Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: QSwxW9w2sl9KNo3tmfsurmkEgMgo03trevtMysK5ngc=
Subject key identifier: EC:1F:75:86:C9:FE:B7:94:E0:47:44:50:40:CA:2E:E7:1F:7B:E3:54
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 0196B47D8F32C0E384000E64BB24E3E1E547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 02A5
Signing time: Fri 09 May 2025 10:00:49 +0000
Manifest this update: Fri 09 May 2025 10:00:49 +0000
Manifest next update: Sat 10 May 2025 10:00:49 +0000
Files and hashes: 1: B3Ys6xmlqC9wLcdB3cpexOusdU8.roa (hash: KigHTwHmCj6upextpp39A2hT194k5nIpvq7I4qZjAqg=)
2: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: 3dOATEmb21+BCPFPwog7JeZnyMdjClUWMe/iG+mxF5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:8f:32:c0:e3:84:00:0e:64:bb:24:e3:e1:e5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: May 9 10:00:49 2025 GMT
Not After : May 10 10:00:49 2025 GMT
Subject: CN=ec1f7586c9feb794e047445040ca2ee71f7be354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:81:29:41:7c:48:b2:01:c8:63:63:f3:d0:
c2:ff:df:6c:79:f3:73:1d:ff:df:26:63:0c:9d:3e:
db:a7:e0:13:fb:6e:58:9d:c2:ce:7d:f8:c2:19:87:
34:7f:cf:3b:94:9e:62:a5:5c:ef:3c:b9:ae:b0:ef:
7a:b7:d9:93:f8:93:92:e9:50:ca:16:a9:ca:d5:34:
8c:c1:9f:e0:d3:bb:e8:77:ff:4b:92:05:bb:6f:2a:
d1:ea:43:78:73:27:4d:eb:d1:fb:12:dc:27:98:ce:
59:d4:cd:4a:af:70:d6:e8:7f:16:5e:7f:44:f9:17:
07:3a:2c:26:11:77:06:84:22:d6:a9:9f:8b:6f:3d:
0e:8d:55:75:5d:58:65:1a:0e:95:46:e6:b0:c7:d6:
ef:b3:56:c4:87:1a:79:d7:fc:10:f5:91:aa:f1:40:
5b:bd:57:99:5f:a3:cf:f6:f5:82:34:1c:f2:75:c0:
bf:24:b5:e6:d1:b3:3f:8a:e0:d8:40:b4:51:0c:02:
09:6d:0b:9d:76:6b:94:a8:91:2f:8e:e7:ef:8f:aa:
22:b2:c2:b7:3d:4e:41:26:36:e3:2c:cf:f0:40:c7:
90:17:15:af:af:11:65:ca:c0:e4:2b:45:ae:d5:fe:
1a:a9:8a:3a:32:33:d2:84:60:ba:4a:1a:1b:2b:8b:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1F:75:86:C9:FE:B7:94:E0:47:44:50:40:CA:2E:E7:1F:7B:E3:54
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:83:e8:b6:4c:f6:45:bc:dc:37:a5:a2:ec:fe:0c:2d:ba:48:
fc:71:bc:1e:4c:5a:c4:22:5c:1a:e4:55:1d:be:9b:b9:d0:e7:
2d:b0:d8:30:0f:ff:f0:a1:56:3b:ad:7e:61:24:e3:90:16:21:
b9:49:f6:93:5c:2d:e8:a4:08:fb:77:fd:bc:f8:f6:ec:83:69:
34:c2:d8:19:ed:69:68:ed:9b:37:a2:de:e4:d3:9f:be:40:6b:
0a:bc:3f:83:40:c2:1d:db:7b:68:4d:80:f3:ce:5c:98:50:76:
cf:af:34:e1:0f:8e:77:95:dc:68:d7:f5:fb:c5:31:b4:d4:af:
eb:31:07:09:90:b2:4d:01:10:4c:81:f6:7e:90:5b:b3:77:20:
da:43:0c:16:d4:4c:11:c2:6d:d9:b1:f9:f8:93:38:f7:a9:af:
8b:f6:f4:93:f3:0e:a3:e9:e0:46:2d:20:b4:0f:1e:95:d2:eb:
81:3d:7c:1b:5f:72:ae:d8:6d:b1:62:a2:9c:cd:bd:5a:57:b8:
84:f8:cf:d4:83:a4:ee:2b:9b:5e:de:86:1b:69:39:8a:6e:d4:
8c:ae:24:e6:00:8d:9b:13:90:ac:ef:4d:39:61:a7:d5:59:02:
08:57:a1:f7:d5:bc:25:8f:52:55:62:46:03:6e:be:7b:a9:1f:
91:17:f6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:08:24 2025 by rpki-client