Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
File: md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json)
Hash identifier: za3ZeHVIRZ48svDtLx/mn+3qj+bfunfBxtZtkC40zE0=
Subject key identifier: 68:8B:F7:3C:DE:17:61:B4:D4:32:E9:E7:6C:3D:78:12:0A:2E:7A:4C
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial: 0196AAD53513B6964B3E0B1171D21FD7B322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
Manifest number: 0F15
Signing time: Wed 07 May 2025 13:00:21 +0000
Manifest this update: Wed 07 May 2025 13:00:21 +0000
Manifest next update: Thu 08 May 2025 13:00:21 +0000
Files and hashes: 1: NUWfScDSH56OaOCaPfBblPu0Ydg.roa (hash: a4F0KmJ+v3pAeFAh9qDTsIqvwa1PoPI9PowXceZRGfg=)
2: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: mcfavwXTzpEmKkIbRiMwZQHjjUDLaU7gMCCWwb2eXQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:35:13:b6:96:4b:3e:0b:11:71:d2:1f:d7:b3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Validity
Not Before: May 7 13:00:21 2025 GMT
Not After : May 8 13:00:21 2025 GMT
Subject: CN=688bf73cde1761b4d432e9e76c3d78120a2e7a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:6a:8b:eb:fb:ef:dc:d9:0a:85:6e:0e:da:
92:a8:ad:38:ed:a1:e6:ee:9d:b8:4f:3f:fd:a8:98:
13:2f:ec:45:bc:84:76:e3:d8:ad:68:b9:9c:57:e4:
1d:77:f1:e3:0f:e5:c3:86:8d:b4:ae:cb:38:8c:7b:
96:0c:66:87:ba:ba:0d:44:5b:38:83:9b:95:4a:0d:
5c:2d:3d:a9:a6:25:f7:5f:bd:22:6a:4b:00:98:a2:
90:d6:0b:2a:3e:9f:3a:f4:9d:ef:e3:f6:0d:17:42:
e8:f2:70:52:8a:1a:34:ec:ae:2c:09:9b:36:e7:de:
a2:9b:4d:c3:ef:4f:8c:f2:85:f3:9e:71:9c:b1:c2:
e9:b3:a2:51:da:04:28:88:53:8b:a9:47:e8:3f:e4:
e4:7e:6d:f5:2e:72:fc:d0:4e:15:47:21:b1:d5:b1:
c3:af:7a:aa:40:38:64:9c:ad:70:5e:88:8a:43:49:
4e:a9:a6:e9:8b:cc:77:70:1e:4b:e5:e6:e3:e0:2d:
eb:5a:2d:be:e2:87:06:ef:6a:f2:2d:6b:d7:ec:41:
a5:a2:b7:58:4b:9e:8f:dc:8d:42:6e:08:23:b2:8a:
32:db:15:81:7f:39:4c:2e:15:84:84:15:db:1a:30:
2c:82:2d:0f:6b:e4:0a:14:8b:99:73:40:33:99:74:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:F7:3C:DE:17:61:B4:D4:32:E9:E7:6C:3D:78:12:0A:2E:7A:4C
X509v3 Authority Key Identifier:
keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:78:86:a5:63:24:0f:77:58:9e:d7:1a:02:9b:77:3a:49:5d:
d0:8b:93:d8:d0:41:29:64:62:60:40:d6:0c:32:1e:1a:0b:c5:
76:f5:bf:29:83:92:28:6f:3e:cc:70:c2:af:2b:04:2d:4d:82:
52:a4:da:ae:c1:45:2e:8d:c3:c4:f2:e3:cf:28:22:22:27:51:
0b:58:a8:ff:3e:ed:28:f7:de:de:e3:c2:18:f1:6f:82:a4:19:
d1:5b:41:1b:e8:46:ee:df:ad:d8:dd:eb:22:16:7e:22:02:ab:
1d:8c:b1:1e:ee:db:90:c1:ad:66:dc:91:af:f8:23:4f:f4:a5:
7a:a3:5b:38:68:ab:54:8d:dd:32:c7:ca:79:54:31:82:92:b8:
f8:0d:3d:06:c7:97:c4:30:c2:6b:e1:f0:7e:9a:ec:f3:60:70:
5d:89:c0:a5:51:83:ec:7b:f2:7f:af:25:c0:29:29:24:44:46:
d5:85:e8:f2:da:55:38:13:37:a7:22:73:cd:1c:b9:fa:e1:24:
dd:37:01:07:d3:3b:e0:21:a7:86:c7:ed:e5:75:8b:b0:bd:f7:
66:35:62:4c:9f:7c:0d:64:27:ff:0e:49:2c:f1:5a:da:88:f0:
98:1f:ff:aa:71:1f:48:ff:ea:a9:76:ab:a8:f5:9b:34:2e:ac:
ac:3d:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:42:00 2025 by rpki-client