Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier: FboEp1gpHrPp/NMg4QncmCpyBhzGpGpkdvUWi2Z3HtU=
Subject key identifier: 6F:CC:74:BC:A2:4A:C3:97:55:4C:C0:18:E0:2B:BD:BE:9E:CE:DA:04
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 0196B9A4309C5D9871064E3DA6FA2BFE8D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number: 0D7B
Signing time: Sat 10 May 2025 10:01:07 +0000
Manifest this update: Sat 10 May 2025 10:01:07 +0000
Manifest next update: Sun 11 May 2025 10:01:07 +0000
Files and hashes: 1: LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa (hash: I7nX5ROvffTNGyuWZrNpPLtJJE4OFOAqh82VhWKzBDY=)
2: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: LozDNBs0o3xz/JCXz1u8FhLRWQ5AB9A3UV/sAQAWuZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:30:9c:5d:98:71:06:4e:3d:a6:fa:2b:fe:8d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: May 10 10:01:07 2025 GMT
Not After : May 11 10:01:07 2025 GMT
Subject: CN=6fcc74bca24ac397554cc018e02bbdbe9eceda04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:19:8f:21:e5:92:d8:21:a2:11:6c:b4:39:
6e:67:e1:30:e1:6c:fb:2d:93:08:ec:75:58:89:15:
cc:27:82:91:fd:ae:73:bb:ce:dc:38:30:d2:0c:92:
46:37:3d:33:90:7d:f9:2a:52:7d:fd:76:d3:f2:b7:
6a:5e:a6:6c:f2:59:7f:ef:eb:f3:6e:45:84:af:b9:
96:0b:b8:af:b8:48:10:9b:df:78:c0:df:2c:4c:45:
69:b1:0c:45:75:9e:5e:ef:4a:8b:50:40:6b:47:97:
fc:ff:6e:35:58:c2:c2:dc:b9:dd:ec:f4:02:09:5b:
8c:04:49:42:1a:c7:12:07:19:cf:31:4d:13:b5:7e:
d7:65:50:94:37:32:72:2d:26:2d:2c:98:e9:d6:ef:
50:be:28:b4:66:8a:b0:ad:79:23:ad:a1:3a:3c:26:
dd:fc:a0:37:2d:a8:1e:4a:ec:d9:52:dc:ac:2b:40:
7b:2a:ca:9f:2d:90:74:02:00:74:84:04:f1:21:03:
82:4e:0d:89:8a:70:c8:05:84:0f:e2:a6:35:c8:aa:
b0:47:7b:84:76:24:0a:bd:da:59:e8:d6:b6:0a:8a:
0e:eb:c0:6f:e2:1e:39:7c:37:ac:0d:78:6d:90:44:
f2:67:1c:48:a3:38:1e:8d:2e:5d:43:ce:6a:ae:dd:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CC:74:BC:A2:4A:C3:97:55:4C:C0:18:E0:2B:BD:BE:9E:CE:DA:04
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0c:9a:9e:7a:19:e0:f1:00:2d:df:e5:0f:7d:49:86:fe:1b:
7f:10:0f:c4:5d:bb:77:60:42:2e:7e:4c:1a:48:5a:65:55:40:
35:41:32:6d:e2:ee:a6:6d:cc:b0:d2:88:8d:ce:f5:f6:2a:8b:
59:4d:13:f8:5d:b7:6c:ed:81:6c:31:50:60:0a:a0:89:ee:03:
fb:11:f9:21:4d:3d:aa:e8:b4:c3:76:ae:66:20:4c:62:95:66:
43:49:bb:a2:0b:69:4c:ca:11:39:58:f7:48:a8:bc:ba:43:23:
00:e2:79:2f:f7:06:f7:2b:67:24:49:8e:36:cf:ed:f8:a3:bb:
92:4c:1c:a5:14:11:2b:56:bb:5a:73:cb:52:aa:f9:68:57:ed:
34:fe:24:90:0d:01:4a:a3:5f:6a:d2:7d:17:72:34:e8:db:f3:
c3:fd:a1:be:3e:52:c1:eb:c8:c9:f9:94:3e:97:d8:ba:db:32:
3a:8b:ad:1f:1e:90:e6:2e:0e:ca:e5:47:a9:69:25:72:25:ce:
12:d8:0d:60:a1:f6:1b:ce:b8:67:99:44:76:d8:d3:aa:ba:16:
9f:ea:b4:5c:1b:fe:b9:7c:b1:90:14:e5:57:43:59:e3:b0:4f:
2b:1a:a8:8b:e8:30:d3:b5:9c:ef:18:f8:af:d8:04:d9:e5:f7:
7f:02:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:08:30 2025 by rpki-client