:5c:3c:20:1b:
72:bc:b0:e1:a6:5c:9e:04:3a:db:e2:dd:32:2d:35:7c:b6:b3:
f6:78:96:ec:01:58:37:6b:f2:d8:1d:f1:03:0b:b7:56:74:1f:
55:c0:e5:c1:bf:17:9b:8a:d5:36:64:6e:df:ec:35:81:41:15:
0f:81:43:ad:f2:97:cd:c7:88:24:bb:79:37:86:91:9d:c0:a7:
8e:4d:54:34:27:4e:d6:7f:7e:10:7d:03:dd:ee:76:47:51:d1:
9e:1f:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:49:39 2025 by rpki-client