Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: xUwV6ygYDGl7hZZlGLCOCTQ2lN0HEJhSMv6X1nmYwNc=
Subject key identifier: 50:27:5D:70:1D:4D:0C:47:27:87:51:91:9D:1D:05:9E:CE:FD:F3:61
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 0196B77E9C0EA5E084177FB8AF1F43619940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 0292
Signing time: Sat 10 May 2025 00:00:49 +0000
Manifest this update: Sat 10 May 2025 00:00:49 +0000
Manifest next update: Sun 11 May 2025 00:00:49 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: /g8wf9t5fzZYla6241QfqvWSOCuo07MM7opt31yhXOc=)
2: TfZHjmYknRwU6ErUe_wYUlK2dPk.roa (hash: c7WP6wJfnnCXs2t+4y61hzS0o/WHpIcUL2rUoYBlMZ4=)
3: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (hash: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:9c:0e:a5:e0:84:17:7f:b8:af:1f:43:61:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: May 10 00:00:49 2025 GMT
Not After : May 11 00:00:49 2025 GMT
Subject: CN=50275d701d4d0c47278751919d1d059ecefdf361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:60:9f:bd:10:0c:b9:b9:b0:75:45:a2:91:
46:cd:e5:38:43:41:3e:40:92:63:98:a6:67:c5:9f:
ca:3e:da:82:60:a7:72:b1:d1:0b:af:18:41:46:3a:
8c:e9:2e:01:df:c3:55:76:92:76:3f:89:f0:b0:16:
d7:6b:13:9c:f1:71:73:7c:dc:ce:79:57:a1:e0:96:
a6:88:06:a9:32:5d:05:ec:04:85:ca:d7:2e:71:9a:
b6:54:5e:6b:51:59:17:44:5b:40:50:50:19:36:e4:
55:39:b9:6b:95:8a:9f:22:19:1c:82:d8:ed:1f:06:
a2:f4:bf:0d:f3:78:24:d0:bb:af:97:f6:84:98:37:
12:55:4a:75:d3:9a:80:6e:11:41:72:87:b8:f5:75:
56:b3:2c:ce:d3:6f:8c:f0:df:a9:ad:8f:22:cd:2b:
37:fc:6e:e9:bb:ab:76:b2:33:42:ea:fd:21:dc:e5:
f1:91:3b:e7:ca:18:36:60:ee:4f:a7:97:53:09:98:
cb:eb:f2:a3:bd:5a:ea:bc:e0:20:36:33:6c:65:4c:
dc:ff:44:ac:53:91:b3:4b:c7:2c:28:f5:ff:bc:41:
72:fe:60:38:cd:db:43:ee:67:1e:08:10:2c:11:7d:
12:c1:32:79:22:94:12:1e:34:66:1f:a8:52:96:d3:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:27:5D:70:1D:4D:0C:47:27:87:51:91:9D:1D:05:9E:CE:FD:F3:61
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:98:08:4f:60:f3:1d:55:13:07:1b:00:20:40:c1:3e:ac:9c:
6f:03:12:70:3c:8e:43:89:05:41:d4:38:38:70:d0:10:6e:4e:
05:df:a1:99:0f:1a:b3:87:e9:a8:b0:32:db:94:eb:29:92:72:
ff:56:5e:82:2d:08:85:c3:aa:fb:ac:f4:60:37:74:0c:44:fd:
af:a3:59:be:6d:24:22:81:fa:0f:2f:88:1e:e1:5e:ef:15:26:
29:ae:41:7e:31:96:22:04:6a:07:5d:fd:b8:68:8a:9f:07:a4:
35:b6:9a:84:21:0b:98:72:6e:4b:c1:fa:d3:60:69:83:49:af:
de:d4:53:d6:98:97:66:60:22:d3:ed:9d:5e:90:32:19:aa:14:
7d:cd:f1:20:94:b7:94:68:74:f1:e9:d0:c7:b1:71:de:71:c5:
10:95:5c:52:1c:09:bc:e9:fe:82:6a:1c:a2:b0:9d:ac:ea:95:
ab:7c:db:13:f3:94:ee:74:ea:ba:bf:31:c0:14:7e:c7:78:a9:
4b:ed:6d:cf:e3:ce:bf:fb:1a:3a:72:4e:46:7b:4d:df:77:57:
3a:94:63:28:87:27:ed:23:4f:2d:bc:85:78:c0:82:a0:6a:fa:
a9:39:82:01:c3:65:ea:96:f4:6d:75:2d:25:3f:97:a4:cc:78:
38:d2:3d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:35:01 2025 by rpki-client