Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: rNfNnrneNEz48rNHea6q/8yd7FhpPZZgAhq4+LQ3viw=
Subject key identifier: D7:E2:8D:0F:0D:99:DC:7A:01:F9:97:D9:98:6D:4F:B4:E1:3F:82:DA
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 0196B85A28B26C5DA257517681977216869E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0139
Signing time: Sat 10 May 2025 04:00:38 +0000
Manifest this update: Sat 10 May 2025 04:00:38 +0000
Manifest next update: Sun 11 May 2025 04:00:38 +0000
Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: TpQc29e+kjFo6sfnoUaz2YEuM/jJ2i8NPXSYiD64zpM=)
2: tCQKTUl91gUF9YCakBjVvOmahA8.roa (hash: +o4wlq7VWOUaSft8SFBzstGqOiur0Xr8ur6qt9Ob1Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:28:b2:6c:5d:a2:57:51:76:81:97:72:16:86:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: May 10 04:00:38 2025 GMT
Not After : May 11 04:00:38 2025 GMT
Subject: CN=d7e28d0f0d99dc7a01f997d9986d4fb4e13f82da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:7e:82:42:7e:b5:97:47:66:ee:13:68:38:
a8:8f:15:3a:4b:ee:c8:98:ba:39:1f:96:06:af:bf:
35:62:24:c5:13:c0:e8:2b:f5:e7:c7:97:d2:86:85:
9e:67:4a:ab:b8:65:07:c5:fe:25:78:f0:63:91:e7:
a9:25:58:98:38:7d:a6:ca:d8:e4:88:43:ed:19:a0:
97:f1:f1:a6:22:4a:c9:27:2a:b5:6e:1b:2b:4f:c5:
3e:e3:33:11:91:79:4c:72:d8:b9:46:70:ab:45:3a:
eb:12:be:1f:95:86:bd:b1:45:a2:16:ce:ea:6c:f5:
73:b2:81:dc:a5:86:9a:4b:66:82:33:18:c9:90:f6:
33:95:11:60:b8:f9:56:61:03:96:7b:34:b0:cd:56:
34:50:1c:bd:cf:36:11:c2:02:d3:f6:75:7e:f1:c6:
99:de:f8:2e:fd:30:42:c7:1d:4c:ec:63:cf:73:12:
f5:11:33:d5:30:8b:f6:04:a0:cd:fd:16:e7:41:42:
1d:a0:26:29:d8:20:85:5e:57:70:ff:ec:f0:7d:55:
74:2c:18:f1:36:dd:c0:1b:7e:fe:c1:27:4b:39:23:
60:9e:c0:3d:84:6c:a4:25:cc:c3:ba:7a:28:a9:28:
c7:b5:d4:69:ca:2e:7c:23:9d:fc:91:c5:b5:ce:c4:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E2:8D:0F:0D:99:DC:7A:01:F9:97:D9:98:6D:4F:B4:E1:3F:82:DA
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:83:e8:eb:36:83:28:55:90:33:ee:b8:cc:9c:2e:8c:69:59:
f8:5e:65:20:72:f5:75:e9:83:45:c8:66:e6:10:c9:45:eb:ee:
58:d8:fc:d8:49:c9:03:8e:0d:01:44:9d:34:87:a7:c3:24:5b:
2d:c4:f0:cf:2e:87:e7:65:70:05:9a:a2:8f:77:fa:22:83:89:
79:bb:b4:46:77:82:58:97:80:c1:ec:b0:dd:68:af:30:6a:d4:
4f:b5:e2:c7:e9:40:16:ef:f9:43:fb:ad:c9:37:34:4b:bb:86:
6b:a3:a1:cb:29:55:73:e1:81:ce:0f:b9:2f:f3:c3:e5:7c:00:
60:66:ab:04:ef:47:df:69:80:ab:17:a9:48:71:e9:03:b5:2f:
0f:e9:b5:d4:fe:c3:42:94:e2:ac:c5:39:85:c5:33:2f:73:16:
d7:a4:44:e7:2e:fb:99:66:e6:73:1c:92:0c:38:06:6b:62:d8:
ea:99:6c:ca:1d:d7:92:20:24:ed:7f:18:51:5e:ca:15:b3:25:
6f:e2:c1:7c:88:bd:14:6d:2f:92:18:d6:48:e5:ff:b0:19:c2:
30:9f:74:b0:fb:59:22:58:3a:fb:f4:ce:9d:a7:0b:fe:a9:cc:
34:77:4f:47:a0:86:b3:0c:d6:e4:43:0b:d9:47:0a:42:5b:fe:
31:4e:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:42:52 2025 by rpki-client