Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
File: rXz7zh1tOmok8lZSBl0xV1go7bU.mft (raw, json)
Hash identifier: ZGm/YBJsS9RC+ywP+NenrTlu8Ob8l0aeu7ha/J/RuaA=
Subject key identifier: 0B:B9:1B:EA:15:F6:6A:D8:B2:34:58:8D:3F:5B:1D:13:75:79:78:FB
Authority key identifier: AD:7C:FB:CE:1D:6D:3A:6A:24:F2:56:52:06:5D:31:57:58:28:ED:B5
Certificate issuer: /CN=ad7cfbce1d6d3a6a24f25652065d31575828edb5
Certificate serial: 0196B1B345FC31EFB116B05D593C6CAE3F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
Manifest number: 0C3F
Signing time: Thu 08 May 2025 21:00:38 +0000
Manifest this update: Thu 08 May 2025 21:00:38 +0000
Manifest next update: Fri 09 May 2025 21:00:38 +0000
Files and hashes: 1: Im3NuoFQdX7egdBojqG76hMiXq0.roa (hash: MBZCzXbY6/6xAtTJ9sYOEhNyw2Jnz8TgfEJHylhcfdM=)
2: rXz7zh1tOmok8lZSBl0xV1go7bU.crl (hash: k6hceq6Y4fwVFIVYzi3IoM2ih07XV66g7D8ZdwrZnYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:b3:45:fc:31:ef:b1:16:b0:5d:59:3c:6c:ae:3f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7cfbce1d6d3a6a24f25652065d31575828edb5
Validity
Not Before: May 8 21:00:38 2025 GMT
Not After : May 9 21:00:38 2025 GMT
Subject: CN=0bb91bea15f66ad8b234588d3f5b1d13757978fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:52:a0:6e:67:f6:8b:c6:61:09:5c:96:73:
5c:90:5c:88:9b:23:da:fa:fa:ba:ba:3a:e1:5d:83:
e0:8c:3e:15:f0:e6:98:fb:5a:fc:b7:18:38:99:4d:
90:44:a5:d9:3f:56:f2:67:63:19:e7:88:33:80:50:
3a:92:93:a3:7f:3a:b5:2f:06:a2:53:c0:36:78:c2:
be:e3:5a:d8:0e:39:78:aa:bd:5d:31:6e:66:4c:ca:
2e:f0:59:7b:89:44:db:0b:b4:0b:0c:08:2d:6d:da:
35:a5:6a:bd:cc:24:4c:54:ca:09:c9:45:16:96:ac:
04:b7:a3:80:dc:c1:d1:5f:a8:5f:37:92:28:d0:a8:
81:e1:3e:5d:76:27:ae:bd:0a:ab:66:eb:2d:b4:63:
39:5d:22:cc:a5:16:93:4e:de:a9:f6:a2:00:b7:75:
71:a6:92:c4:86:32:60:75:1c:96:41:a7:97:f0:b7:
a9:0c:cd:08:7c:8a:fc:c5:84:03:20:a6:d8:d2:9b:
c0:49:8d:37:86:5b:7f:5f:c8:fb:1b:13:ac:e5:36:
52:1b:1d:02:30:49:ef:ba:ff:ee:41:00:b6:25:45:
6e:e6:53:13:d2:e7:70:a4:7c:40:76:a9:8f:b0:39:
fa:70:82:66:db:a2:49:89:f4:70:1e:fb:69:5a:75:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B9:1B:EA:15:F6:6A:D8:B2:34:58:8D:3F:5B:1D:13:75:79:78:FB
X509v3 Authority Key Identifier:
keyid:AD:7C:FB:CE:1D:6D:3A:6A:24:F2:56:52:06:5D:31:57:58:28:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b9:4d:42:67:6e:92:e5:dc:9e:14:17:ad:48:7f:52:3c:ff:
77:87:c2:7d:58:59:66:a4:72:35:74:3f:78:a0:e1:6c:81:c8:
f9:da:32:91:4f:b8:f3:45:52:3e:08:70:87:b9:56:a4:20:2a:
b5:b2:5d:46:b3:a6:b8:f9:a5:80:2a:7f:da:a4:26:d7:ae:07:
56:a4:11:b2:0e:10:ab:bf:d2:61:4e:9a:79:00:e5:e1:75:5f:
ee:94:89:87:b8:2e:42:9a:16:e0:f5:7b:54:59:59:3b:e8:06:
d9:f4:02:32:03:c0:7b:c2:e3:4c:6a:bf:24:59:3a:30:01:0e:
09:9f:f3:21:98:82:82:92:45:d8:c8:2e:c8:2f:56:8c:90:01:
47:74:d7:da:d5:e7:46:31:d6:87:13:84:27:e1:b3:87:8f:bc:
5c:d9:99:84:f4:01:21:ee:f3:ed:f0:2f:d3:73:25:b4:c1:2e:
75:6a:f5:fa:17:64:0c:75:37:35:bb:2d:fb:96:fd:17:84:c3:
49:dc:24:75:5d:d1:3c:41:6e:93:53:2d:d5:55:87:3d:8e:a6:
ea:a9:7a:db:fc:b9:2e:15:ab:25:2c:c4:f4:1c:84:5a:90:bf:
ea:4a:6b:a1:38:06:d4:81:c5:85:c7:db:a0:64:1d:4f:55:30:
5c:b3:8d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:19:58 2025 by rpki-client