Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
File: rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json)
Hash identifier: yrEr4Jt/DxXBlbp5Ax48/wXmLnLkzgIDUPmZ13qqHQA=
Subject key identifier: 1A:54:45:32:99:2D:95:08:FB:35:0C:AB:D3:57:CF:14:6F:09:2C:FF
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial: 0196BE5C9B4290EF09495290BCB2D144B6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
Manifest number: 081A
Signing time: Sun 11 May 2025 08:01:02 +0000
Manifest this update: Sun 11 May 2025 08:01:02 +0000
Manifest next update: Mon 12 May 2025 08:01:02 +0000
Files and hashes: 1: KcohbphFnkSf2gxoBmgqyMOKDSE.roa (hash: /zXCNYtomEkl0yxgG+cZiQbxEeQJlGsjs0SY8DMwQ+k=)
2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: w1eolVKRQyzo6ykNwDGoh/kyMo4ZU1hPJLgY7eiT81M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:9b:42:90:ef:09:49:52:90:bc:b2:d1:44:b6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Validity
Not Before: May 11 08:01:02 2025 GMT
Not After : May 12 08:01:02 2025 GMT
Subject: CN=1a544532992d9508fb350cabd357cf146f092cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:15:f6:c4:7b:4a:30:47:ed:f1:24:9d:53:
e2:26:aa:b2:3a:c2:b5:16:3a:01:53:37:6a:5f:17:
3e:1f:9f:2a:c6:20:de:9d:2b:09:70:6b:18:f6:f5:
a1:79:e9:5a:29:cf:96:43:e1:2b:c8:9a:5c:90:57:
c5:f8:7e:ce:44:ba:0e:d8:2c:a6:12:17:00:8c:29:
40:cd:2a:16:f4:02:65:4c:f4:bc:67:6d:4f:b1:1f:
da:3b:e4:07:d6:f0:bb:2a:a2:76:24:a3:db:62:dc:
6f:86:7b:b3:c5:b4:2c:2f:e9:a4:68:97:23:c8:7a:
a6:91:98:c3:80:a3:46:11:e8:d2:1f:8e:df:61:04:
c7:06:a1:9f:57:07:45:0f:bc:81:95:3d:1d:ab:e4:
57:52:44:cd:a9:f2:e2:f3:77:7f:bf:9f:b7:c1:51:
77:c0:61:f9:c9:9f:36:25:fb:5f:fb:18:ce:fd:5a:
df:3d:7c:1d:98:1c:85:d3:57:9b:04:d5:a4:79:e8:
ae:89:e0:d6:c7:f3:70:88:e0:c8:88:14:48:62:9d:
1a:cc:6d:6f:b2:d7:e3:59:e8:99:43:6f:39:5e:7e:
0e:9c:a5:3e:e1:34:93:fc:dd:c4:b2:d4:cd:60:d6:
61:0c:3e:23:71:c8:0d:63:ea:01:89:3c:a2:e3:2f:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:54:45:32:99:2D:95:08:FB:35:0C:AB:D3:57:CF:14:6F:09:2C:FF
X509v3 Authority Key Identifier:
keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:47:60:d6:96:bd:ed:4b:3c:70:ce:3d:7b:41:2f:6d:b0:89:
3a:f7:73:78:60:08:c1:a1:90:9b:90:3a:7c:bf:8d:07:40:1d:
60:8f:4f:f2:4b:f6:9c:f3:10:db:d2:96:19:b6:c2:ef:4d:3e:
a4:c1:5d:af:94:77:f2:3b:99:d6:5d:28:2a:83:52:49:4d:d0:
92:fc:fc:8e:fb:91:6f:76:fb:ac:da:6d:5c:94:8e:1f:aa:a2:
0a:bc:22:5a:4c:26:b5:d2:89:d7:c5:14:dd:b7:03:58:a8:66:
79:e2:cc:26:3d:4f:0b:ce:90:ad:7d:89:48:99:78:a4:8a:0f:
02:3e:b7:dd:56:7f:c2:c6:d3:6d:99:04:9b:08:23:2e:46:06:
45:56:98:b6:6d:d8:81:35:23:89:91:fc:61:ff:4f:43:94:12:
ef:cc:3b:9e:f3:20:43:29:59:13:35:90:5d:22:d5:75:33:f2:
73:ce:8a:01:d5:71:e6:53:a2:d1:68:e4:c2:a1:df:cf:4c:dc:
f6:2f:b8:16:d8:d7:89:b7:04:b1:12:6c:83:63:b3:36:d5:18:
32:6f:20:d8:32:9e:5d:79:3f:42:f3:c9:04:19:02:89:1a:80:
75:5e:69:a7:62:cc:d0:1f:ff:0c:ff:8c:90:0a:f0:3b:77:99:
f8:b2:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:40:20 2025 by rpki-client