Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
File: F3khM2kRpWiNeOk__l5HIRO7Gb4.mft (raw, json)
Hash identifier: MI/6rw5ToExa4hNa3u1aH/WER71Puqtqz8+2DpEU0ao=
Subject key identifier: B1:D8:5D:80:22:F2:8B:1A:BD:5E:81:E7:FF:63:E4:B3:BB:DF:75:95
Authority key identifier: 17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
Certificate issuer: /CN=177921336911a5688d78e93ffe5e472113bb19be
Certificate serial: 0196C3145E789E8B853C507E424D278C4A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
Manifest number: 0518
Signing time: Mon 12 May 2025 06:00:14 +0000
Manifest this update: Mon 12 May 2025 06:00:14 +0000
Manifest next update: Tue 13 May 2025 06:00:14 +0000
Files and hashes: 1: F3khM2kRpWiNeOk__l5HIRO7Gb4.crl (hash: MJ6usnJoKnLX24C3ShrMHe6tDXTlvaLIFN6g5W90C2A=)
2: WN1QsY4J0xzhzXI37At9k24AG4s.roa (hash: aONG4etXL5aCmGtS97ulkTYk4UjXjlB6E7tpLdYeDEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:5e:78:9e:8b:85:3c:50:7e:42:4d:27:8c:4a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177921336911a5688d78e93ffe5e472113bb19be
Validity
Not Before: May 12 06:00:14 2025 GMT
Not After : May 13 06:00:14 2025 GMT
Subject: CN=b1d85d8022f28b1abd5e81e7ff63e4b3bbdf7595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:48:8c:39:98:cf:fe:fc:16:42:76:25:d1:
53:e8:6e:3c:4b:0e:42:12:ce:b5:19:b0:37:27:8c:
ed:b1:e5:a3:f9:de:a3:5c:53:09:47:6e:02:39:e1:
8d:41:7b:df:e4:71:99:9e:21:a9:55:3a:54:bd:c7:
19:ea:4f:7c:83:d8:fd:12:8f:89:77:ce:1b:ba:ab:
ef:d7:21:0e:9a:0b:61:cf:0a:54:93:6e:c6:28:cf:
a5:58:fa:86:81:54:79:5e:ee:b2:48:f3:f4:d1:69:
76:3c:8f:e8:5a:6d:32:37:5c:ff:c7:6d:63:70:61:
a5:51:a9:d9:2a:8c:a7:3d:9b:e8:5f:ef:3c:90:97:
c9:cd:51:12:86:e7:ec:74:d1:98:9e:bb:80:c8:b8:
cd:62:f6:fa:80:8c:0e:2e:b6:d6:92:26:2f:8b:76:
d0:eb:a2:16:ed:2e:d4:75:aa:09:07:2f:bc:d0:4f:
6b:ab:c6:47:39:52:56:45:c4:c1:76:2c:a8:e6:43:
5d:43:b7:92:eb:7a:49:a9:0f:6e:a3:98:1f:d0:15:
8f:64:fb:86:35:a3:dc:e1:cc:07:9c:fa:89:df:7a:
88:3e:3e:e1:96:c9:cb:cc:7f:37:f1:c4:c0:ef:c9:
a2:3a:2d:cf:7f:ef:f1:3e:56:cf:87:d9:87:5f:65:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D8:5D:80:22:F2:8B:1A:BD:5E:81:E7:FF:63:E4:B3:BB:DF:75:95
X509v3 Authority Key Identifier:
keyid:17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fe:10:97:e2:ea:f6:d3:9d:80:3e:0c:2f:91:4f:0f:83:d8:
b5:b1:ea:20:87:4f:87:bc:47:d3:28:0e:6e:8e:8c:44:5d:64:
cb:d8:88:e0:0f:d3:17:91:a1:3e:5a:24:02:52:67:41:fc:2b:
31:54:3c:8f:bc:02:a4:ee:77:ce:16:b6:08:24:2e:67:b7:51:
89:c2:da:78:73:6d:e9:e4:11:1a:03:e5:1e:b9:31:1d:a9:a4:
5a:64:4c:cc:e1:a8:c5:5b:50:58:af:bb:b5:28:ed:ca:15:fd:
67:ef:f0:69:83:c9:67:1b:c2:6b:b9:db:63:20:43:1e:7d:16:
fc:bd:37:c7:eb:6d:d1:41:a4:bf:6c:96:ce:9b:a7:46:42:4b:
5a:84:5d:b5:4b:c1:f2:02:2a:49:32:72:a1:6a:40:b5:92:da:
88:9f:b7:7d:4a:1b:51:cb:32:0e:03:a4:94:1f:f8:f0:62:6b:
18:04:6b:b1:97:f6:c3:89:42:a5:e2:42:16:19:8d:21:15:a0:
c2:1f:2f:48:c9:a3:66:f5:e2:26:ae:b7:09:7e:b0:01:89:38:
a1:eb:8d:db:a7:c5:d5:fd:33:32:0e:b2:47:76:e2:a9:be:ae:
38:8c:1d:19:02:8d:3a:f8:16:bc:5f:15:c3:1e:74:7f:20:89:
aa:84:5c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:49:22 2025 by rpki-client