Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: HS/eeR9DMmdCjsM/NFY24AkNnIZz/T+D/SomoIhFVS0=
Subject key identifier: 0A:43:50:98:FA:44:BB:6B:2B:44:02:05:E8:FB:35:39:1A:80:D5:8C
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 0196BB920702BA06539430E4008A853F4287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 02DF
Signing time: Sat 10 May 2025 19:00:31 +0000
Manifest this update: Sat 10 May 2025 19:00:31 +0000
Manifest next update: Sun 11 May 2025 19:00:31 +0000
Files and hashes: 1: Fc-IaUdYzYO5dqZAUEbmajEzC6Q.roa (hash: X8wYVxwVSi64eSBFgWeo409dfz2ei02HOXjRq1htjB0=)
2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: xSVHy63LCsBJLDFYeE5j7xmibNKq9LmP5Gfhz9GeuEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:07:02:ba:06:53:94:30:e4:00:8a:85:3f:42:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: May 10 19:00:31 2025 GMT
Not After : May 11 19:00:31 2025 GMT
Subject: CN=0a435098fa44bb6b2b440205e8fb35391a80d58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:03:c6:64:93:fb:b8:5b:ad:87:9c:36:d8:
3c:e0:fa:61:4a:73:86:e3:b3:8d:54:e2:e0:2e:f8:
fa:e3:f5:c0:16:05:20:a1:9a:db:e4:df:76:4b:73:
58:c6:3c:f0:f4:68:f3:e1:a3:3d:b1:34:6b:fa:0f:
0e:8b:11:1b:4f:67:20:44:a1:bb:b8:bf:e1:17:fd:
b5:84:fd:8e:31:b2:c2:14:bd:32:c0:5f:54:69:e9:
79:be:85:6e:a2:e5:97:a7:9e:a1:80:35:c4:43:f7:
a8:f5:13:fa:d1:3b:29:1e:26:25:e0:10:9e:95:16:
aa:59:0f:54:a8:56:28:30:1e:e0:68:62:71:09:7a:
15:be:b5:cf:ba:78:bb:ed:a8:fe:38:ec:9a:4a:5d:
44:df:d4:ad:0b:fc:f7:9b:f0:bf:91:66:f6:d9:27:
7d:5d:4e:b2:59:40:61:fc:43:96:0f:45:8e:2f:df:
4d:28:41:46:f6:dc:0e:91:48:30:91:65:8b:3d:61:
55:a3:31:22:8c:fe:b2:29:2d:3e:df:2f:5b:96:91:
a0:5c:d0:8c:ba:ce:3d:6c:4e:b4:85:2a:ee:45:c8:
d5:05:ca:a9:a5:71:3f:48:c7:d5:95:19:b1:0f:f8:
3f:25:5c:30:b8:8b:01:b5:d7:ab:7e:a3:71:91:0b:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:43:50:98:FA:44:BB:6B:2B:44:02:05:E8:FB:35:39:1A:80:D5:8C
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:da:dc:9d:d0:21:9c:d4:a7:70:00:58:b2:35:8b:57:af:4c:
a1:fa:6a:76:73:e2:85:da:23:df:51:8a:a4:bd:2d:eb:2c:cc:
da:35:d7:06:4b:be:d6:34:a2:ea:64:a8:58:9a:52:0b:25:34:
d8:4c:6b:60:cb:bd:4d:b9:6a:87:73:86:8f:9c:71:c4:26:8a:
66:8b:af:33:bd:b3:8c:e3:9e:32:2c:5a:2f:73:7a:7a:ef:2a:
b1:72:f2:4a:a7:d3:31:3f:4e:ab:89:50:de:00:46:27:15:cb:
24:55:6f:aa:60:48:dd:d8:f4:da:8e:cd:c2:dd:6e:4e:14:4c:
55:75:dd:7b:4a:f5:4e:69:26:96:e6:fc:c9:ca:01:2e:54:7f:
2a:49:4c:5b:a1:cd:60:55:50:f3:64:34:1a:37:5f:1d:9d:e1:
bd:99:9c:05:80:a6:69:a8:8c:a3:d7:72:26:a4:d3:dd:59:89:
44:6b:a4:84:d6:18:8a:c7:12:45:bc:25:9a:6e:31:9a:96:f1:
92:3c:d9:36:e7:f9:d6:8d:2c:c3:c8:1f:2f:06:47:03:26:76:
86:c3:4b:ec:eb:83:e2:5d:ed:e6:9a:64:73:04:9c:07:f3:9c:
3a:b3:3e:7c:e9:0e:9a:2b:c4:55:aa:78:e5:41:66:47:44:b8:
9d:7b:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:09:12 2025 by rpki-client