Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: r/gghcVulJHmopF0MeVC1KQI+FagCpLse3vqXEeHPCc=
Subject key identifier: FF:5E:FE:E6:DF:27:E8:B5:C8:4F:1A:A1:F9:0D:C1:4D:54:24:B3:94
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 0196C45E1721CE9EA218CDF84C3FB6725CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 0E45
Signing time: Mon 12 May 2025 12:00:22 +0000
Manifest this update: Mon 12 May 2025 12:00:22 +0000
Manifest next update: Tue 13 May 2025 12:00:22 +0000
Files and hashes: 1: THr3g9OkPvsy14BHilEZG56BiqU.roa (hash: 3xhlPP170oH7ChTM2ZqRCOHhpB5jGmO+80m0RUL/u1M=)
2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: D+HjHMUmmpVkLSkqWoDuW8xG02O0hwMxL708zalJ3mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:17:21:ce:9e:a2:18:cd:f8:4c:3f:b6:72:5c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: May 12 12:00:22 2025 GMT
Not After : May 13 12:00:22 2025 GMT
Subject: CN=ff5efee6df27e8b5c84f1aa1f90dc14d5424b394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:66:c8:75:6b:85:10:6c:13:4e:4f:5c:71:
b9:a9:48:8e:2d:3f:47:86:67:34:ca:86:10:15:4e:
2d:ea:07:c9:66:50:1c:8b:26:23:e3:68:01:f6:e7:
32:9f:70:46:aa:4b:3d:40:d4:89:8a:67:b8:01:88:
eb:3b:1e:9d:c9:b3:a1:8b:a2:98:86:d4:44:cb:2f:
4d:b0:87:44:e0:ac:17:9b:80:cd:3c:d6:8d:0c:43:
d2:eb:c2:4c:c3:7f:ea:13:9f:56:56:02:b3:ca:ef:
c6:3e:38:cb:fe:f7:c2:a3:3a:49:c2:40:fe:0b:ec:
c6:e7:27:3c:69:dc:a9:f4:e8:62:7b:c8:07:fa:86:
4e:b9:e8:ee:7f:12:f2:99:5b:ed:00:87:de:27:e0:
cf:cc:73:47:03:0c:3f:fc:f1:ff:8e:78:90:ac:80:
3e:63:e9:33:2e:16:09:d2:ff:6e:7b:e5:f5:d9:19:
36:2e:d9:8a:2b:41:c7:32:fe:cd:ca:96:c0:91:70:
6f:63:50:25:80:3f:14:bc:54:63:97:e4:f0:f5:4c:
8a:96:23:fc:94:8a:63:06:31:a9:fc:85:6b:e6:9d:
fc:5e:5c:72:99:5a:8c:dc:e5:ef:16:fd:e1:3a:e8:
ef:b2:1c:fb:5a:e3:a9:d3:c4:93:a3:62:b4:87:e2:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5E:FE:E6:DF:27:E8:B5:C8:4F:1A:A1:F9:0D:C1:4D:54:24:B3:94
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2d:fa:b7:c7:3d:f3:e2:39:33:d9:1e:ba:ed:4b:e6:3d:bb:
31:05:68:bf:b9:99:0d:3b:bc:59:ba:e7:27:33:f0:22:5e:75:
dc:bb:5c:53:cc:b9:fb:f0:dc:c4:c6:e1:38:91:cc:78:9d:5e:
f9:21:83:06:6c:4f:2d:fe:cc:e0:de:be:69:aa:fd:38:e0:cb:
c3:b1:2b:18:4e:a3:bc:85:d3:bd:eb:d1:d6:0f:4e:0f:c1:91:
ae:8c:b7:98:58:86:8a:1a:38:eb:5a:dd:33:39:1a:16:43:3d:
52:71:9a:c5:07:11:ad:b0:a1:46:66:ce:ea:40:77:98:9f:bf:
3d:ca:6d:b6:1e:ae:d0:45:a1:af:96:ac:cb:4c:e0:77:b8:4a:
e5:28:6f:a0:37:d4:8d:63:48:df:26:e7:21:86:0f:0c:8e:16:
b9:b9:3f:fb:1a:41:02:e1:93:fb:cb:88:84:f8:61:92:b3:d9:
80:04:b8:df:0a:61:91:50:c2:02:b2:49:96:61:7c:ba:dd:41:
3f:47:be:56:80:aa:f1:35:51:d3:e5:ff:e0:03:53:b8:1f:c0:
a8:c1:0f:96:df:15:23:27:e1:a5:46:b1:36:1d:bc:6a:1e:be:
0f:96:7a:a6:6c:25:b4:83:7f:bc:90:dc:d8:f5:55:ee:5d:11:
43:36:51:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:11:26 2025 by rpki-client