Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File: dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier: DgTn68DODxP5gZlEKBG9wiExIyvvdpVcQNYzW9APnpc=
Subject key identifier: 0A:2D:AA:35:D9:B1:B2:8C:11:7C:09:49:C3:32:B0:7D:66:9D:8B:AE
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer: /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial: 0196BE2587E7AE45F9474B4F78CDE1556BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number: 0FC3
Signing time: Sun 11 May 2025 07:00:52 +0000
Manifest this update: Sun 11 May 2025 07:00:52 +0000
Manifest next update: Mon 12 May 2025 07:00:52 +0000
Files and hashes: 1: 2bqsQsJql_hwoFMeZ0nmgZGmbEw.roa (hash: e5rzAihzL4LX4PAPTH0rwfwcZpBTQn6I0oUQG0cd6f8=)
2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: 7WralWV3+2XCWQQPhlAzYwjRCXqKH1CUiSDSKAKI24g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:87:e7:ae:45:f9:47:4b:4f:78:cd:e1:55:6b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Validity
Not Before: May 11 07:00:52 2025 GMT
Not After : May 12 07:00:52 2025 GMT
Subject: CN=0a2daa35d9b1b28c117c0949c332b07d669d8bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:d1:5e:3c:c5:7c:b3:cd:64:9d:c4:46:5d:
44:81:9c:08:63:01:6c:ad:47:d8:49:7f:b3:d4:d9:
32:a7:c3:4b:a4:e7:a6:e9:e0:50:bd:0f:8a:3d:fa:
29:6b:73:44:0c:31:15:ea:1a:98:7e:db:4c:74:2f:
11:db:d6:19:a0:a4:38:07:3f:77:fa:d7:3f:7f:f5:
07:d6:0f:9d:44:db:87:7a:d4:0b:98:7f:d1:fb:bd:
31:04:b8:f9:7b:6f:d7:bc:4b:32:4a:85:fd:46:db:
7f:27:5c:d6:3d:b8:ef:5c:ba:5e:0c:7d:3d:0d:10:
20:51:ae:6c:5d:cd:1a:e4:4b:e9:a8:d1:ea:57:97:
f0:82:59:1a:35:d2:32:e5:58:4b:37:6e:55:e8:8e:
33:9c:8c:4a:7d:33:d3:b0:26:8e:c4:b6:97:a3:a7:
b1:6b:b9:e0:8f:01:50:6e:75:db:8d:24:02:52:59:
68:a1:25:c2:56:85:c9:6b:4b:9d:57:5a:18:0b:aa:
d3:d4:81:ba:9e:38:d2:ce:1e:87:f8:b3:70:2f:ee:
d5:7e:e0:0d:bb:b6:8c:b1:a0:02:de:83:38:a0:37:
30:b5:1f:b5:ea:83:93:7a:c3:5d:70:b8:1f:96:bf:
61:3a:17:89:68:ff:6c:5e:36:56:4d:a1:61:56:bd:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:AA:35:D9:B1:B2:8C:11:7C:09:49:C3:32:B0:7D:66:9D:8B:AE
X509v3 Authority Key Identifier:
keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4b:b4:6a:d5:51:68:3a:20:74:80:99:81:28:50:7c:b5:d2:
69:4f:0a:ca:3f:aa:1e:77:f1:08:c4:aa:0c:e6:34:9b:58:52:
fc:fb:82:3b:e7:8a:31:93:79:69:07:5d:ff:7a:0c:88:b6:2f:
d3:a2:b2:b9:44:e6:9e:51:c1:7b:a4:00:4d:75:40:79:ad:8e:
be:a2:c4:e1:68:5e:be:73:78:ac:fe:1b:82:b9:3f:31:9b:47:
14:c1:79:d3:62:c2:7d:0c:75:44:2f:8a:9f:86:c3:d6:6d:26:
25:7e:ba:83:19:3b:24:3b:8c:6b:67:30:92:63:7e:cf:b2:63:
3a:06:1e:74:8d:8e:69:e3:0d:9e:c4:16:5b:ea:78:40:30:76:
9c:c8:2c:a7:c4:9e:db:b4:d2:34:9d:1b:d8:2f:2e:1a:c3:99:
fb:80:a8:7d:4e:c5:b3:70:86:d9:a9:94:dc:e5:14:60:ce:a1:
74:48:ea:8b:4d:27:65:34:e4:97:44:03:55:b4:09:81:a6:59:
80:bd:eb:37:df:c7:c2:a8:a2:94:2c:23:ce:49:6f:cc:d0:ab:
c1:f7:ff:0b:17:9c:9f:51:51:e8:14:ec:d7:af:89:31:3d:de:
cd:19:c4:7d:69:28:d2:cf:97:5f:69:00:9e:f4:18:b6:5e:ec:
4c:bd:e8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:56:17 2025 by rpki-client