Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: AuWsW2okiueTYhDef1+iytbHh3936RZpiv7cccfnfHI=
Subject key identifier: 93:BE:EF:85:29:8B:54:15:96:86:ED:3C:51:3C:48:36:E1:BA:96:ED
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 0196B1E9CFD590C5C06D19B236995AF7D191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0BC6
Signing time: Thu 08 May 2025 22:00:12 +0000
Manifest this update: Thu 08 May 2025 22:00:12 +0000
Manifest next update: Fri 09 May 2025 22:00:12 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: i8bvcLG7dg+AEDcyy/zXwbjIsk4w4Wcsr+IhmeMOQac=)
2: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=)
3: ziX8_hpTF8ziYiuxKjrOFhfqeQo.roa (hash: HyWFcNCrTB5jYAeqdAfWDrR8oFNvkYOvB8sslFQIfBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:e9:cf:d5:90:c5:c0:6d:19:b2:36:99:5a:f7:d1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: May 8 22:00:12 2025 GMT
Not After : May 9 22:00:12 2025 GMT
Subject: CN=93beef85298b54159686ed3c513c4836e1ba96ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:ef:f8:c6:85:cc:e6:e8:d1:3e:02:42:c6:
bc:25:f0:67:b3:cb:72:67:18:f0:96:e6:9f:5e:61:
e6:73:95:4a:12:6e:b0:e8:1a:13:ff:1a:ad:9b:ca:
1d:d4:85:f7:fb:81:5b:31:0c:02:dd:9f:e4:03:6d:
a2:d7:1b:43:ac:a1:d0:0e:05:5d:de:f8:23:59:69:
44:21:ea:bd:af:35:42:8b:b1:67:f8:ac:b7:43:42:
81:03:08:32:f3:b3:50:6e:c9:31:a2:12:d7:5a:a9:
22:e1:89:74:9e:a0:9b:e4:38:01:09:be:3f:ad:a6:
39:9d:0e:0d:0a:52:e5:ba:93:fd:36:04:1b:d9:be:
b5:97:b9:03:68:50:00:c6:a6:fd:dd:d1:83:85:5b:
f5:e6:7a:86:57:ae:b7:f3:80:28:c8:c3:fd:31:72:
dc:70:54:dd:34:bd:0d:1b:e8:6b:dd:6c:bf:86:a2:
3b:b3:ee:3a:99:af:ee:d1:e0:f3:77:4c:6d:ef:6f:
d1:b9:2a:3b:6a:77:59:0b:37:48:00:fb:35:4c:b2:
85:8e:16:5c:1c:c1:54:7d:b3:a5:2f:d6:52:4c:1b:
b6:b4:1c:6e:66:59:de:79:04:e6:ba:bb:76:7f:cc:
ed:87:35:f9:ca:e6:6e:0c:04:1e:c6:58:52:62:90:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BE:EF:85:29:8B:54:15:96:86:ED:3C:51:3C:48:36:E1:BA:96:ED
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c2:af:e6:dd:1c:bf:a7:32:01:02:3c:d8:8e:9d:bf:c9:77:
08:06:78:48:75:c7:c8:10:31:95:d3:78:89:dc:30:78:2c:f8:
17:32:f6:95:8d:e0:be:33:0b:7e:d1:75:22:4f:75:c4:36:2e:
b2:fc:4c:fd:a5:2b:2f:5a:06:75:a4:c6:8e:c4:68:b6:d1:e9:
b1:b9:fe:20:f5:46:d9:db:21:26:ad:bf:0d:e7:2d:d3:11:c1:
cf:08:8c:41:65:e3:25:9c:70:38:84:38:20:58:4b:10:e4:89:
eb:d1:59:90:77:f6:ae:8a:e6:b1:14:7a:96:21:54:06:9f:05:
4c:2f:44:18:7b:de:0c:f8:a4:ad:82:c1:da:e2:68:03:e5:b6:
6d:cd:f8:09:dc:ea:4c:ed:d6:7b:8f:3c:f4:a3:5b:ac:e2:c1:
50:b0:69:e2:b4:90:4b:9c:8d:5d:ea:d9:a0:af:fe:11:a1:11:
8c:9e:55:0e:ad:2d:77:10:7d:34:0b:04:be:3c:42:1e:ca:e3:
10:29:24:9c:98:0f:ab:08:b4:b4:f7:ce:81:a2:e9:c7:03:ae:
a2:36:76:77:84:02:b7:e2:c6:08:1c:69:32:ea:20:a2:9c:b3:
59:c4:1e:77:74:e8:02:00:7e:88:3f:00:36:36:50:6b:6a:f8:
f8:f8:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:56:39 2025 by rpki-client