Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier: fNLDcrwfd1boMvwgca/gIHG/9s49lAJKxkRssbgqWwU=
Subject key identifier: FA:B7:E4:B4:AE:CF:11:7C:0B:E7:76:2C:F6:CC:7A:0A:77:12:D9:04
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial: 0196895CEE2EC60D0E8DFBDC1596B45D2C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 01:01:30 +0000
Manifest this update: Thu 01 May 2025 01:01:30 +0000
Manifest next update: Fri 02 May 2025 01:01:30 +0000
Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: jFkAsQE75p+KsfyQkgkSv71P0Mcc2/dWc8Q0pTwYHRA=)
2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:ee:2e:c6:0d:0e:8d:fb:dc:15:96:b4:5d:2c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Validity
Not Before: May 1 01:01:30 2025 GMT
Not After : May 2 01:01:30 2025 GMT
Subject: CN=fab7e4b4aecf117c0be7762cf6cc7a0a7712d904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:06:94:78:c8:7a:cb:66:9a:a8:bb:33:79:
48:67:45:a8:9d:74:6b:08:3e:b5:6d:ee:e6:e5:f7:
49:70:c5:fe:59:18:02:a3:f6:09:22:73:2e:11:ee:
03:0c:1d:f3:a6:96:e5:8d:59:de:50:8d:17:9d:db:
5d:36:90:08:cb:a1:64:95:63:74:10:ac:05:e4:b3:
ee:d1:42:b3:25:7e:7f:8a:64:68:d9:02:a0:1e:b3:
8d:f1:95:a4:ab:02:24:3a:03:58:03:c7:86:35:b3:
be:98:31:6f:e7:7f:e9:5b:f3:9a:34:e5:f4:d8:3e:
bd:c3:6b:8f:df:f2:db:15:37:07:e3:48:4a:50:f3:
2b:93:44:7f:69:75:d1:d6:23:2b:d1:bc:2c:9c:2a:
92:eb:ae:68:b6:04:1b:2f:75:c2:1b:6c:15:f3:51:
94:53:ae:a3:c6:a3:16:fe:14:87:59:a7:93:d4:71:
c9:93:18:4d:94:3d:43:32:77:0d:d4:4c:0d:70:26:
00:01:45:10:34:f5:7b:6b:f7:7a:7d:c9:2f:ac:64:
41:bc:f9:50:67:4d:29:ba:dd:e1:f7:74:87:e9:b7:
83:b2:0e:7b:9d:89:89:92:88:3b:b6:fa:55:31:51:
e2:5f:36:02:e5:6b:5d:28:c9:51:73:df:92:65:3b:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B7:E4:B4:AE:CF:11:7C:0B:E7:76:2C:F6:CC:7A:0A:77:12:D9:04
X509v3 Authority Key Identifier:
keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ad:bd:52:b5:78:e0:51:36:da:0b:97:31:56:04:af:cf:4a:
0b:4f:c5:e6:3b:50:b4:55:cf:a5:5e:68:cf:4d:32:5e:d2:5f:
0a:7c:d0:e9:d0:3f:03:2b:69:f2:a7:bb:1a:f3:d9:80:d1:83:
07:9e:3a:6d:aa:a8:4b:b0:43:77:43:74:fd:a1:07:0c:d5:22:
22:3e:a3:ad:6b:2c:b0:ee:ec:82:15:fc:2b:a2:6f:e9:d2:ae:
75:f5:83:64:b8:30:05:a1:e5:20:8e:4b:65:ba:93:46:1c:cd:
4f:89:01:d5:cf:c8:7e:84:e0:9a:c1:60:a6:98:27:20:d4:16:
08:ab:d0:d0:2a:d3:9c:1c:ba:e0:6b:47:38:a1:8b:f7:d9:d5:
b2:3f:57:20:93:f4:34:fb:3d:82:0d:4d:56:c5:d7:de:43:87:
a5:2e:81:c4:e9:70:86:b9:73:f7:eb:4f:a5:f9:14:2d:31:9d:
cd:3d:d7:3b:0a:32:82:6c:54:67:86:56:66:7f:6d:d2:68:5e:
ca:e3:a7:59:90:31:1a:9c:3d:f9:17:bc:8b:ff:4e:49:8b:a1:
26:10:d3:7c:10:64:e2:16:bb:58:85:40:14:2a:7b:b7:d4:a2:
ce:d0:da:b3:88:16:44:a1:d4:46:d6:53:9e:47:3c:a4:ff:6f:
f5:e6:00:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:24:34 2025 by rpki-client