Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: o/c7t1t36fmbQ2KPWUr0qzntHqg2qlUpJkQd9gB15ho=
Subject key identifier: 1A:92:34:83:B2:3C:19:2C:23:E7:84:39:75:A5:EF:96:4F:A7:C0:D3
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 0196BC37487D75F7B71EEFBEABBBEE588417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 0E1C
Signing time: Sat 10 May 2025 22:01:01 +0000
Manifest this update: Sat 10 May 2025 22:01:01 +0000
Manifest next update: Sun 11 May 2025 22:01:01 +0000
Files and hashes: 1: HO5kHHVnIPEFaMxltsULzo8s2Vc.roa (hash: Pi2xNmIKaW+pbH3+gTOC2OW0sYYGJ1NWu+Za1hJg9Rk=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: rChHwcRHRZ5ziKtxFwKHbtYbugKRVgX5prs5PTDQ0cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:48:7d:75:f7:b7:1e:ef:be:ab:bb:ee:58:84:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: May 10 22:01:01 2025 GMT
Not After : May 11 22:01:01 2025 GMT
Subject: CN=1a923483b23c192c23e7843975a5ef964fa7c0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c2:31:3a:fa:38:84:bf:17:7b:a8:1f:e8:a9:
9e:bb:36:4d:fe:aa:b6:2b:f9:de:71:4d:46:89:05:
d1:9c:3c:15:1c:fd:e8:07:34:6d:8f:8c:7c:4f:b1:
42:86:aa:a9:bd:a9:84:74:e2:ec:00:f8:7d:1c:35:
9c:5a:a1:09:7a:29:de:16:80:e9:ea:04:3b:db:b3:
f6:fc:e1:11:a7:53:53:00:0c:07:87:1d:57:8d:80:
3e:bc:f9:f9:c8:2e:01:ea:38:41:51:eb:3c:3a:5f:
71:12:b6:59:b9:c0:43:16:b9:96:04:87:a5:b3:3c:
44:f0:93:fc:b7:b4:8f:44:9f:05:81:1d:37:ed:cf:
62:05:4f:a9:2b:34:25:08:82:0e:a0:1e:c4:4a:e5:
61:0b:f3:ca:d5:bd:f8:6e:d8:02:1e:24:3c:12:ab:
26:89:63:23:f9:04:26:78:c0:14:c8:50:bb:8c:ef:
af:af:32:88:e0:2b:9f:dd:e2:fc:82:cf:06:46:6a:
fe:02:9d:74:c0:f6:af:09:a9:d2:e3:61:2d:e4:89:
91:c3:2b:df:00:e7:68:db:e5:01:3d:d2:b8:eb:a0:
dc:1c:34:52:e0:d7:2c:75:b6:36:c8:54:47:fa:5b:
40:93:2b:d7:9c:bd:5f:f1:81:34:67:3e:7e:6f:4e:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:92:34:83:B2:3C:19:2C:23:E7:84:39:75:A5:EF:96:4F:A7:C0:D3
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e7:a4:ae:81:50:98:0f:28:a0:ce:6f:30:6e:92:a0:39:03:
86:e0:29:d7:99:bf:9a:e0:fb:e8:40:8c:b1:d9:97:38:ee:5e:
64:2d:8b:64:c0:86:0c:c3:f1:c5:ca:a9:29:26:0e:81:88:d1:
69:ed:92:56:3d:ec:2e:35:39:c2:95:7a:29:05:4f:61:9c:86:
93:6e:0b:e1:c4:fe:7a:e3:f0:45:14:45:96:70:6b:17:5f:08:
d4:d3:ba:dc:f7:71:d1:05:08:d9:c6:99:80:ec:09:17:51:5d:
6f:46:9f:10:2e:83:9c:9e:10:54:dc:df:32:40:53:30:95:30:
71:6a:59:2a:23:41:aa:58:7c:30:80:b4:d6:0e:9a:a6:ef:d3:
f0:2a:8f:03:ff:42:ae:16:8d:e1:d2:13:30:d7:2b:bd:3b:58:
0a:0a:ec:ab:2c:60:1f:8d:09:9c:65:4e:b5:b2:cd:29:ca:ad:
56:2d:9f:e1:4d:c6:98:b8:04:a9:53:5e:59:30:51:64:3f:fc:
11:c9:46:f7:cc:88:91:7d:ed:be:63:9c:24:22:3f:0e:11:12:
7b:82:78:fe:a6:fd:1e:ac:ef:94:7d:2b:3a:e2:9f:60:54:18:
0b:90:37:c4:06:7e:96:9d:cc:dd:91:51:48:07:20:cb:41:62:
9b:74:5f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:12:58 2025 by rpki-client