Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
File: 03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json)
Hash identifier: mRFnXbLIagTHw8pPqTeEnn1H66fcDPcThryk7OmZ7Wo=
Subject key identifier: E1:86:36:89:6C:06:46:60:FE:7C:C0:97:A7:BD:7C:33:28:3C:92:04
Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Certificate serial: 0196A0F681AD99DBA40F50E1E358717EC450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
Manifest number: 0370
Signing time: Mon 05 May 2025 15:00:31 +0000
Manifest this update: Mon 05 May 2025 15:00:31 +0000
Manifest next update: Tue 06 May 2025 15:00:31 +0000
Files and hashes: 1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: HcVPoUkApVDfeQAbuud/mcloyXFWfOpByoxruxZw0gk=)
2: 6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa (hash: m+2x+5LklJoq5rlCh1u/r9pBwdaQs57tN+EGau9SsmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:81:ad:99:db:a4:0f:50:e1:e3:58:71:7e:c4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Validity
Not Before: May 5 15:00:31 2025 GMT
Not After : May 6 15:00:31 2025 GMT
Subject: CN=e18636896c064660fe7cc097a7bd7c33283c9204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:47:57:87:52:2b:5a:91:7d:22:3f:fa:0e:
0b:43:11:60:24:1e:5f:05:4b:1c:cd:81:18:1e:6f:
4c:72:66:12:6b:39:b4:8d:46:df:2f:b2:52:0b:d5:
df:71:91:d2:84:f7:fc:f8:63:9c:f0:71:b3:bd:c9:
79:0a:63:fb:90:37:a4:be:5d:cd:be:24:10:5d:1c:
93:56:15:a2:13:08:ec:e2:c6:a5:b1:6b:bb:e8:d2:
60:be:00:d2:73:21:88:b7:a2:af:9c:b2:12:d1:71:
5b:78:ba:d8:ee:14:5d:21:54:91:63:b6:eb:cb:50:
56:48:4e:91:74:53:9c:b4:0d:51:02:f9:fa:50:96:
71:2f:a1:19:07:2e:5c:8d:f3:59:b0:fb:c1:4b:bb:
b3:3f:f9:09:bd:17:51:9c:27:ad:8a:8f:57:8d:b7:
1c:cb:a7:40:82:b4:44:a6:54:51:bf:c8:25:20:be:
d6:13:ae:36:fb:c4:62:b7:de:a5:d3:fe:1a:e9:c4:
0b:5c:eb:41:4a:3d:96:97:b8:e8:f6:01:ba:73:0a:
e0:94:4f:0a:b4:c7:19:d1:08:8f:b7:67:c4:04:42:
e6:d5:bb:7b:2b:d0:de:4c:a0:5f:51:0e:01:e2:d1:
2d:ea:51:36:ce:d1:bd:82:48:24:6a:05:45:42:71:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:86:36:89:6C:06:46:60:FE:7C:C0:97:A7:BD:7C:33:28:3C:92:04
X509v3 Authority Key Identifier:
keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fc:30:30:74:ce:7d:be:d9:77:db:45:18:35:c5:f0:ac:4a:
11:a5:c0:39:df:55:91:af:31:20:76:e7:f6:00:25:03:88:a9:
43:4f:f2:c7:5c:e3:50:51:3b:9b:46:97:66:b6:b9:40:62:54:
84:bf:36:a3:99:fe:5c:02:2b:e6:b0:15:0b:ed:2e:b7:00:89:
b6:31:c4:14:7f:77:ba:ac:48:58:7a:d6:0e:7a:34:6f:ac:ba:
e5:3e:f8:93:bf:45:09:ae:32:f3:eb:73:0a:67:89:19:81:27:
8a:e7:33:4d:32:0f:34:37:55:77:f5:46:73:3f:e6:94:54:31:
38:ec:8b:5f:aa:fa:b1:0b:cf:e6:96:5d:14:9f:e9:0e:fa:d2:
7a:89:ef:80:42:f3:b6:92:e8:ed:91:6f:10:d6:0a:7d:d0:49:
71:ca:b3:02:97:16:dd:38:0e:9d:48:81:1d:b2:14:9e:0f:03:
ae:67:e1:48:ff:81:39:c4:0a:ac:e9:ed:1d:81:eb:ea:7b:0a:
a1:fb:77:60:db:53:1f:0c:3c:f9:75:45:15:2c:9b:2c:74:ca:
94:e7:73:c2:e0:c3:cc:d4:1f:17:88:af:d7:7f:79:73:25:19:
0b:3d:f8:07:cf:68:a0:ea:cb:69:78:3f:df:0f:e9:3d:e6:ff:
ee:73:c4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:49:54 2025 by rpki-client