Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
File: _u3yFAZ0rm_z5GRWDElWq24hre4.mft (raw, json)
Hash identifier: 1hl310IMnT+4lq6Q1xJM9okD4UfkuvUv6GrPWiva2nU=
Subject key identifier: 5F:58:EA:93:DD:8B:38:13:A6:F4:BB:00:D7:A4:CD:21:69:23:B2:32
Authority key identifier: FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
Certificate issuer: /CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Certificate serial: 01969039DD415DE07724F07D1A40FB83F89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
Manifest number: 0967
Signing time: Fri 02 May 2025 09:00:33 +0000
Manifest this update: Fri 02 May 2025 09:00:33 +0000
Manifest next update: Sat 03 May 2025 09:00:33 +0000
Files and hashes: 1: M58q90VZFeP3jvyPYnq7UDFhR3E.roa (hash: pfDDAToaRStBIBYW01WrjbiSm0zCrXjT/V6YwQttWeY=)
2: _u3yFAZ0rm_z5GRWDElWq24hre4.crl (hash: Or5d7l6nMbNps4dekqzddBWl4KXo1cbcusDG1/xOoKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:39:dd:41:5d:e0:77:24:f0:7d:1a:40:fb:83:f8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Validity
Not Before: May 2 09:00:33 2025 GMT
Not After : May 3 09:00:33 2025 GMT
Subject: CN=5f58ea93dd8b3813a6f4bb00d7a4cd216923b232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b5:5f:b4:d8:2c:7c:c1:d7:c5:36:5d:b8:f1:
ed:43:bc:81:ed:a8:63:2f:f1:6f:85:09:e8:e7:c1:
99:b1:05:de:5c:3f:6e:83:26:7f:f1:ce:4f:fd:d7:
93:2a:e5:08:8a:07:4c:5a:4d:f6:ed:1a:96:13:0a:
5d:33:ee:10:f2:7e:af:c9:24:57:f2:fb:ea:fa:ae:
cf:8a:82:f5:fd:bc:f6:fc:dc:93:d5:a2:e7:f9:69:
6b:51:6e:13:95:eb:51:32:83:30:6b:e6:e8:83:d9:
36:ab:0e:71:08:97:f7:64:2a:f1:a3:10:38:9c:54:
f5:f2:c7:24:d2:46:db:3e:80:42:f9:d7:49:3b:19:
3c:15:ba:47:0d:ed:8d:94:5e:64:5d:eb:63:cf:72:
13:b1:89:1c:47:be:af:08:42:ec:c1:ff:2f:4f:4c:
95:44:05:87:ab:eb:e7:26:55:1e:93:79:c1:fb:65:
db:e0:e3:07:fd:e9:f3:cc:ab:a1:07:30:a5:af:6c:
2d:97:fc:ea:64:68:ee:db:f9:9e:10:3f:43:a4:ff:
05:da:21:3a:98:01:6d:7f:20:1c:4b:62:4c:23:1a:
3c:2a:99:01:cf:c0:90:03:e4:16:00:3a:1e:55:ff:
7b:8b:7c:a2:6f:2c:7a:a3:33:92:86:9e:44:b4:96:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:58:EA:93:DD:8B:38:13:A6:F4:BB:00:D7:A4:CD:21:69:23:B2:32
X509v3 Authority Key Identifier:
keyid:FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:05:e8:84:68:04:ef:37:c7:54:40:7b:20:d0:b3:54:79:f6:
8c:10:16:ff:ed:c8:cf:e9:18:51:b4:78:07:b5:8c:21:34:d5:
dd:4d:40:18:2e:f0:43:9d:32:05:fd:b0:39:05:d2:25:d7:ac:
50:dc:aa:41:43:f5:37:8a:77:e2:6f:d6:30:3d:02:19:a7:5a:
8f:e6:22:f3:8e:ab:14:2d:7f:9b:65:1a:fd:ad:40:31:09:58:
83:04:37:95:cf:88:00:39:af:a2:d5:ac:61:d7:c2:f3:53:50:
5b:a4:1c:8f:ff:cf:85:05:f0:5e:8c:4b:74:36:a3:51:a4:3a:
51:bc:c7:40:35:81:7f:a0:36:25:61:26:a4:ed:80:ed:20:25:
84:2e:3b:8f:47:e7:0c:62:f2:61:ec:61:20:0c:80:b1:ba:d4:
e8:ab:53:c3:bc:ea:11:d6:56:56:17:59:a5:39:ad:5d:d0:d8:
6f:b5:5f:48:40:29:80:c4:08:57:e7:0f:6a:cd:0d:0e:01:ca:
34:b0:7e:f1:b3:f5:e1:49:e2:9f:17:77:cd:64:b8:47:80:a2:
f4:e1:9d:15:c6:f2:90:86:4b:d9:31:f6:31:d9:63:20:93:b8:
ff:0b:c9:46:8c:19:e1:25:3b:a6:88:3c:34:c9:5a:54:85:f1:
77:05:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:15:57 2025 by rpki-client