Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: ofNx1Uq+wfLyw3j9GyZr/CzSc+wKM839SMP1jJk1dLg=
Subject key identifier: E5:2D:3E:7A:A8:6E:18:0A:72:01:83:89:23:B7:E3:F7:BE:4F:3C:FC
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 0196D175675ACAF8FF025F9894A621722993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 1541
Signing time: Thu 15 May 2025 01:00:54 +0000
Manifest this update: Thu 15 May 2025 01:00:54 +0000
Manifest next update: Fri 16 May 2025 01:00:54 +0000
Files and hashes: 1: 1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa (hash: LW+UjxgXYW+oRlL0a5q0N9JKog1QwqgaxgEIN56GOWA=)
2: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: Bmcc5I2gRaLGRpjtazDGRupshu8zXmnfBwrXOggf9wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:75:67:5a:ca:f8:ff:02:5f:98:94:a6:21:72:29:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: May 15 01:00:54 2025 GMT
Not After : May 16 01:00:54 2025 GMT
Subject: CN=e52d3e7aa86e180a7201838923b7e3f7be4f3cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:4b:47:d2:4e:61:5b:a2:77:06:01:be:65:
cd:7a:b1:2d:c9:1a:78:d4:44:33:d6:96:e4:f5:38:
2a:d2:44:69:c8:c8:ce:35:ad:14:0f:00:b9:13:c2:
bd:a8:21:e0:3a:9a:81:3d:ab:bd:b1:df:02:41:a0:
a5:53:15:a2:2b:b5:67:b7:dd:cb:e0:f3:0c:a5:3b:
6f:6d:4f:85:94:f3:3b:c7:77:25:9c:a7:76:51:71:
c5:1e:20:08:0b:ac:37:c6:48:47:0f:b2:59:f8:ed:
ad:a2:b8:f2:8b:06:f7:3f:66:99:06:5e:03:97:8d:
52:25:e9:32:bb:7c:e2:73:a8:cf:c5:81:e6:23:f5:
a2:0f:48:96:35:80:83:90:9b:b9:c3:e1:7b:d4:ac:
49:6d:56:13:62:e9:6f:2d:c9:91:dc:2a:a7:ce:0b:
cc:28:4f:11:b5:05:ad:5b:60:ba:95:27:ce:e5:82:
58:58:73:a8:58:78:b8:2c:ab:74:1f:2d:60:4f:4b:
04:be:fc:ed:4b:d0:dc:8b:b5:11:b3:5b:69:85:f0:
50:36:8c:10:11:be:bd:3b:74:ba:63:3b:97:57:a3:
df:8e:0f:23:44:08:50:1d:42:c6:78:3c:22:15:68:
4e:ef:a0:93:af:96:02:81:16:01:96:af:20:92:db:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:3E:7A:A8:6E:18:0A:72:01:83:89:23:B7:E3:F7:BE:4F:3C:FC
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:28:43:10:bf:a9:6c:7a:ad:e3:78:a9:48:26:dc:72:94:75:
1c:40:db:02:1f:8a:91:0d:67:bf:12:36:42:27:e7:b7:1e:a7:
70:38:bb:b1:c2:d9:fe:f3:0a:c8:d7:1a:2c:2e:64:ff:f2:04:
35:8e:8c:89:b6:ba:a2:91:d9:d8:71:b3:1d:8d:7a:5a:62:88:
91:30:5e:04:71:27:9b:e2:64:a7:46:c6:41:28:26:7d:9e:64:
8b:3f:4b:15:d1:bc:c4:6b:7d:c5:80:1a:77:fc:26:93:e4:e5:
ed:c4:e2:73:f6:95:cb:23:f4:8e:03:ff:b3:d7:68:05:2f:ec:
f2:d7:78:95:3f:f8:e3:b5:2e:b3:b8:89:2b:dd:1f:7c:dc:2b:
65:66:c5:7b:53:2f:56:fd:7a:15:a3:ff:df:36:bc:1f:de:56:
95:7c:42:ff:dc:d7:6e:a9:64:ae:69:b1:bb:72:c5:7a:ee:55:
9d:c9:cd:60:95:0e:ff:e3:05:71:90:de:97:24:e7:cc:89:80:
ef:a1:f1:72:22:a0:33:61:a6:55:6e:44:1c:bc:0e:4f:dd:c0:
9e:a2:0b:8a:98:80:47:80:fe:78:7c:6c:3d:33:9d:3b:6d:fa:
e8:b3:78:15:94:20:ea:8c:71:8b:4a:23:26:20:2a:f8:c9:b0:
ae:ff:81:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:19:16 2025 by rpki-client