Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: cx96m93yBygTfIHsc9cRybsyN0o886zJpjWh36wHeb4=
Subject key identifier: 76:42:F3:7D:9A:0C:55:F4:06:6D:A8:67:FD:4E:FC:C1:91:34:97:D7
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 0196789FB03FD8254DD0A6A1D2572F9D85F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 0FA7
Signing time: Sun 27 Apr 2025 19:00:53 +0000
Manifest this update: Sun 27 Apr 2025 19:00:53 +0000
Manifest next update: Mon 28 Apr 2025 19:00:53 +0000
Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=)
2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: 1qXdtLvuc6sKwafadheF7lcGJqhRafMb7vz3uRTeU0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:b0:3f:d8:25:4d:d0:a6:a1:d2:57:2f:9d:85:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Apr 27 19:00:53 2025 GMT
Not After : Apr 28 19:00:53 2025 GMT
Subject: CN=7642f37d9a0c55f4066da867fd4efcc1913497d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b6:4c:98:93:1e:54:81:69:90:39:01:5c:7e:
f1:0e:9d:ae:02:81:a2:30:74:54:25:f0:e1:f1:79:
18:11:7f:c5:b4:ac:9a:a6:b1:c7:a2:4c:99:bd:b2:
72:52:48:47:2d:c9:cf:3e:cf:43:57:8c:70:9f:b7:
7e:43:e6:f8:b3:93:b8:f1:4d:7f:06:26:f5:28:7e:
8b:aa:1a:3f:3f:b4:ea:c8:5c:99:37:61:c8:7c:7e:
73:ba:1a:aa:e3:88:03:57:c0:e7:41:23:81:93:32:
18:08:43:3b:f1:79:a0:c9:78:ec:13:ef:8d:60:9f:
ce:1c:c9:f5:70:ba:88:8d:39:d9:78:a5:0e:0a:71:
7b:f9:d9:0f:6d:12:2b:0c:60:f9:3d:58:6f:24:0a:
5f:fc:fa:2a:3a:d4:3e:da:97:7c:c2:69:be:1b:3a:
e3:1e:4d:0d:09:0e:b3:9e:64:a1:d6:8f:63:88:72:
09:2e:b3:a6:73:b8:11:c0:da:8a:0d:3b:59:67:fc:
9f:55:a0:a9:d9:77:f9:33:dc:6c:b5:b4:3d:52:90:
f5:df:10:2c:9b:16:74:74:94:70:e5:5f:46:82:9a:
19:32:40:da:8c:20:71:a4:a7:32:31:79:0a:72:ce:
f4:95:f1:5c:df:dc:8d:6a:1d:b4:4e:79:2a:de:31:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:42:F3:7D:9A:0C:55:F4:06:6D:A8:67:FD:4E:FC:C1:91:34:97:D7
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:87:d9:d5:12:8b:d8:67:a5:34:03:14:c4:29:96:24:24:c2:
96:b5:d2:eb:73:f9:78:9b:64:45:e7:30:ab:2e:45:42:91:a1:
bc:10:c3:bf:5f:03:4f:b7:ff:bb:5c:b0:d9:b3:f7:20:7d:92:
b5:8a:af:26:32:fd:6d:42:d1:c1:cb:51:57:b8:0e:31:54:34:
e2:8f:9a:36:54:d3:34:04:69:d4:9f:12:5b:f0:d0:21:b6:22:
34:11:fc:e2:91:08:60:b0:53:96:f1:4a:03:d9:95:4a:3a:5b:
88:af:3c:c3:c9:0a:c1:2b:e6:5e:0a:e4:fc:7f:e3:5a:07:d1:
f1:b7:8e:26:e3:07:97:01:ed:47:62:8c:b1:08:b8:29:57:96:
00:f7:56:1e:25:df:d0:d2:78:f5:cc:61:0a:90:73:b9:aa:74:
a7:ef:8b:01:fd:bd:f9:1e:3c:06:af:9e:96:1d:23:95:78:a1:
62:c4:37:2e:f5:06:f0:33:d5:af:29:d2:f2:1e:87:83:84:d9:
1a:8d:b9:75:d4:a6:68:d8:0f:28:9f:92:d5:71:ca:51:99:7d:
a7:a7:78:68:6c:88:bc:a6:a4:a8:4d:85:c8:9c:66:04:82:da:
f4:7e:6f:20:91:24:48:77:f0:c1:71:ec:33:62:e5:4d:73:9d:
f9:ea:6f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:13:56 2025 by rpki-client