Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json)
Hash identifier: bp8NaTgndf4GmZvzIV06i5VKRLi+ks0QaQutiLFXsJU=
Subject key identifier: 30:5C:D2:5A:DF:64:32:7A:94:B8:50:4D:00:DD:26:CF:B6:5D:6E:33
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 0196CF18F36CC5BC9428ECBB585FBBDCBE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
Manifest number: 010A
Signing time: Wed 14 May 2025 14:00:40 +0000
Manifest this update: Wed 14 May 2025 14:00:40 +0000
Manifest next update: Thu 15 May 2025 14:00:40 +0000
Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: oWIt4J4PNuEZLDv/UqSdmimRTde+YpoRxB/RkJrwxCY=)
2: cPxWboLauOt1xiX1g5_qcFfMwuQ.roa (hash: F49rFgzhVx+26sTntZUKS3aBxcYFzjzC7SoWYW83au0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:18:f3:6c:c5:bc:94:28:ec:bb:58:5f:bb:dc:be:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: May 14 14:00:40 2025 GMT
Not After : May 15 14:00:40 2025 GMT
Subject: CN=305cd25adf64327a94b8504d00dd26cfb65d6e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:aa:b7:f9:34:9b:5b:27:ea:e0:e6:23:4c:
4e:d5:4d:d2:87:46:f8:d5:c9:fc:08:ee:8a:12:85:
fc:5b:90:a2:54:1b:a3:e6:83:c8:1c:d2:01:f7:a6:
63:cc:cc:03:b3:fe:09:9c:61:37:a6:95:5f:1d:2d:
02:a7:bd:6f:22:16:44:b8:9e:e1:aa:dc:24:2d:f4:
45:5e:90:04:3a:ce:ca:d0:6f:ed:2a:56:87:62:80:
ac:5e:a5:f2:80:bc:b6:db:cc:f2:93:5c:d9:54:b6:
20:f3:36:38:3e:88:ee:9a:d3:35:b8:66:3b:19:15:
50:79:23:b5:02:ac:bd:46:a6:16:0d:44:c3:ae:ca:
7e:00:90:30:f3:30:39:e0:71:87:bd:1d:fe:1d:56:
9c:84:4b:e8:d3:fe:30:21:28:06:4f:53:d5:20:ff:
0a:c6:57:8c:87:e7:3a:0e:4d:85:a8:a1:7e:10:4c:
3a:da:cd:1a:84:ef:f8:57:a8:43:2e:63:52:7b:bb:
90:c7:6d:7c:07:ca:e8:a8:51:70:e8:d0:90:3d:b1:
ab:48:e8:21:84:36:aa:b1:f1:44:d5:76:9c:3f:a3:
75:c4:52:6f:fa:56:12:c2:51:2a:2d:69:c5:19:67:
8f:c5:20:f2:7d:23:35:e2:83:23:18:73:8d:f0:d1:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5C:D2:5A:DF:64:32:7A:94:B8:50:4D:00:DD:26:CF:B6:5D:6E:33
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:69:28:3c:d7:b0:4c:d3:3d:07:04:d9:e4:2b:8d:7b:7f:08:
bb:f1:8d:e6:bc:82:43:1f:88:b0:60:db:47:e4:0b:da:c8:5a:
f1:c4:c1:92:43:62:b4:23:52:9b:c8:4e:91:c2:8d:40:45:98:
e8:d2:7d:06:26:48:36:cd:2a:bb:05:49:3a:3e:2f:ce:5a:46:
22:29:6e:3f:4c:bf:3f:86:cf:fe:88:05:04:fa:4e:a1:1b:62:
aa:a0:a5:12:fe:fc:37:5b:a4:05:70:92:84:e6:7d:21:1b:d3:
52:92:b0:e5:37:90:4f:ed:c1:09:d9:b3:73:f1:ac:bb:af:a0:
9e:4d:5d:16:04:d5:9a:ed:77:7d:73:e1:21:6b:51:21:74:c1:
7e:76:74:c6:7b:d8:cc:9d:36:12:d0:91:a4:1d:6d:91:62:7e:
3b:c5:df:f5:93:be:7d:ac:87:cd:d7:4f:4d:36:36:8d:53:4b:
e8:5f:aa:48:79:a3:59:cf:ac:f1:32:cf:f0:4b:6a:9c:38:ae:
17:27:bb:af:f0:1f:1c:35:3c:ad:8b:bb:b4:0d:ee:08:24:5e:
f0:5e:f8:2a:b0:c0:13:cc:e7:8b:1f:75:87:1a:a5:2d:f1:18:
83:3e:d8:68:69:88:00:52:71:51:c8:26:ef:a7:9c:7d:4e:62:
78:4d:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:03:08 2025 by rpki-client