Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: 7gvFczSqF32oLowqekiqhJ664R+jLoWEh3Wcb/Ptyac=
Subject key identifier: 3F:4B:D3:9C:65:96:15:10:CC:5B:71:DC:63:D0:8C:9C:93:B4:8C:BF
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 0196BC6DAE03BC7ABB248919F1E4303C5064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 0D0E
Signing time: Sat 10 May 2025 23:00:26 +0000
Manifest this update: Sat 10 May 2025 23:00:26 +0000
Manifest next update: Sun 11 May 2025 23:00:26 +0000
Files and hashes: 1: H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (hash: MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=)
2: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: DMC8OKyzrdatwZ3FRSyrQMQ61tIIMQjs0bvfVcd46j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:ae:03:bc:7a:bb:24:89:19:f1:e4:30:3c:50:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: May 10 23:00:26 2025 GMT
Not After : May 11 23:00:26 2025 GMT
Subject: CN=3f4bd39c65961510cc5b71dc63d08c9c93b48cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:75:ce:8b:84:21:d1:58:e1:b4:00:69:f7:a1:
92:2c:50:7c:18:bd:0e:a3:ae:31:40:e5:2b:b2:a3:
b2:06:20:14:42:24:3c:79:a3:63:1d:0c:7e:02:85:
a9:c1:4b:55:d7:bb:7c:1c:f3:d8:73:79:a3:27:88:
c6:78:06:a1:37:3a:ae:46:46:ed:8a:b0:1a:a3:18:
3c:02:2d:1a:00:d4:d2:be:c4:bd:88:a1:57:41:a4:
7b:0e:fd:46:73:c4:60:81:f9:e9:b5:f1:8c:46:23:
e8:45:80:f8:31:8e:3b:1c:36:ca:a0:1c:68:72:ca:
46:4f:2e:f0:44:cb:73:ce:b2:ff:0b:cc:30:72:17:
f6:2d:93:bc:7c:29:30:a8:34:6c:c6:1a:1a:62:2a:
65:fa:91:29:d9:2d:be:e3:29:e1:7a:fa:0d:d6:40:
10:70:12:22:64:87:99:fa:8a:82:c9:af:01:44:04:
db:41:d2:9d:b4:35:c7:57:cf:68:9a:a9:d8:84:74:
19:98:40:b0:b4:f6:62:c8:d2:07:f7:cf:c6:a5:65:
b2:81:ce:4e:85:13:48:94:0d:32:e3:ec:f5:5d:fe:
2f:68:70:a0:5f:ab:2b:7d:e6:4d:46:96:f8:0a:aa:
b6:aa:12:80:89:5d:b9:47:df:d6:2f:49:e7:24:df:
39:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:D3:9C:65:96:15:10:CC:5B:71:DC:63:D0:8C:9C:93:B4:8C:BF
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c3:db:c3:71:81:28:60:34:e7:2d:a6:4a:88:4b:96:5c:8b:
4d:de:db:31:f9:e2:8f:a5:3e:20:bc:4c:99:b2:0c:ea:91:a5:
fb:12:be:21:8e:1f:cd:af:36:20:1c:70:d4:a4:e0:25:a7:ca:
0a:9d:00:ec:f7:4b:da:3a:62:37:89:a6:de:ea:11:6f:2e:b6:
3f:86:ff:06:8c:23:97:cc:ab:75:49:5a:c1:ce:9b:c7:d7:b2:
37:1a:af:e6:9e:e5:a5:ac:59:77:a2:53:f1:a5:f0:69:65:9f:
83:00:4d:c1:b2:12:01:93:99:3d:85:7d:f8:b6:02:f8:c9:49:
b8:34:d5:98:2c:fa:94:29:bc:3a:88:f1:89:67:73:1b:3a:55:
69:7c:47:53:88:de:e2:33:33:a3:30:36:9d:81:93:3d:75:15:
ec:fd:c7:87:e2:5a:a7:c0:fd:03:a2:b6:5d:43:31:c3:3a:53:
81:bd:4e:be:6b:7e:d5:2f:a9:e8:13:4d:8a:69:c4:4f:45:76:
a9:b6:0b:c5:04:fd:23:50:f5:a1:34:a6:29:ff:ff:fb:1f:86:
33:68:fd:f1:43:14:c1:d2:ef:ee:4d:67:88:9e:aa:4e:b6:a2:
f6:a1:20:f9:05:05:62:17:d5:7c:cb:34:56:a7:ab:76:95:c5:
7e:64:5f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:33:40 2025 by rpki-client