Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: zZUFJbpMuIGuUIizE2YFQ8jrowCHYt6GK3WO/8qwgkg=
Subject key identifier: 40:7E:52:67:EB:0F:9A:E4:CE:9F:EF:D6:B4:7D:FA:23:70:D1:9A:9F
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 0196A353013A07A38F9361048739A0C5A604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 0CAF
Signing time: Tue 06 May 2025 02:00:48 +0000
Manifest this update: Tue 06 May 2025 02:00:48 +0000
Manifest next update: Wed 07 May 2025 02:00:48 +0000
Files and hashes: 1: DYV8rTZS8uCurZHOoqW-jfWMmWg.roa (hash: oTQ/SBogFSvxJCfk7V0vkU2XYqnVHjZNfcn9byEW2aE=)
2: LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa (hash: lEUkgsAO72uMMjQemqqZ36mEX8JKjX4GaMbgSM4hzTI=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: SdgyEzsTBc+cmPnB7dZhRnmRDA33sofeMK/LIgwdPhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:53:01:3a:07:a3:8f:93:61:04:87:39:a0:c5:a6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: May 6 02:00:48 2025 GMT
Not After : May 7 02:00:48 2025 GMT
Subject: CN=407e5267eb0f9ae4ce9fefd6b47dfa2370d19a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:44:1e:38:73:7e:53:08:e8:f2:64:21:b2:c2:
8b:05:a7:3b:85:0d:c9:7e:15:9a:29:cf:56:37:e0:
4d:fa:d1:eb:bb:92:34:e0:96:82:cc:72:3b:db:f3:
9e:e2:f1:14:3d:ff:5f:5e:2f:d3:d9:f3:c2:26:be:
46:3b:95:4d:4a:25:7c:09:a4:d7:0e:12:40:55:4b:
11:19:d0:9b:f6:c0:18:67:31:df:cd:b5:ef:31:c2:
0b:4d:81:25:43:65:ca:45:95:74:a1:67:9b:53:b2:
bc:57:f2:8d:a5:1e:37:83:7d:e6:1f:e7:13:c9:50:
cb:2b:bb:ff:23:5b:fc:73:f1:26:04:ef:82:5b:7d:
83:28:a9:93:40:f8:63:4f:b9:c2:20:c0:80:3c:62:
ed:20:93:61:76:f7:85:39:b5:a1:cf:03:c8:4f:8c:
70:09:6c:ca:87:2c:7c:50:5d:cd:05:95:1b:a6:eb:
1f:6e:20:5e:b3:c5:a4:66:83:4e:2e:b4:df:24:fd:
45:f4:ee:f0:d3:cc:f0:5a:95:3f:12:f8:0a:51:49:
8e:54:f0:7c:84:7c:26:e2:8d:1e:7b:c7:3a:4f:57:
33:5a:30:89:a2:26:f9:fe:3f:ad:e3:b4:12:7c:6f:
f1:ca:1a:a2:88:1f:7b:f4:06:fb:9d:b8:0f:32:40:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7E:52:67:EB:0F:9A:E4:CE:9F:EF:D6:B4:7D:FA:23:70:D1:9A:9F
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:39:12:d8:20:45:c1:19:28:00:da:4b:34:75:2f:36:33:f3:
9d:5e:8b:47:0d:c0:ae:2b:e9:3f:0b:52:94:b5:32:7f:23:ec:
88:98:d1:f5:23:ef:6d:d9:0b:3a:3c:a2:65:d0:0e:74:95:df:
5c:96:39:de:49:8c:91:f1:8c:20:ab:79:9f:01:13:05:3c:40:
b5:bc:3d:42:59:71:e3:25:a2:4b:7b:e6:f1:86:89:72:3f:58:
a6:c5:80:1f:76:f3:8d:5b:06:41:d6:d2:9e:8d:15:87:bd:dc:
da:4f:69:03:0c:f1:80:44:f2:17:29:3b:3e:d0:50:f3:33:ae:
5e:b3:88:24:22:51:a4:50:28:5e:54:e8:e9:a7:30:7c:e0:1c:
6c:4b:4a:3f:16:1a:24:79:61:34:97:cd:e1:7e:03:9d:23:0a:
37:b7:af:7b:2f:19:e0:47:06:1b:e8:90:c2:4a:ad:d9:9c:73:
04:bd:3d:71:b0:93:d3:c6:3d:3a:38:33:e2:1b:ef:fd:ce:86:
72:60:a2:4c:36:bc:4c:a9:8f:f1:a7:80:1c:83:80:ec:ad:ce:
ac:31:48:17:7b:17:6a:4c:84:f2:83:d1:a7:4d:6c:c0:79:a2:
3d:dd:6c:b3:b3:e3:7a:c3:41:0c:c5:2f:24:5b:f0:9c:35:d6:
63:b5:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:45:22 2025 by rpki-client