Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File: 0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier: GvG9/67fw3jTngQZwe2Et+dMGY+EHNtROv8kVpPTJ2g=
Subject key identifier: 3F:E9:A7:FD:C0:86:A7:C3:5F:BE:0D:4B:11:76:92:B0:AE:F3:AA:0F
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 01969F76903E277D6D89170343ED340F501C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number: 13FE
Signing time: Mon 05 May 2025 08:01:09 +0000
Manifest this update: Mon 05 May 2025 08:01:09 +0000
Manifest next update: Tue 06 May 2025 08:01:09 +0000
Files and hashes: 1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: IaVgvM5aMrVbwKKFvWyy9r8HS8es41lky4Dfuaq6X5g=)
2: n6mO0jwfMCGtBTJz4z0BBFhaaaw.roa (hash: depvn6FAlXY00NO5eAYz1KXbUInLhBp+Jz+PGCqafeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:90:3e:27:7d:6d:89:17:03:43:ed:34:0f:50:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: May 5 08:01:09 2025 GMT
Not After : May 6 08:01:09 2025 GMT
Subject: CN=3fe9a7fdc086a7c35fbe0d4b117692b0aef3aa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:82:71:c2:8e:2f:4c:ac:51:bc:f0:6d:a4:
cc:f1:56:fa:82:16:16:30:42:a7:ba:33:00:31:ed:
a0:54:36:e9:b6:06:a3:4d:7c:30:96:cd:a8:bd:41:
ca:b9:da:29:1b:08:11:5f:f6:c8:b8:2b:f5:94:85:
79:6a:e8:41:d8:92:ef:ce:b8:fe:42:1c:d8:39:9f:
26:46:4d:bb:f1:a1:46:cb:02:9e:e6:9f:55:f6:88:
6f:5e:9d:14:63:43:21:12:9a:84:d0:58:1c:cb:d5:
e7:a7:8a:5b:79:71:cb:2f:02:dc:23:7f:21:06:24:
d2:12:69:d7:8b:3f:8e:8f:7a:ad:89:b0:a1:61:64:
ac:15:be:d4:91:89:ba:0e:ed:7f:cf:3e:8b:1a:b2:
82:a4:2c:4f:92:1b:77:1f:4d:3f:07:18:f8:dd:15:
5f:ad:d1:19:ff:ae:5a:24:eb:40:5e:9e:97:b7:20:
9b:56:b4:c7:7e:61:3a:74:35:f5:71:18:61:30:3b:
f0:40:64:74:11:98:3a:7c:d7:d8:49:a4:aa:b9:82:
34:d5:44:64:60:ee:0d:9f:67:92:88:f2:3c:ad:ac:
39:e7:8c:9b:47:2b:92:0b:72:8e:55:d4:9f:72:74:
57:06:a8:e2:b3:bb:ce:32:da:05:9b:39:c8:ae:82:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E9:A7:FD:C0:86:A7:C3:5F:BE:0D:4B:11:76:92:B0:AE:F3:AA:0F
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:52:40:44:7b:43:b3:f1:73:e5:72:58:58:12:c0:94:6a:80:
06:3e:ca:68:39:a1:21:cc:e3:b3:ec:65:e0:de:f7:76:de:ec:
0f:60:a1:72:13:2e:ca:8a:35:2a:37:04:43:d8:19:5b:3f:e2:
65:40:4b:99:3c:9f:54:5f:c1:a8:89:7c:5f:dc:75:aa:e8:86:
ed:9c:14:7f:4f:b1:8e:a1:e1:a5:73:e0:8c:41:fb:cc:35:2d:
23:f5:08:b7:29:bb:f7:32:e7:a6:e9:67:79:88:d8:c1:c6:5e:
8a:77:64:2b:7f:6a:2e:b3:6a:4b:9b:d7:f3:41:85:61:ce:f6:
45:91:e2:96:75:c2:2a:c5:4b:b5:32:78:c4:dc:a2:0e:b9:b0:
2e:4a:d4:8b:3b:8d:34:14:d6:57:ad:4c:d0:64:1d:a7:6e:9b:
ad:0b:83:59:df:88:f4:31:26:2e:5c:33:d9:88:36:6d:4a:03:
09:e3:5a:26:61:75:06:95:01:89:c0:f6:88:f1:92:28:d9:b7:
31:cb:71:01:14:6c:62:28:3d:64:02:38:d2:d0:e4:8a:07:99:
1a:2a:fd:9d:b5:33:78:8d:c8:b6:d3:d3:a3:fc:bb:89:27:34:
8c:93:6a:81:c9:c1:26:4a:f1:cd:61:f5:a4:7a:56:89:44:f8:
32:96:62:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:00:21 2025 by rpki-client