Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json)
Hash identifier: NnkIuHUjOwPgITHOi+fmHGLRXl98508H1KGwqOFdlYI=
Subject key identifier: CA:A1:EC:70:26:72:CF:BC:45:36:AE:B1:1A:91:60:1B:5A:A4:8B:B6
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 0196BC6E71BE325DA632408D7A5D3872AA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
Manifest number: 0A5C
Signing time: Sat 10 May 2025 23:01:16 +0000
Manifest this update: Sat 10 May 2025 23:01:16 +0000
Manifest next update: Sun 11 May 2025 23:01:16 +0000
Files and hashes: 1: j7tAtkU7X16dxo0q2axkpmgR2Jg.roa (hash: ee9X5e2Gsq7S7vtFMXjQ62kSEkjJdHkxbRMmxnYqFY4=)
2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: W16y6wUlneZZUyYknBFvhuYVxnV/r/nDGK6RPGAkTjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:71:be:32:5d:a6:32:40:8d:7a:5d:38:72:aa:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: May 10 23:01:16 2025 GMT
Not After : May 11 23:01:16 2025 GMT
Subject: CN=caa1ec702672cfbc4536aeb11a91601b5aa48bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3c:7f:16:5b:4b:b0:da:3c:0b:77:81:dd:6a:
4e:62:87:a4:b1:57:ae:b3:76:1d:c6:ad:ea:7e:45:
4d:3e:93:a9:a5:b4:31:1b:d3:06:be:0e:fc:ee:8e:
89:57:a8:1f:85:f5:b6:a9:8e:41:ff:16:dd:f6:a6:
e6:19:89:f2:12:68:62:1b:cb:23:ee:3d:7e:ff:5e:
7e:d0:85:b1:d9:11:5f:e4:5d:69:ce:31:9b:e3:f5:
7f:ba:44:ad:28:eb:82:f7:10:ca:e5:bf:61:e6:67:
ce:25:d5:a5:e5:b1:5d:57:d8:e1:6f:b7:06:ca:dc:
10:66:02:d1:af:e5:eb:04:f6:92:32:de:97:dd:28:
e4:37:84:b4:32:9d:d4:89:5b:57:da:9a:4a:b9:f6:
87:08:45:e2:b8:02:25:1f:9b:76:09:f9:64:0a:fc:
f2:c3:b2:63:17:54:8c:4d:cb:dd:6d:5e:02:94:be:
5a:9e:f6:56:3a:8c:49:34:5e:7b:ce:3e:74:11:e3:
e3:6f:7e:8a:56:6e:be:17:ab:e3:3d:dd:4d:9c:bd:
28:09:ce:70:f4:da:6a:6c:da:2c:41:6d:5f:0f:48:
b8:bf:20:fd:1d:4c:6a:fb:51:ff:26:a5:46:a2:24:
20:05:87:0f:44:7b:44:78:61:21:b0:70:87:b1:8a:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A1:EC:70:26:72:CF:BC:45:36:AE:B1:1A:91:60:1B:5A:A4:8B:B6
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d2:9e:11:d5:fd:02:11:76:53:ec:98:a8:28:b5:35:b3:2e:
f8:78:52:8d:25:2c:22:d3:92:1a:62:0b:9d:27:6b:38:37:75:
aa:eb:9d:6a:c5:2a:79:77:d4:87:98:ce:7b:da:31:9c:5b:9f:
33:31:d0:c8:4c:32:65:e5:de:6c:b6:b5:a7:38:bd:d0:a9:2a:
7b:a4:31:0c:60:d5:4e:e6:cd:81:59:80:44:e9:62:1a:ce:ad:
50:49:30:7e:33:4b:ae:3f:b0:4a:58:8e:80:df:b6:30:ba:c2:
bf:ed:a9:b2:15:35:d3:8f:07:f8:d2:d3:e4:4a:28:99:45:bb:
be:df:f2:d1:45:dc:85:d6:c5:ee:64:c3:24:e5:4b:b6:a3:a9:
98:64:b7:62:95:0c:06:56:76:1a:5d:b4:63:08:d5:0a:ba:8b:
a9:a3:0b:2f:81:45:66:7f:81:bb:bb:ff:81:18:c6:5d:94:7f:
b5:87:ea:06:e4:25:0c:93:88:07:c3:7b:41:0a:3e:53:6f:57:
ae:46:8a:7e:7c:8e:77:8c:eb:26:a0:36:f0:78:18:b3:4f:53:
a4:9c:be:c0:bb:fe:ad:b0:26:6d:0b:28:e4:03:fa:4c:35:7b:
e3:f7:f6:66:22:1f:57:96:6e:0a:96:90:36:33:bd:00:92:fd:
cf:51:93:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:08:14 2025 by rpki-client