Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: 97Z+tAOItx7ZhJ6X+ldypYnw0XPk1qrO+GdiWhxFrUg=
Subject key identifier: A7:66:B1:5B:87:03:E4:BE:F5:2D:61:26:50:53:A6:A7:03:E5:4D:DA
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 0196BD80DF19C1A174898F65BEDC8B68A00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 04CD
Signing time: Sun 11 May 2025 04:01:01 +0000
Manifest this update: Sun 11 May 2025 04:01:01 +0000
Manifest next update: Mon 12 May 2025 04:01:01 +0000
Files and hashes: 1: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
2: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: sl0/Xvy5egCaH4pMbSTEavSKQseaumVMAJVXvxud28E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:df:19:c1:a1:74:89:8f:65:be:dc:8b:68:a0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: May 11 04:01:01 2025 GMT
Not After : May 12 04:01:01 2025 GMT
Subject: CN=a766b15b8703e4bef52d61265053a6a703e54dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:2b:0e:87:e0:6d:b2:ec:d9:75:83:8a:3c:
ca:9f:2e:47:08:bf:35:9c:a7:d9:26:40:02:c7:5b:
2f:a5:51:27:03:ef:79:ce:9c:80:60:bb:40:e3:2e:
15:a6:26:b6:be:11:0a:ec:f8:40:c7:a3:da:c3:ab:
50:67:70:fd:fc:0a:37:93:7b:1e:69:c4:aa:a1:5a:
76:e0:c3:82:9d:72:af:69:91:40:08:ea:9f:0e:4e:
65:f5:20:ff:8c:5f:84:d9:e3:86:d7:90:8f:be:bc:
95:a4:e4:87:20:a4:3d:37:c0:d5:7c:66:85:86:3a:
dc:9d:1c:dc:47:76:5c:54:69:fa:62:d5:c8:f0:2b:
2e:63:c0:5a:e8:c4:36:2d:2c:b5:c2:ce:0a:79:a9:
5e:9a:6d:22:9b:75:b0:10:5c:30:13:b5:aa:f7:c6:
06:33:c1:a1:39:1b:af:87:71:60:e3:3b:01:97:25:
4c:5c:30:f0:49:0f:2d:53:bc:10:9d:7f:33:ab:d6:
76:e3:e8:ff:96:1d:b6:1e:4d:b1:f7:03:cd:8c:61:
ac:8c:86:cc:22:cf:25:81:fb:a6:28:d5:5f:68:78:
a4:e7:af:e5:17:d4:6f:3b:a8:66:9f:e3:b4:f3:48:
0f:26:de:3f:c3:f9:be:58:89:92:95:17:33:c5:84:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:66:B1:5B:87:03:E4:BE:F5:2D:61:26:50:53:A6:A7:03:E5:4D:DA
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:32:d9:de:17:24:d0:56:ba:88:0a:e7:2c:3f:c0:40:a0:3b:
4e:83:6a:05:fa:89:1f:ab:8f:6b:a4:1b:98:55:d1:1b:43:70:
7a:54:1b:1b:01:cc:04:05:83:72:2a:26:89:3e:1e:8c:08:4e:
41:5f:44:4b:c3:8c:a7:5e:d3:6c:7b:2a:8d:f2:b1:17:8c:62:
54:77:82:3a:d2:84:8f:34:84:69:76:b3:49:49:fe:d3:54:4d:
7f:3d:6f:bc:7d:3a:99:25:94:f2:2f:57:5b:ad:a6:87:9e:99:
e4:89:13:2b:cd:5e:b3:2d:d3:1f:0d:85:15:c3:52:93:bf:30:
f1:19:12:f7:99:7c:d9:7b:af:79:f1:d1:f5:2a:2a:a8:f6:a3:
db:bd:c0:92:0e:0d:9f:de:0e:3b:8f:04:26:6d:df:ec:ab:0a:
57:b6:59:6e:38:d2:53:57:76:7c:86:59:b8:9d:b2:f2:39:64:
1d:00:db:57:b6:da:33:76:68:de:fe:ac:5f:51:0d:68:ae:18:
b7:de:c4:84:ec:e1:77:4d:85:45:3a:75:35:b2:a9:f9:f0:97:
a4:3d:fb:be:a3:54:e6:89:a4:09:5d:73:9e:8e:c3:41:40:7b:
00:74:e1:d8:6e:71:fd:79:4c:25:93:97:b7:08:cc:a0:46:e3:
19:15:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:23:46 2025 by rpki-client