Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: e4IVafPVziJ4hTSD4RFbRTBu/xVQCiwaTZAMkUX0UDQ=
Subject key identifier: 48:47:30:8E:E6:57:B0:F0:3C:F6:D9:74:AF:40:F1:C5:EF:29:53:58
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 0196BC6E4A928D83AD63BD60FFBBAF60563B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 0E5C
Signing time: Sat 10 May 2025 23:01:06 +0000
Manifest this update: Sat 10 May 2025 23:01:06 +0000
Manifest next update: Sun 11 May 2025 23:01:06 +0000
Files and hashes: 1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=)
2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: 4xmfALQXKnG412SzivjRS9Yzw1iiKhu5nbal5ZztqIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:4a:92:8d:83:ad:63:bd:60:ff:bb:af:60:56:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: May 10 23:01:06 2025 GMT
Not After : May 11 23:01:06 2025 GMT
Subject: CN=4847308ee657b0f03cf6d974af40f1c5ef295358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:f7:d2:5c:32:85:3a:a6:9b:7e:c7:a4:86:
75:d1:e2:3e:5f:74:46:72:26:7f:63:b5:d3:78:93:
09:2c:4d:ad:c1:cf:09:ee:f6:e3:c1:43:04:93:da:
4a:b3:11:0d:e9:df:51:be:e6:5a:c4:41:14:49:71:
31:1a:73:b6:a4:8e:48:76:b5:01:49:25:44:9b:5c:
e9:1d:de:e8:cc:6c:cd:4d:e6:98:74:c8:9b:ef:01:
a5:c0:60:1c:15:e4:2e:e1:6d:8e:7c:e9:83:34:c1:
b3:85:ad:64:25:6a:cb:85:20:da:79:af:d0:0f:b1:
6d:50:4e:fd:04:cc:6b:19:93:76:02:c6:df:3f:82:
d8:e2:6f:b0:20:4e:a0:cc:5a:49:ec:b0:37:67:53:
63:21:e2:de:bd:95:bf:b9:b4:3f:0b:8d:7e:cf:76:
67:6f:44:06:be:b1:74:a8:26:99:d3:29:0a:c8:5e:
fe:ce:20:af:78:c6:08:32:32:e8:98:2b:8b:26:33:
0d:a1:0b:56:97:71:64:44:ab:48:31:0e:b3:c1:c2:
55:17:f8:74:a1:64:0c:cf:dc:e6:42:33:d8:b0:c1:
77:44:79:38:1f:5a:d3:a4:f5:75:94:1d:32:06:c8:
47:d3:d7:d1:0e:a5:63:77:10:88:4e:6d:33:b4:c8:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:30:8E:E6:57:B0:F0:3C:F6:D9:74:AF:40:F1:C5:EF:29:53:58
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cc:74:2b:bc:bf:9d:e3:d5:27:ec:b4:19:32:46:e9:8d:9f:
a5:2b:46:f8:ae:b3:c9:75:c5:cb:fc:b2:40:15:86:19:61:40:
14:5f:b5:36:36:59:f7:97:7a:50:d0:7e:fd:2d:ce:81:a7:e1:
a2:7b:49:c2:c9:93:80:3b:39:db:bc:0f:ea:2b:b6:c8:ea:86:
3d:9a:1d:4e:8b:b4:b4:bf:78:e7:34:6e:37:4a:ec:61:de:3a:
12:cc:91:49:e1:f4:e1:0b:be:b0:d0:a4:2a:8d:7f:5f:da:0a:
39:14:27:0f:e9:2b:f8:d0:63:a4:9c:b9:79:7a:1a:79:9a:66:
ec:1b:cf:60:e3:0d:26:9b:07:27:2a:c0:86:53:bc:d0:57:37:
39:b4:ee:6c:0c:b6:09:20:99:ea:0b:db:de:33:b7:de:ba:59:
b1:dc:f2:ff:a0:43:48:ea:2b:ce:6e:38:e7:8f:c9:15:c2:0d:
5c:63:cf:07:5a:9a:ed:d4:23:f2:74:00:6c:83:30:24:35:42:
e1:40:3d:4e:6a:ce:00:7a:0a:3a:bc:f0:8d:f3:4d:ec:cc:f3:
29:ba:9c:39:b8:28:75:92:2d:89:62:77:12:e7:9d:cb:48:a1:
fa:52:6e:15:4b:5d:a8:a6:28:02:ed:87:41:e3:52:e2:76:8d:
14:c9:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:57:58 2025 by rpki-client