Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier: PviFjlfo2iEeT6cMcbZ3F3rCEm+4QWOeoH8xtuch7xI=
Subject key identifier: B1:BD:0A:EB:13:00:94:19:13:CB:A4:FB:32:53:82:C6:42:3D:C6:9F
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial: 0196BCA4AFADFA70995B3F11BAB8FFAFC1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number: 03C2
Signing time: Sun 11 May 2025 00:00:31 +0000
Manifest this update: Sun 11 May 2025 00:00:31 +0000
Manifest next update: Mon 12 May 2025 00:00:31 +0000
Files and hashes: 1: 9w0Rti9UPZRyrIWU5NOMy8Ud8C0.roa (hash: ZfEurcdpYDkivnXtecQQ+AVyXc0rQ0W3ilxhEsJxMBc=)
2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: 9W8r30aSgrOhniCLxuQlYxtA4vD6yItN8gJuhGakAdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:af:ad:fa:70:99:5b:3f:11:ba:b8:ff:af:c1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
Validity
Not Before: May 11 00:00:31 2025 GMT
Not After : May 12 00:00:31 2025 GMT
Subject: CN=b1bd0aeb1300941913cba4fb325382c6423dc69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:86:ae:fa:91:f8:8f:13:c0:f2:e1:a1:ac:
73:af:2c:7c:62:d7:59:e3:92:25:6c:a9:3b:43:41:
d8:af:24:83:57:24:35:a2:6a:98:e0:0a:e6:1f:7a:
0c:27:45:c2:0b:d3:40:a0:0b:2e:86:cb:0b:15:6b:
82:97:59:e5:f9:94:ac:3b:be:89:fa:a0:40:a5:ee:
cb:58:8a:86:20:5d:4d:23:b1:25:4e:c1:d6:63:10:
02:80:de:fb:ff:dd:5f:fe:6f:a2:ee:7f:6d:ae:c6:
19:8c:e2:cd:bc:6f:5f:fc:a2:d1:67:74:5b:bf:a6:
6a:67:af:8a:02:b6:b1:c3:0b:ad:68:1b:21:e0:80:
ea:f3:df:8a:90:85:23:9c:0b:df:c4:bb:8e:aa:86:
83:c1:f1:58:72:41:3d:53:8d:e2:b2:bf:64:dd:76:
98:3a:43:e5:1d:90:7b:62:e4:18:53:e6:c3:ee:46:
1c:af:87:a7:c7:2c:22:20:c4:c6:f8:49:7d:eb:91:
48:2a:07:33:40:91:d1:33:26:dc:d7:aa:61:c9:6b:
46:2d:18:6e:c4:02:af:86:3e:e8:96:ad:af:ed:fc:
fd:e3:19:46:3a:91:3c:c5:f2:56:7f:50:b7:fa:3e:
0c:b9:58:44:81:50:eb:a1:3a:cd:a7:25:5e:53:e0:
82:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BD:0A:EB:13:00:94:19:13:CB:A4:FB:32:53:82:C6:42:3D:C6:9F
X509v3 Authority Key Identifier:
keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d7:a3:cb:c0:f0:22:dc:13:c2:86:4c:8d:43:a7:b5:ac:0d:
83:5e:0f:5e:b1:7c:1f:e8:86:d6:ac:bf:62:4a:ae:af:cc:05:
37:30:70:e8:b1:c5:1d:dd:4f:d0:d1:4d:9e:69:a9:05:b2:bc:
ce:a6:f1:0c:40:a1:d3:be:1f:29:7a:a4:a4:16:0e:b9:b3:22:
76:62:e4:10:7b:5e:56:8b:7e:50:e4:63:f7:92:25:11:36:97:
80:bc:b5:9b:08:3c:07:cf:e4:dc:2f:eb:c5:de:ab:a5:02:c6:
3d:25:7f:d0:32:a6:7a:c2:e6:b6:d8:81:6b:9d:f6:14:e2:b5:
26:75:14:95:5a:f7:53:8b:95:34:b9:19:c7:bc:79:8c:25:bc:
f0:4c:29:55:c6:7d:14:a8:38:ec:e6:b8:95:9e:01:e0:37:10:
70:8b:ff:e3:a3:b9:70:8c:80:19:8f:8a:6c:f7:96:ce:ca:53:
b4:45:d4:9c:28:27:a2:f5:c7:37:34:9c:87:33:c1:fa:8f:70:
05:26:94:96:a1:f9:9a:1a:6e:fe:f7:91:fa:b4:8f:43:a2:72:
b8:b7:44:ec:81:4d:e2:db:c6:8b:0b:f2:b8:9f:57:7f:dd:1c:
8d:25:98:cd:fa:82:de:87:11:87:0b:2c:7e:c8:fa:ff:97:33:
8d:0b:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:34:28 2025 by rpki-client