Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
File: DdL44N6hOH2vkDXSzfTrjJOticw.mft (raw, json)
Hash identifier: RzoowUVEDeG+eJ+uIXspGvVTPPLyniD+sXlgzLaNVGM=
Subject key identifier: 2B:BD:51:35:F7:F0:9A:94:91:C6:03:A6:F7:40:03:0E:C8:29:63:82
Authority key identifier: 0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
Certificate issuer: /CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Certificate serial: 0196B0D735F1431CFA1362C0D0FB43041ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
Manifest number: 0FE5
Signing time: Thu 08 May 2025 17:00:16 +0000
Manifest this update: Thu 08 May 2025 17:00:16 +0000
Manifest next update: Fri 09 May 2025 17:00:16 +0000
Files and hashes: 1: 5C3OBNWJVX0XYEPy1WMxBH9P3fA.roa (hash: paK6hyOcqXDBN745vkYjBiywiYBVzqMBn2uUtBINBBA=)
2: DdL44N6hOH2vkDXSzfTrjJOticw.crl (hash: xoGC1fVP7zl1eu5kyIXW1KeG/e21DLitFE2OJEESQh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:35:f1:43:1c:fa:13:62:c0:d0:fb:43:04:1e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd2f8e0dea1387daf9035d2cdf4eb8c93ad89cc
Validity
Not Before: May 8 17:00:16 2025 GMT
Not After : May 9 17:00:16 2025 GMT
Subject: CN=2bbd5135f7f09a9491c603a6f740030ec8296382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:c2:35:6d:fc:61:ed:57:5a:11:f7:7e:52:
42:7a:50:12:d8:b0:85:c9:48:82:dd:9f:14:75:96:
d0:15:93:19:09:f4:ca:17:b3:85:00:b1:c4:ec:2a:
d1:fd:6b:82:a8:3b:9e:e9:3f:a5:82:0a:11:8b:22:
af:80:14:9d:ef:4d:87:f4:09:6c:25:d2:90:80:d4:
83:82:e4:69:73:23:30:07:bd:c6:e1:b4:31:09:ff:
dc:f9:7a:a0:25:42:e0:db:66:f2:a9:dc:b5:a0:85:
41:e2:ad:5c:05:98:48:34:ad:61:95:e5:07:cc:bd:
e8:06:e5:66:1b:1e:bc:51:3b:15:3f:84:51:f5:1d:
28:0a:65:54:b3:b6:f7:11:21:ea:84:b3:93:4c:f6:
60:b9:32:ae:5f:2c:54:8b:d5:a4:c5:db:7f:47:9f:
82:60:d8:39:dc:3b:c9:22:3a:c4:b1:0c:c6:ec:11:
93:55:94:45:13:43:72:44:91:5e:54:7d:99:e9:f2:
c9:5f:c8:ad:e4:03:71:99:97:71:a5:ac:88:68:be:
83:87:97:61:eb:06:e7:52:8f:f0:f2:1c:69:cc:75:
28:93:f5:9f:3d:20:37:9b:48:57:f9:df:17:54:d7:
03:38:72:f2:7e:1c:7f:92:e5:08:48:0e:49:ff:0a:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:51:35:F7:F0:9A:94:91:C6:03:A6:F7:40:03:0E:C8:29:63:82
X509v3 Authority Key Identifier:
keyid:0D:D2:F8:E0:DE:A1:38:7D:AF:90:35:D2:CD:F4:EB:8C:93:AD:89:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdL44N6hOH2vkDXSzfTrjJOticw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d3d466-d951-4c52-b330-aa8485cf3068/1/DdL44N6hOH2vkDXSzfTrjJOticw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:80:f4:a6:3f:94:48:c0:15:28:7b:4d:8d:81:7b:f7:13:5f:
ec:be:9d:a3:12:72:d8:c1:10:7f:9d:82:16:c4:13:67:1f:70:
59:20:47:87:5d:da:db:db:74:13:cf:96:69:f4:de:d0:52:06:
0f:d5:2c:24:0e:11:f9:d4:bd:2b:80:82:3e:96:c5:0b:0a:6d:
67:d7:64:1d:cc:f6:cd:90:15:95:f2:e5:30:0b:c0:b8:4d:1e:
0d:28:90:16:34:20:c8:3c:4d:19:9d:d1:65:ba:37:e1:d6:97:
16:6c:5d:92:e7:62:db:d7:58:00:00:65:ba:aa:ac:4f:7b:2a:
1d:9f:35:c8:e0:04:13:30:e3:ca:81:de:fc:37:23:55:c0:c4:
43:a7:13:5d:53:2f:1b:9f:0c:42:2b:81:98:7b:cf:4a:53:0e:
9e:6e:de:77:41:ce:85:4c:1d:fc:52:01:9b:87:a9:99:6c:02:
93:17:5b:68:cd:f3:fd:87:b3:20:2c:05:47:58:b8:f6:21:68:
b2:19:65:da:47:18:f7:a7:39:80:55:01:89:31:58:5d:55:98:
f5:44:ea:e1:65:4c:a2:1d:d6:dc:2b:27:2d:f0:94:12:7b:52:
41:56:cf:6e:c7:64:58:40:01:f3:f2:0b:ce:0f:ca:fe:0a:db:
a9:31:6e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:46:00 2025 by rpki-client