Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: FDz8BizEQ8K0X1kwrwUIdXzFoZbg7KDx247IPk8457k=
Subject key identifier: 12:E7:7E:02:0F:42:99:06:A5:EC:85:6E:77:3D:37:4F:A3:63:CA:28
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 0196AC8D3C06567B40C1253D0B663E9AD8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 0E6A
Signing time: Wed 07 May 2025 21:00:59 +0000
Manifest this update: Wed 07 May 2025 21:00:59 +0000
Manifest next update: Thu 08 May 2025 21:00:59 +0000
Files and hashes: 1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: 8jvMqbPd3cLQJt0Od7cJ42CV/in0uFTOHzjVwdlcMBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:3c:06:56:7b:40:c1:25:3d:0b:66:3e:9a:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: May 7 21:00:59 2025 GMT
Not After : May 8 21:00:59 2025 GMT
Subject: CN=12e77e020f429906a5ec856e773d374fa363ca28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:45:f1:c4:32:1f:ac:45:98:19:0e:9e:46:
59:22:d0:fc:aa:57:8f:f3:7c:0e:18:f1:4f:00:41:
d5:22:85:30:da:22:0e:9f:62:d9:3e:0e:6e:9b:b2:
1d:d6:06:31:c3:65:23:d9:0c:88:d0:46:dc:52:4d:
d2:99:5c:d1:22:37:66:37:8e:57:46:e1:85:f8:7f:
ca:c6:fe:e4:be:17:b5:3f:4c:c4:51:5f:5b:6a:72:
4b:08:d8:b9:d0:9b:22:b3:25:bb:d4:5e:ec:3e:ab:
3b:16:e6:ce:49:48:c4:19:46:ba:67:a2:12:dc:30:
4d:33:98:47:b4:c5:46:66:b3:80:c2:55:62:0e:3e:
3e:1c:7c:72:c3:3f:07:04:51:c3:c9:b2:fc:4d:30:
63:95:05:83:e2:a4:86:bf:49:48:2e:70:c9:fd:47:
78:52:48:cf:43:c1:10:5f:de:35:8a:5e:4e:70:05:
76:06:c4:8a:09:c0:d3:db:50:fc:55:5b:50:5a:d6:
a4:d3:b3:1d:a2:a3:2e:3b:fc:05:99:9c:0d:37:02:
34:82:6d:54:21:a3:a0:e3:69:44:ab:a6:13:8c:3b:
88:4b:9a:40:12:f6:72:e0:41:1f:65:8b:ba:08:47:
36:0f:d0:10:48:7e:4d:55:37:9c:c4:8c:9c:9f:a8:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E7:7E:02:0F:42:99:06:A5:EC:85:6E:77:3D:37:4F:A3:63:CA:28
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6c:32:4f:5d:70:b8:5a:ab:04:78:35:c2:8f:15:58:aa:5d:
08:d7:18:ae:2f:16:e8:bd:27:cc:0e:eb:a4:7e:ea:3e:91:7b:
fa:ff:cb:27:c3:9d:cd:e0:62:29:53:29:0c:72:16:96:f3:34:
9c:9a:f2:d0:51:7e:7d:7c:9b:28:98:06:f6:97:ba:c2:73:9b:
88:01:bd:03:39:fa:d9:d3:67:5a:8a:c3:6b:2e:82:44:4f:b0:
2d:19:57:ce:d0:e6:e1:1d:ff:9d:5e:27:e3:39:39:fd:e3:1a:
5a:51:ef:b7:32:71:7b:17:30:19:30:c7:ce:31:93:9c:a2:87:
1d:bd:7b:36:07:f4:77:62:a4:8f:24:7a:e6:33:12:1d:8a:34:
ab:ca:2e:d7:59:8e:5d:91:e3:84:2b:da:57:1a:c8:89:46:06:
3a:a9:08:19:2b:6c:27:0d:28:c0:77:1c:3b:ae:d2:3b:d4:6e:
3a:f5:30:d0:95:8a:12:83:23:03:27:0b:12:b6:92:1d:35:1e:
e5:56:00:c9:f3:df:9d:86:c6:e1:07:89:4c:e0:e1:bd:41:d6:
9a:e0:12:cf:99:49:bf:d6:16:f2:22:70:a1:68:ef:cb:df:f4:
e3:24:9f:3c:8e:46:2a:80:93:95:5b:01:79:4f:86:d6:f0:81:
fa:53:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:05:12 2025 by rpki-client