Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: DGd9SOozz54/Vn6+szksD/kk3vJ0YDvZalos1PTERxc=
Subject key identifier: B7:C9:85:7E:16:7A:F0:F6:12:AA:19:3B:5C:1A:A2:3A:C3:00:71:D4
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 0196B85A56CA700ED2122D024C9980DE260E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 04:00:50 +0000
Manifest this update: Sat 10 May 2025 04:00:50 +0000
Manifest next update: Sun 11 May 2025 04:00:50 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: QjEEgJS+X4LPTNMG6uAKWZigT3VANALKCm3MnAOEG5k=)
2: FJ052FCXxgY8148DvYkO__En3kw.roa (hash: JLmqR8aNA75wEnRdZMPO0CuZGQnOp6G+B6BOZat9Lxk=)
3: ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa (hash: QTsSWZKA6bZq44kgpQ1aopr0h9GiEKlR3CEv28RO574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:56:ca:70:0e:d2:12:2d:02:4c:99:80:de:26:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: May 10 04:00:50 2025 GMT
Not After : May 11 04:00:50 2025 GMT
Subject: CN=b7c9857e167af0f612aa193b5c1aa23ac30071d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:7b:c1:c3:bd:df:e7:16:3e:2f:17:77:9a:
06:c5:98:8a:10:cb:f4:63:ef:37:37:49:2c:b2:eb:
c8:17:f4:3d:28:70:15:21:d5:94:96:56:b1:1c:39:
38:16:3e:ed:50:5f:c0:bd:8f:5c:09:64:37:ae:3e:
91:64:4f:42:67:51:d6:8b:3e:1a:8f:1b:40:d5:03:
89:cd:de:2a:47:d4:33:a4:16:e2:c6:98:9e:b5:20:
48:1d:cd:b2:42:a8:e9:db:ed:8f:33:75:7d:04:6b:
61:2c:8a:b8:30:ed:a0:00:98:e7:e4:90:8c:63:e5:
8e:4c:65:f0:f8:04:ee:61:9d:36:04:b0:7f:9f:94:
12:86:b7:60:63:24:51:95:f2:78:dd:ec:d5:4b:38:
75:30:af:cb:8d:fa:9e:33:2f:30:95:52:79:25:98:
98:91:ab:a3:d2:7c:82:40:47:c9:1c:eb:f8:e9:4b:
7e:5c:83:dc:fe:27:5f:60:db:45:9a:71:12:bf:af:
2d:e9:ee:31:d5:82:f9:a8:59:36:9e:7d:b1:11:9e:
e8:76:a3:56:9f:4d:93:a0:6e:6a:bf:6e:6e:c5:7a:
1c:9f:d2:1a:8a:a3:5d:93:a9:3a:c2:34:41:ac:d5:
36:32:97:b9:24:73:61:dc:36:37:0b:98:ba:c5:bd:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C9:85:7E:16:7A:F0:F6:12:AA:19:3B:5C:1A:A2:3A:C3:00:71:D4
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:72:0a:6d:98:6c:3c:71:d7:d5:db:f6:73:10:bd:ac:f3:74:
41:9e:f5:34:a4:64:2f:93:ae:7e:8a:12:e7:27:7b:05:dd:ab:
84:88:76:f5:ed:a5:33:1d:0f:2a:da:3d:95:68:45:2d:7a:03:
c1:ae:91:cb:0c:c6:db:d8:8a:13:16:b6:c5:05:83:fb:34:fc:
e3:c6:e8:15:f3:82:2f:5d:3f:3b:4c:a7:7c:d8:62:77:0d:cd:
b8:38:d6:22:1a:66:38:c6:cb:b4:d7:ed:4a:55:1f:09:3e:f0:
ee:63:61:e2:c3:38:bf:88:c3:f7:cd:9c:c6:23:75:52:65:3b:
21:c6:c0:3d:2f:40:4a:83:df:e5:94:e6:04:95:ab:1b:c9:a2:
ad:4d:bf:4d:df:14:64:38:a1:21:8e:b1:31:c1:5f:c5:93:3a:
0e:bb:12:e3:e3:4d:1c:82:b3:ca:ce:ee:ee:c7:eb:e1:2f:94:
7b:14:78:0a:c5:44:6e:93:6a:d3:fb:41:f9:91:9a:ff:75:04:
85:5e:d1:2d:39:88:e7:a4:7a:08:2a:f9:7a:a6:19:7a:f6:07:
c4:d6:9d:20:aa:66:9f:e4:87:a0:12:42:f6:aa:e3:b5:4e:c5:
11:1b:69:0d:c2:25:4a:23:d7:4c:3a:b9:14:cd:d0:3a:47:a7:
7b:75:a7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:44:40 2025 by rpki-client