Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier: GaARdF86pdrd86Fl3Cf9OW6ZVcXQcJJZy0tHw/fxEIg=
Subject key identifier: 63:A0:F1:53:3B:26:18:24:C1:5F:06:E0:80:B5:34:4D:45:2F:08:D1
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial: 0196C013CD1865EFC21F7E42E32B9FD71E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number: 0212
Signing time: Sun 11 May 2025 16:00:45 +0000
Manifest this update: Sun 11 May 2025 16:00:45 +0000
Manifest next update: Mon 12 May 2025 16:00:45 +0000
Files and hashes: 1: HlRrYVzs80ZJA5_JZ3csPGXIkEY.roa (hash: 2WA22A/U8/r4tDX+UDoYIX+va554GCdeOFSCw5V25j8=)
2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: VDnKCq5lHkwFii7GYOwnkll9Xw3XrGbX5evjrU/H0qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:cd:18:65:ef:c2:1f:7e:42:e3:2b:9f:d7:1e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Validity
Not Before: May 11 16:00:45 2025 GMT
Not After : May 12 16:00:45 2025 GMT
Subject: CN=63a0f1533b261824c15f06e080b5344d452f08d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:ce:07:20:b0:4a:f2:40:8e:95:d8:e5:25:
b3:33:d3:45:7c:e6:c7:9c:90:90:99:45:cd:87:32:
b3:52:1a:a9:fd:68:da:7c:52:6d:b9:b8:3f:7e:69:
37:3c:ed:58:fc:b9:f1:76:66:8e:c5:9d:97:b8:27:
21:84:cb:2f:33:5b:08:ea:91:90:f9:7d:83:b6:eb:
60:ec:dc:eb:9d:13:fc:fd:4c:d6:d6:eb:c2:90:e7:
0e:1d:89:5b:e2:38:92:8d:b9:cb:9e:88:e0:1a:fe:
27:7a:68:5b:42:70:19:bc:8f:ed:e7:27:01:b9:37:
13:b1:06:4e:ea:ca:3d:ac:aa:cc:d0:a0:d0:29:84:
a0:38:79:86:1b:3e:3d:c5:f5:5d:1e:d3:8b:b9:5e:
85:67:b4:c1:16:f5:56:b0:23:b6:b0:27:dd:69:0c:
98:bd:be:6b:04:eb:e0:02:1b:92:c4:1b:57:58:f9:
1b:12:a1:ec:01:4e:08:dd:09:7b:a3:1a:4a:8a:17:
4f:91:3c:ee:56:b0:86:39:92:8b:62:84:f6:01:f5:
c9:88:39:43:c1:ad:84:a9:9a:05:a3:2e:81:b9:a3:
4e:a4:fa:bd:ee:eb:36:01:d4:db:89:03:f4:4f:b2:
45:c6:a3:86:d6:63:72:41:05:b2:00:1a:9f:d1:73:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A0:F1:53:3B:26:18:24:C1:5F:06:E0:80:B5:34:4D:45:2F:08:D1
X509v3 Authority Key Identifier:
keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:dc:cc:24:b4:45:01:09:55:b7:86:67:97:0f:71:c5:77:b3:
34:9b:4b:bd:d9:77:61:7f:da:44:2f:df:2b:05:10:99:c2:fa:
8b:4a:e1:85:fc:75:ee:32:12:08:b5:a8:76:81:47:63:75:a0:
48:10:6a:5b:a5:4f:34:f8:72:7e:7b:1e:9f:30:bb:c7:ae:c1:
e1:78:a1:2b:36:14:1c:e8:69:c2:ea:83:d7:dc:b7:63:43:53:
b1:0d:9d:41:a2:a3:6c:8a:7f:84:a1:75:74:90:76:2c:84:48:
24:cb:f7:3c:c4:41:4e:20:b4:75:79:c7:20:64:47:4b:da:a7:
a5:29:13:fe:d4:24:a2:28:1a:90:cd:16:4f:d6:a9:51:35:8b:
9e:66:4b:80:e8:44:76:c9:be:d3:9c:86:c9:a9:77:0d:93:af:
9a:30:1c:81:42:b6:16:fd:f7:42:34:93:00:c8:42:0f:28:4a:
f9:e9:4a:32:c2:87:50:cc:1b:f3:26:84:eb:e4:f5:32:3a:fd:
45:0a:aa:ad:9c:48:e8:70:55:bb:7c:94:43:0d:8b:ce:98:ae:
63:0d:6d:9d:e4:11:9d:20:10:48:1e:10:c8:5d:bd:99:12:dd:
3f:74:18:b6:c8:7c:68:6e:6a:7a:6b:f0:76:66:64:fe:ec:94:
40:25:d8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:09:42 2025 by rpki-client