Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
File: 309yD7vOaxVdc1fb5xJspWwevnU.mft (raw, json)
Hash identifier: W7bPvkMOGXGtD+lRP9775azguZ8U97UsBRQmebuUrqQ=
Subject key identifier: F4:75:2D:04:6E:2B:9D:8F:D9:96:A6:33:ED:EB:54:C4:D6:0B:75:BF
Authority key identifier: DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
Certificate issuer: /CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Certificate serial: 0196974E44A9760283BA987BEAC7E6E15DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
Manifest number: C8
Signing time: Sat 03 May 2025 18:00:11 +0000
Manifest this update: Sat 03 May 2025 18:00:11 +0000
Manifest next update: Sun 04 May 2025 18:00:11 +0000
Files and hashes: 1: 309yD7vOaxVdc1fb5xJspWwevnU.crl (hash: CFM6VhN+KBVTqvsEdaQnqDJQXde+Lnt27NAY1zgSuPg=)
2: m-RbidkNWQkN01GbFCAQaZKCeHY.roa (hash: rUWJNToLZ6TcfaoQcpJt+6y642guAKwp5vd3Wd/8VLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:4e:44:a9:76:02:83:ba:98:7b:ea:c7:e6:e1:5d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Validity
Not Before: May 3 18:00:11 2025 GMT
Not After : May 4 18:00:11 2025 GMT
Subject: CN=f4752d046e2b9d8fd996a633edeb54c4d60b75bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:70:05:6b:05:99:21:6b:ad:cc:5a:00:0c:
62:82:07:5a:48:00:30:7c:e3:ef:7b:8f:c4:2d:04:
43:7d:da:e5:d5:b7:67:2e:80:d2:7f:aa:cc:e7:d8:
f2:e2:e1:a4:fb:ec:0d:34:29:f1:b2:f1:cd:26:17:
34:81:cd:b9:1e:60:9c:e6:f8:13:81:af:ee:09:6e:
ec:7d:5b:9b:64:35:86:c4:92:3d:d7:48:dd:35:8c:
6a:c3:78:b8:04:cb:bf:ca:b0:31:0e:37:57:e8:30:
85:c9:dd:51:23:11:46:6c:91:87:ad:68:c2:2b:85:
f8:2c:12:64:ae:59:9e:24:38:fd:3d:9d:a6:d9:e4:
6e:3b:89:ac:e0:fd:af:a4:9a:3f:39:8f:b8:c8:29:
91:f4:b1:4c:b4:e0:ae:aa:eb:51:e6:9d:93:03:0b:
c5:15:47:4c:67:e1:40:9a:1b:03:6c:c8:e1:8d:b5:
3b:b2:ed:58:b7:7b:85:d5:4f:fa:39:4a:c2:82:79:
ac:9d:ca:2e:82:51:32:71:43:f9:c4:a1:c4:3a:ec:
b0:9c:18:7f:a9:59:61:3a:cf:4d:b8:38:49:b1:1c:
bc:59:43:a5:cf:4d:c4:b5:9d:93:df:87:21:a6:fb:
c8:1a:39:91:a0:9b:a4:a7:3c:36:1c:8b:95:75:3f:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:75:2D:04:6E:2B:9D:8F:D9:96:A6:33:ED:EB:54:C4:D6:0B:75:BF
X509v3 Authority Key Identifier:
keyid:DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:37:56:d6:5b:0d:6b:13:0e:63:65:ee:6e:69:71:e5:d2:d8:
68:a0:5d:c4:94:2a:76:87:ab:e9:60:f3:9f:b8:36:c4:58:ef:
1a:03:35:80:29:28:9f:4c:59:7c:b6:aa:25:ef:63:7f:1f:32:
da:43:be:dc:c7:8b:d8:1b:c7:f2:a1:b3:cb:df:2b:3b:6b:46:
3a:70:76:a5:71:d7:92:89:c2:2a:c5:1f:f2:b0:5e:90:db:6b:
32:ae:5c:ae:aa:6b:30:59:3d:2f:63:be:6a:36:37:54:f3:98:
7c:a3:39:ad:de:90:80:77:9c:44:a6:2e:18:ff:47:75:15:90:
4e:5d:a2:c7:28:a6:61:01:6a:ae:8a:2d:02:44:58:75:a2:9b:
08:4c:1f:65:6a:07:37:2f:a4:17:52:4f:9e:89:b3:b0:b1:c3:
1e:3f:71:47:63:f3:d9:c9:40:76:fa:73:70:cd:8d:03:ef:fb:
8c:da:1d:49:18:43:a3:d3:08:3d:95:bb:88:e6:c3:8c:fa:f4:
b6:44:d6:22:14:4c:b4:3d:3a:48:5b:7b:92:25:39:02:17:bb:
1b:8b:99:4f:da:89:43:01:9f:d3:e1:cd:02:71:4e:3e:72:df:
b5:2b:3a:2f:fe:b7:54:6a:2e:76:ec:10:5e:14:80:dc:0c:15:
6e:bb:c8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:18:48 2025 by rpki-client