Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
File: V7DWfEnsEvT1QXA49twTwvk-p2U.mft (raw, json)
Hash identifier: 77wrcsSEr+lS6QXyfl0L739ZxxAtoccs7uRywAOSLqM=
Subject key identifier: 96:F0:13:36:BE:D3:4A:00:0B:4E:99:D5:58:F6:8A:92:00:F8:47:F3
Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
Certificate issuer: /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Certificate serial: 0196AAD546CE3FCD12219EDA037C3DBA161B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
Manifest number: 0D85
Signing time: Wed 07 May 2025 13:00:26 +0000
Manifest this update: Wed 07 May 2025 13:00:26 +0000
Manifest next update: Thu 08 May 2025 13:00:26 +0000
Files and hashes: 1: V7DWfEnsEvT1QXA49twTwvk-p2U.crl (hash: FjseQo9N7Rr1DR9iyRB/0LvbZtz08QxKEj//H01palg=)
2: aTC_FMtzHsZtI14wbnunZmi33Jw.roa (hash: wvwgvmerl+Gv6gcyDvl/OWVT3i3Y0FpbzMV8nbDfYyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:46:ce:3f:cd:12:21:9e:da:03:7c:3d:ba:16:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Validity
Not Before: May 7 13:00:26 2025 GMT
Not After : May 8 13:00:26 2025 GMT
Subject: CN=96f01336bed34a000b4e99d558f68a9200f847f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:f9:78:bd:c2:d6:13:e4:72:bd:1e:73:fc:
54:3c:d7:af:eb:30:99:09:87:86:70:b3:af:9e:04:
41:b7:e4:2a:48:f1:f8:03:55:0d:03:f5:d7:72:06:
0a:2a:22:2c:bd:14:da:09:46:8b:b8:f4:d9:d3:f6:
d1:30:10:0c:d8:66:ee:0b:db:e4:c8:cb:2f:52:a8:
8b:f1:98:75:4b:db:3a:d6:d5:30:d7:3b:0d:bf:43:
fa:3c:52:b7:e6:16:5a:fa:41:3c:8f:3a:cc:e5:7a:
1c:e7:c4:07:a7:e3:ac:4b:d7:97:55:15:f3:ba:58:
b3:a6:a1:19:fa:05:d0:b8:0e:2c:81:72:30:56:26:
e2:d4:f7:58:84:e1:67:ce:41:07:b9:0d:8d:c0:fd:
8c:67:3b:07:d7:c4:a0:66:91:8f:4d:1f:cc:a4:64:
7b:0c:39:5a:bf:58:e4:d5:02:f1:a9:05:ac:52:d8:
4e:1c:00:1a:bf:95:81:36:d3:1a:e2:a4:eb:e5:c2:
d7:51:00:2b:77:6f:69:fc:8a:b4:d6:5b:b8:26:fc:
27:7e:0b:bf:40:ac:fb:25:7f:14:40:89:37:0a:59:
78:ad:28:14:f8:44:05:aa:62:1c:82:df:48:f0:e3:
a5:fb:fa:a7:7f:72:ad:b1:4f:f9:85:bf:a1:35:fe:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:13:36:BE:D3:4A:00:0B:4E:99:D5:58:F6:8A:92:00:F8:47:F3
X509v3 Authority Key Identifier:
keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e7:24:06:35:81:2b:72:8a:5a:78:5a:ae:2b:9e:a2:4a:5f:
a4:b6:1d:2e:26:4a:6b:84:28:4e:ef:59:5e:ca:d7:8a:c5:eb:
cf:aa:f1:00:94:82:98:41:b2:00:04:ec:f7:3d:9b:86:91:32:
65:e7:0e:28:f0:cd:6d:f8:23:9d:70:ab:72:ad:60:63:d4:cc:
dc:bd:22:c5:e6:47:67:e0:d2:13:79:e8:7b:6d:63:22:a7:d0:
68:27:cc:af:c0:ad:84:6d:9b:61:15:fa:8f:6d:a6:87:19:1f:
d4:53:aa:fd:33:0f:a3:52:33:d5:4d:11:6c:6c:eb:b6:ef:36:
65:be:d0:0c:42:9d:7c:25:cc:1b:f7:e1:ac:82:c7:ff:a6:f0:
6b:1d:54:d0:cd:71:63:f1:b5:d8:2a:60:02:89:39:9b:09:8a:
eb:81:a0:03:4f:32:43:11:57:e9:12:0b:03:94:f8:dc:ce:cf:
9c:08:b1:13:66:0d:04:a0:2c:3c:04:29:d2:f8:d5:65:b0:e2:
7c:c9:e4:78:e7:c2:15:93:e1:28:1e:ce:94:ae:8b:b2:0e:34:
11:ac:68:53:86:fa:8c:dd:f1:07:46:03:ff:43:92:71:4c:61:
83:fb:45:a1:5d:ae:6e:cb:72:29:4a:08:64:67:19:f5:c1:76:
9e:a5:52:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:55:29 2025 by rpki-client