Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: qZYV2b5NpJsfqr7eiOuoIp7D+1SmGbwktCPwZ/b4+LY=
Subject key identifier: F0:BA:44:29:29:EE:F0:9B:58:E3:8D:96:65:C8:EA:CF:0F:98:09:44
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 0196C3F0CE3244D5638903584136B16799D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 0F20
Signing time: Mon 12 May 2025 10:01:00 +0000
Manifest this update: Mon 12 May 2025 10:01:00 +0000
Manifest next update: Tue 13 May 2025 10:01:00 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: Us0uTSIrH4aWFiqy4dy3TPQLYLDkDFJd/3OSr6cy9dc=)
2: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=)
3: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=)
4: qjem72uO7DgkEP8SDk6XnjOnFt8.roa (hash: oYe+IghrANew49oUvqDKOy68qs0Z1UKOAqVvGxaiu7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:ce:32:44:d5:63:89:03:58:41:36:b1:67:99:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: May 12 10:01:00 2025 GMT
Not After : May 13 10:01:00 2025 GMT
Subject: CN=f0ba442929eef09b58e38d9665c8eacf0f980944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:92:3e:07:e3:16:26:d0:59:49:2e:f1:e5:f7:
3b:47:46:18:bd:d1:e8:3a:a4:d1:1b:5c:3a:e7:14:
6f:3a:9a:bc:a3:9c:13:5c:f7:85:ce:dc:d0:07:df:
9c:74:c4:cd:30:c6:f4:4d:31:04:5c:58:e0:77:31:
49:6a:9c:44:75:c0:63:01:ae:21:83:02:33:2a:b4:
10:71:8c:37:88:fb:38:a3:e4:83:02:cb:d3:76:3c:
ec:77:9c:6b:6c:7a:ec:de:c5:f5:84:59:c5:bd:6b:
7c:c2:77:50:a5:23:ca:29:4e:47:0a:96:1a:95:cf:
2e:a2:c1:b1:80:1e:1f:09:01:ad:63:0d:1d:7e:ea:
68:1a:6b:14:48:e8:f7:0f:02:65:58:e9:b9:ee:4b:
b8:d1:e0:01:1a:f4:e8:49:d9:e5:5d:17:d3:30:f4:
79:87:51:85:e5:a3:f6:8f:8a:00:53:72:55:10:64:
78:f7:d2:4a:01:c5:51:80:2a:31:15:21:d9:d7:ad:
b8:46:dd:8a:c5:53:ab:23:89:ce:89:e3:ec:2d:3b:
d6:ac:52:aa:8e:40:71:3d:68:65:99:18:b1:c2:b1:
8a:1f:33:e2:eb:98:45:d0:6a:ab:63:5c:9d:57:11:
af:fe:13:c8:68:01:b9:6f:10:64:47:98:5a:f0:c3:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BA:44:29:29:EE:F0:9B:58:E3:8D:96:65:C8:EA:CF:0F:98:09:44
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2e:9e:3c:09:e6:94:0e:b8:89:bb:c1:88:d8:97:cc:22:0b:
88:3c:95:23:bd:c3:4a:c1:e9:06:41:01:a5:03:83:87:1c:14:
8e:cf:cc:bf:5e:31:e3:bc:a4:a1:00:05:d9:61:1b:06:d8:c0:
b9:ca:49:ac:32:f1:2e:2b:cb:5f:48:e0:a7:cf:39:70:32:1e:
33:ff:8e:33:51:b9:75:0b:0c:0f:58:b5:0f:58:3b:bb:55:16:
71:b6:c0:64:e8:f2:ba:00:d9:c6:9a:07:e7:0a:08:7b:fa:cf:
12:81:b6:1e:2f:3d:09:30:49:23:bd:5e:41:9d:41:5b:e6:65:
06:5e:04:8e:43:1f:17:63:14:4f:c1:6b:d4:91:48:c9:a1:c3:
78:dd:07:96:ea:1f:4f:70:9e:f9:e2:a3:b7:1f:ea:7a:a3:06:
cc:46:de:ed:df:8d:09:5f:9d:d6:85:49:97:dc:a7:4b:db:85:
e5:a7:39:8a:13:94:7a:63:09:4b:c0:b0:13:36:7f:ab:39:5e:
af:28:7c:31:22:fe:54:4e:58:55:e3:ab:e0:d1:88:04:f5:e8:
28:fa:95:f1:ea:5d:7c:b2:b7:b3:ee:a8:ad:d4:6f:aa:0a:14:
10:bb:06:89:cd:ea:75:df:e1:89:82:4c:58:9a:e9:c5:59:79:
3f:86:92:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:39:42 2025 by rpki-client