Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: 17yFB2mQUkStXewlzgq7u6dXlIr/a2n14vL/SDGBnKE=
Subject key identifier: 99:D6:54:23:F7:57:2B:F6:4A:30:19:26:4B:B5:4D:72:04:4B:94:F2
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 019685B62F15794BEB161DCF02A40D1652A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 08:00:31 +0000
Manifest this update: Wed 30 Apr 2025 08:00:31 +0000
Manifest next update: Thu 01 May 2025 08:00:31 +0000
Files and hashes: 1: 7rbCLoXWYly-2n7W-2TuSkBBMV8.roa (hash: SrTY3jKnRzrFELEhX/LwQ/2tjPUOB7vnlEoMlBte4mA=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: G8ndwLgG7YpPAPOecrZ7u+0Wg7xKEemD5Ho4icKURzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:2f:15:79:4b:eb:16:1d:cf:02:a4:0d:16:52:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Apr 30 08:00:31 2025 GMT
Not After : May 1 08:00:31 2025 GMT
Subject: CN=99d65423f7572bf64a3019264bb54d72044b94f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:c2:8e:37:dd:bf:f4:a2:44:bd:0f:b3:04:
b3:42:a7:04:7a:d6:b7:2e:04:25:d7:4a:de:bd:b3:
c9:f8:3d:c7:bf:23:be:75:85:5d:75:f1:4e:68:dd:
58:72:37:06:ad:85:40:9c:6d:05:32:b2:a6:67:5f:
9a:21:61:6f:0d:46:e9:a7:33:e3:ef:22:c2:ea:14:
90:07:5f:13:db:cf:25:18:49:9a:c8:6a:d4:25:48:
a8:be:35:f5:f4:d5:6b:cb:70:a5:a4:45:fa:1c:7c:
8f:f6:00:35:7c:80:74:89:52:dd:2f:82:2c:f7:c1:
7a:c8:77:fd:9a:4f:e3:7b:2c:3d:de:aa:0f:60:8c:
4a:b6:ae:6e:02:fd:de:68:75:85:13:c0:92:3f:39:
ab:ea:c2:99:20:b4:e6:d3:e1:06:0f:9d:55:e9:d0:
a4:61:df:81:e0:f0:37:a9:e6:00:f0:14:ea:d9:fc:
4a:2b:d9:c0:5c:e6:0d:06:8f:4e:eb:09:af:b2:4b:
c5:2c:88:a6:74:69:83:a2:06:a7:25:e0:9c:8e:21:
8e:73:b3:d8:0a:90:f5:8c:05:93:67:4c:fd:3b:15:
0d:59:15:86:34:9e:0e:0d:83:fc:17:ec:d2:16:7d:
eb:ad:9a:64:fd:c1:9f:38:17:5d:56:34:db:28:f2:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D6:54:23:F7:57:2B:F6:4A:30:19:26:4B:B5:4D:72:04:4B:94:F2
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:83:e0:67:92:f8:13:bc:7e:59:db:8d:c6:63:12:10:f5:5c:
a1:55:57:53:cd:c3:bb:34:82:31:3b:5d:c2:9f:f1:42:26:0f:
fe:01:b8:c2:5e:fe:5d:34:05:a4:17:01:b5:48:ee:db:5a:a2:
b2:87:4b:ae:09:66:15:55:bc:92:f2:37:bf:01:c0:c9:f4:fa:
f1:ec:5e:59:38:cf:76:30:5e:f0:e7:4e:62:da:11:b0:31:91:
93:73:ee:4b:a2:9f:19:fe:42:1f:ea:35:c6:78:f0:3c:63:2f:
e4:38:a6:e4:7d:22:f7:9b:2e:30:8d:bf:2d:13:f8:05:3e:7b:
21:d6:57:41:14:06:16:e5:2f:c2:6f:e1:c2:16:e6:b8:6d:62:
1a:46:33:ab:e7:64:92:08:be:50:94:c0:f0:d4:9d:2f:80:1e:
37:71:0a:b8:5d:0d:de:53:0a:28:d5:e4:64:ac:ff:46:1d:09:
9e:aa:80:24:a2:90:ff:a2:87:7d:14:d8:94:e2:f1:55:05:34:
23:ef:9b:b9:b4:38:da:e7:8e:12:bd:d7:53:0e:1f:d4:bc:d8:
da:78:d3:b2:14:8d:e9:41:5e:da:55:9c:1a:cf:2e:90:39:f9:
50:65:81:33:f3:c3:c5:5a:80:65:67:4b:38:0a:8b:14:6d:3c:
c7:dd:5f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:16:27 2025 by rpki-client