Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: W3o7seTbUrXR8tQYpEpxMo5Q9V9YfXvizrHFKa6+GUA=
Subject key identifier: 7A:DC:8D:FD:68:53:52:A2:24:A0:CA:05:8B:47:B2:EB:09:D6:35:5A
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 0196AA9E58A47B689D0B0B597BDAC850373E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0BF6
Signing time: Wed 07 May 2025 12:00:26 +0000
Manifest this update: Wed 07 May 2025 12:00:26 +0000
Manifest next update: Thu 08 May 2025 12:00:26 +0000
Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: wrN2aP5KPTk8aanWpWsUFUdnMAkrqecbNg/fQuoQJ2A=)
2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:58:a4:7b:68:9d:0b:0b:59:7b:da:c8:50:37:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: May 7 12:00:26 2025 GMT
Not After : May 8 12:00:26 2025 GMT
Subject: CN=7adc8dfd685352a224a0ca058b47b2eb09d6355a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:d9:e2:dd:17:f0:35:a5:5c:0c:7e:93:89:
3d:b5:18:a9:81:5e:5f:1b:42:9f:cd:1d:29:84:b8:
a5:41:f3:9a:de:70:28:b7:99:15:fa:32:8c:6d:9b:
3e:cf:f2:91:ae:b3:1e:32:f8:29:57:5e:e7:8e:b0:
93:42:20:7f:70:2a:bc:52:8a:ad:e2:47:eb:d7:21:
57:eb:d5:c3:a3:4d:f8:2f:45:07:88:26:c9:2a:72:
86:f1:e2:8f:7f:a2:70:77:35:22:01:01:84:9b:7c:
49:db:9f:ad:3e:e3:4d:ee:6c:bb:eb:6e:bb:93:24:
81:b1:69:ca:a3:f3:b9:8a:e3:c4:0f:55:2a:f9:7a:
88:56:b9:4b:97:1b:bf:2a:75:2f:c3:9f:a4:57:1d:
e6:b2:a6:ca:a0:6d:06:9c:c4:c1:c2:56:ec:d6:32:
d2:4c:84:2e:cb:0a:e8:a6:ec:c8:1a:50:60:57:5d:
d0:46:48:4b:97:22:68:52:a3:f8:89:eb:77:a5:da:
9f:66:90:4e:20:b6:3a:6d:b2:72:75:60:f1:7a:1b:
c0:cd:63:35:c7:41:68:71:09:d9:b5:5a:34:f9:6c:
bd:e4:27:95:9b:89:bc:46:26:54:53:6e:86:c8:21:
1f:23:75:cd:9d:3a:a6:c2:0a:74:b3:53:7d:66:58:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DC:8D:FD:68:53:52:A2:24:A0:CA:05:8B:47:B2:EB:09:D6:35:5A
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8b:da:f7:82:65:65:47:ed:cb:95:a2:ad:d7:f2:da:68:ff:
b0:9b:c3:99:2d:34:25:41:da:71:86:d2:bd:75:77:e4:46:fe:
22:60:b5:53:07:02:82:73:8d:93:37:76:59:9e:8c:b0:0e:41:
e8:0f:b1:85:c9:82:e0:56:8f:bc:8a:5c:45:fa:fd:54:41:c7:
af:c1:cd:8a:c4:06:f3:0b:6f:99:70:c0:98:ee:86:5f:71:d9:
12:0d:33:74:62:30:93:21:a0:f7:26:a4:3a:4e:82:ab:98:06:
48:30:8b:e4:25:31:32:67:0f:e6:45:3a:23:16:1e:15:a0:09:
e1:1c:f9:1e:3a:7e:b3:f0:34:28:c3:ea:72:4d:1c:5f:0e:87:
86:55:0b:43:16:fc:7e:3d:93:8c:30:c2:12:bb:ae:08:b8:af:
40:63:12:ad:59:55:f6:3e:98:54:d6:b0:8c:b7:84:36:ce:37:
da:a3:07:f1:b5:61:ca:b3:ae:32:8d:d7:ae:60:78:1e:3c:1c:
dd:62:36:97:61:ab:fc:93:fd:56:cc:43:e2:aa:34:aa:6e:29:
93:d5:50:e4:ff:c4:76:f9:c8:d9:d6:d4:ca:17:11:6c:45:5d:
81:c3:df:54:41:79:75:9c:31:6d:85:0b:41:db:ce:8c:cb:b6:
b0:b2:d0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:32:17 2025 by rpki-client