Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: phiV+zf2PQhZFYeOXWgBs1Tvn51SDbndZU8qBN7oGOw=
Subject key identifier: 40:04:BF:76:59:40:36:72:69:75:8C:57:A0:F3:00:0E:D8:F5:A3:F6
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 01968058E3B5D817446430D58A5A9A48B69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 011C
Signing time: Tue 29 Apr 2025 07:00:31 +0000
Manifest this update: Tue 29 Apr 2025 07:00:31 +0000
Manifest next update: Wed 30 Apr 2025 07:00:31 +0000
Files and hashes: 1: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: Frq1jO0E8T0QExYWS8DYC96l8mNmF/v9A6JDcfNlCHo=)
2: mm8C4Ou63If70LPWFRCmCNEI28c.roa (hash: g2mAP9bfs0Z2vFldLFVJmnHsqx5+Iksx21QgfS4cMys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:e3:b5:d8:17:44:64:30:d5:8a:5a:9a:48:b6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Apr 29 07:00:31 2025 GMT
Not After : Apr 30 07:00:31 2025 GMT
Subject: CN=4004bf765940367269758c57a0f3000ed8f5a3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b4:66:4a:63:de:84:6a:1f:2c:0a:2c:ea:b9:
f9:47:c7:d1:c1:fb:3b:82:43:5b:42:d1:ef:09:0c:
9a:65:8d:68:f2:e1:68:2b:1b:ba:f1:03:30:1e:1f:
de:ce:94:45:72:ba:58:7a:8d:96:a7:d6:05:d1:d5:
0b:2c:03:08:ab:e1:14:4a:33:5a:d4:df:c1:19:fd:
a2:96:da:7e:5a:64:57:7f:ba:31:cf:31:6f:81:00:
65:c9:ef:ad:7f:c5:95:c0:ba:73:33:81:c5:d7:ba:
9a:b6:aa:4b:2b:e9:73:5a:9f:8e:c7:95:70:83:2e:
b6:69:05:0c:d7:b3:d9:f2:3a:1f:87:4b:5e:bd:bf:
7f:39:a9:b1:8c:13:9d:b6:59:f9:bb:e1:c6:eb:17:
cb:e5:68:fe:52:d5:b8:e2:50:77:e7:e5:f5:b9:11:
ab:a6:8b:37:b7:cd:73:48:4d:3a:e5:94:82:77:16:
03:ef:b2:d6:9c:a8:85:f6:53:66:d2:ba:64:e8:1e:
1b:15:ce:4c:27:39:e7:95:0f:81:75:94:97:e2:07:
93:2c:ba:b2:f1:12:ba:63:60:c0:db:df:7e:23:7e:
26:d9:ae:83:a1:24:ca:95:7b:c9:e5:1b:0d:79:8d:
43:2b:55:aa:14:ac:99:a6:db:70:fa:8b:b4:37:01:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:04:BF:76:59:40:36:72:69:75:8C:57:A0:F3:00:0E:D8:F5:A3:F6
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ee:41:a1:ea:d1:25:59:05:82:d6:d6:dd:94:24:69:67:6b:
2c:28:3e:29:9b:2b:a4:5a:55:2b:ae:8e:ec:6f:a0:3c:cb:fb:
3d:85:7b:d3:49:e1:49:27:56:a2:3b:01:ef:6a:bf:f7:9d:9b:
12:fb:5b:cc:d7:1a:fa:6d:83:58:23:9a:1f:fc:84:bb:85:35:
ad:90:83:12:11:22:47:dc:3e:2c:db:b7:c5:34:c6:dc:dd:df:
f4:c6:d7:0a:87:a6:83:00:c8:c4:72:77:c4:fc:f4:70:8e:b5:
04:e5:ea:f7:a7:97:0f:3b:f6:0f:06:c1:af:46:d8:f8:6f:d6:
79:b5:f0:83:1f:c4:f8:f9:cc:79:95:62:37:ea:80:b3:58:30:
71:88:42:69:de:85:ea:24:3f:83:a3:a3:25:c0:67:c1:cb:f4:
3e:47:c7:1d:cf:0e:c8:03:69:bf:b3:df:99:a5:d8:80:d5:ad:
41:3b:63:aa:54:90:d9:c3:19:9d:73:b7:ad:da:93:e1:42:ff:
2e:64:c0:37:a3:74:b0:e7:34:3b:35:53:fe:cb:02:ff:c3:10:
cf:70:5b:c1:8f:c5:57:69:ce:6b:d8:09:63:7c:43:59:f8:df:
e4:c2:91:f1:29:d4:56:b1:aa:a8:81:72:ad:36:07:de:fe:29:
60:13:cb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:22:12 2025 by rpki-client