Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: NllUNdPLkUaU6RasdydpeJB/kjgWWAUx7l6YLqahgkY=
Subject key identifier: B3:2B:46:0C:E8:E4:5C:85:54:F4:F6:24:25:CE:EE:2A:8E:E8:05:D9
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 01969DBE8FC044ECB7D6A3407E88979262B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 0332
Signing time: Mon 05 May 2025 00:00:33 +0000
Manifest this update: Mon 05 May 2025 00:00:33 +0000
Manifest next update: Tue 06 May 2025 00:00:33 +0000
Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: xWug1QDLsIIyj1trG7MRwVFcJBMZ1OtoxSXHLFpMCLc=)
2: yErW5kNKHDcTg-fzTjTLkaeTdfs.roa (hash: kizhklattplgXfiOmItfgbUnFHeiT1NCHm8Wv3r0lL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:8f:c0:44:ec:b7:d6:a3:40:7e:88:97:92:62:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: May 5 00:00:33 2025 GMT
Not After : May 6 00:00:33 2025 GMT
Subject: CN=b32b460ce8e45c8554f4f62425ceee2a8ee805d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:d9:2c:f9:9d:aa:6b:3c:9e:eb:2c:f8:fe:
db:ef:72:6d:1d:bb:52:32:df:20:49:ff:51:a8:70:
ab:95:b1:42:28:5f:57:9d:92:d3:ad:26:5c:42:52:
4b:94:1e:1e:66:10:56:28:29:1a:cd:51:71:73:9d:
ce:fe:8e:6f:8e:d4:f2:11:96:a9:12:60:e1:20:03:
b9:ab:eb:36:92:bc:71:63:29:02:ca:c8:0b:5c:26:
40:d3:93:49:97:04:4b:c3:eb:97:12:06:13:35:29:
b8:e0:c3:94:b6:61:5a:1f:77:31:6a:d9:78:c4:47:
3f:a6:e3:c8:21:4f:81:4a:43:66:4a:2e:f8:b7:02:
8e:f1:ac:80:51:fc:c0:ab:83:5c:01:31:71:65:aa:
d9:00:30:51:ee:d5:c3:b3:1a:91:6e:46:b8:c2:22:
54:c7:44:c2:9b:cc:d2:d2:36:e0:9c:1e:8f:d9:1e:
84:fa:66:b1:85:b1:bc:03:ea:a1:8f:0d:1a:91:2c:
09:75:a3:69:1e:e2:a1:81:9e:f9:5c:84:d1:86:5e:
bd:70:22:fe:43:a4:82:4b:39:bd:e4:f7:8d:96:c2:
d4:70:23:cb:53:a1:9d:1d:fc:94:6a:ca:f7:ce:dc:
65:62:3f:04:0d:6a:7e:ab:88:19:32:23:c4:d7:a9:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2B:46:0C:E8:E4:5C:85:54:F4:F6:24:25:CE:EE:2A:8E:E8:05:D9
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:69:25:41:6c:57:03:37:d9:22:30:e1:58:c5:be:ad:c7:c9:
d8:5c:3c:1d:e3:0b:14:49:0d:37:f9:ba:6f:cd:b4:78:e4:ac:
5b:c1:ed:88:39:25:37:99:1f:1b:04:cc:20:3e:d7:3a:3c:2f:
cd:53:b4:ab:e9:7e:a8:4b:b8:fc:e5:da:49:ef:04:8b:5c:ce:
41:f3:1a:6f:be:35:15:70:b0:5d:f4:e8:e7:89:6b:74:b0:ef:
6c:96:6c:14:77:63:9c:8e:91:80:87:1a:57:89:ee:7a:18:8d:
f8:65:7e:a7:ce:b3:fe:68:1a:5d:d6:e3:b8:35:da:33:6e:55:
a0:b0:30:57:a8:80:31:4f:04:02:77:58:e9:1a:53:55:e7:b2:
51:d2:95:d9:72:28:e8:f5:c2:03:b9:f6:b8:72:a7:42:37:01:
b0:b8:4f:d4:f2:52:7e:ba:4f:f8:a4:ca:48:48:bf:63:c1:ea:
8e:01:10:dd:ff:5d:3e:eb:2a:4c:72:91:87:5c:70:32:84:ed:
75:b4:45:52:ee:84:43:fe:60:7c:98:19:32:8a:72:03:77:0c:
1b:ef:e3:99:5a:b5:df:54:65:27:b9:41:63:24:fe:11:0b:3c:
8f:45:53:9f:13:d7:33:3b:34:10:76:10:b3:10:ac:27:10:00:
2c:f4:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:23:36 2025 by rpki-client