Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier: FMkD8pEXhUJwS2qHrIAMqfY1wTf/1ZZc7YFcTMEkd6w=
Subject key identifier: 89:56:AC:0E:C4:8B:80:6D:D3:94:9C:36:1E:88:AA:1B:36:20:71:46
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 0196BD129714F170E811983B7B142171B922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number: 1368
Signing time: Sun 11 May 2025 02:00:34 +0000
Manifest this update: Sun 11 May 2025 02:00:34 +0000
Manifest next update: Mon 12 May 2025 02:00:34 +0000
Files and hashes: 1: d1cUGJ6v4aRMFVJ8jR6zf61KUZo.roa (hash: w1Q0yU0/JMksdYl+XzfFqraLhxZYw0tN1TBkWQdYmYc=)
2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: snhGMADJIP7nKqzKrmqoEx/xOEztWshXABz6eq9bLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:97:14:f1:70:e8:11:98:3b:7b:14:21:71:b9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: May 11 02:00:34 2025 GMT
Not After : May 12 02:00:34 2025 GMT
Subject: CN=8956ac0ec48b806dd3949c361e88aa1b36207146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:dc:63:c4:de:42:66:c7:87:50:97:27:77:
e4:de:0f:b2:81:a0:02:b6:14:ea:46:25:e9:26:93:
ca:be:0c:ba:1e:13:93:71:6d:3d:0c:16:92:c5:b0:
1e:db:df:cf:37:ec:45:2b:97:ec:b7:8c:ce:56:ac:
55:6a:15:e6:c9:6f:6f:e8:74:d0:cb:35:04:bc:78:
e3:8d:35:0a:0e:14:8a:88:25:bc:d4:1e:02:d9:10:
cb:52:8d:27:ea:fa:8f:ba:4e:d9:77:bb:1c:74:5b:
e1:fb:c5:4e:e1:fb:4b:3c:75:68:aa:83:9b:bb:f5:
4b:37:50:f4:b7:af:df:3f:d6:40:01:08:02:5c:8a:
b9:30:6b:c2:08:a6:2e:da:ec:a6:87:c3:c1:9b:fc:
70:09:32:7a:72:03:91:04:97:95:ea:a3:c6:b6:07:
fe:ab:17:35:d8:48:8f:e4:73:d9:4c:c2:5d:4b:17:
67:b7:13:9c:04:e4:c4:75:47:be:74:28:ef:ab:3f:
25:3b:c9:32:be:af:40:22:70:3d:75:47:b4:ef:51:
37:43:be:2f:c7:af:6a:c1:ee:32:79:de:3a:da:07:
9e:1b:9a:44:bf:ba:9b:58:6c:6b:ef:99:b9:6a:ea:
47:e4:d5:fd:44:ce:a6:7c:1a:01:c4:e7:2e:8d:63:
fd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:56:AC:0E:C4:8B:80:6D:D3:94:9C:36:1E:88:AA:1B:36:20:71:46
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a6:67:41:b1:f9:d5:39:48:7c:1a:43:85:9a:81:b1:8b:aa:
a5:ee:c6:60:b3:42:98:76:20:cb:f0:cc:e2:bf:f4:8d:96:6f:
f6:d0:89:05:1d:aa:a3:1f:1e:41:44:c5:20:17:11:81:4f:be:
40:4c:52:ec:69:d4:29:3d:48:a3:ae:e8:44:97:bd:a8:40:b0:
0f:b4:c5:71:44:75:5f:ad:69:4f:64:59:de:7d:c3:c3:63:93:
d1:25:a2:da:fa:ed:a5:f8:a1:76:98:97:03:ea:f0:0d:03:99:
51:ff:43:ca:8f:93:ce:bd:04:48:27:c7:30:0d:6b:05:c1:43:
12:77:46:7b:27:f9:91:93:0a:a4:3b:92:a5:bd:66:22:1b:74:
81:51:07:91:0d:13:ae:81:06:25:ae:41:6b:c7:c5:60:13:fd:
72:7a:ce:8c:5d:07:ec:bd:cc:53:87:6f:95:eb:7e:8c:2e:d2:
9a:9f:e0:c8:a0:e4:8b:32:b7:56:9f:3e:17:6f:bf:15:35:25:
a7:0f:58:63:36:97:96:f9:9a:17:21:88:9e:9e:89:15:cc:ce:
8d:2d:7e:64:84:60:8f:da:c2:c7:e3:f0:ed:1d:ff:be:99:d2:
f7:bf:ca:98:36:90:bc:a8:72:77:6b:1c:63:80:35:5f:42:b3:
8c:c7:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:22:36 2025 by rpki-client