Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: UhppLcRtJ0TRPssi6Y4PKDGkFk+ZbGP+GN2MKcQi6cw=
Subject key identifier: F9:32:BF:E2:82:6D:42:3E:60:50:84:C9:59:5E:89:F6:4D:01:E5:D1
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 01968A6F0B03B9DBAC96B7631CC3B3A01ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 133C
Signing time: Thu 01 May 2025 06:00:55 +0000
Manifest this update: Thu 01 May 2025 06:00:55 +0000
Manifest next update: Fri 02 May 2025 06:00:55 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: mnE/AjA7Ld6AgJhQ/yVAy17L7JDCM63u4EdkkmDAbqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6f:0b:03:b9:db:ac:96:b7:63:1c:c3:b3:a0:1e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: May 1 06:00:55 2025 GMT
Not After : May 2 06:00:55 2025 GMT
Subject: CN=f932bfe2826d423e605084c9595e89f64d01e5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:e0:b8:c5:39:ff:9d:62:84:3d:6a:ec:0c:
40:cf:28:3b:1e:90:96:63:a2:58:ca:e8:f6:1e:6e:
04:8f:2f:1c:ef:27:f0:88:be:d8:eb:3b:ac:40:75:
0d:57:56:77:ed:34:b3:89:87:71:57:1a:b8:7a:5b:
b6:ab:2a:74:3e:17:2e:d1:ba:5b:30:ff:ed:13:17:
ba:05:4a:07:8b:42:eb:fe:97:cb:71:24:d2:d6:db:
58:19:aa:48:6e:74:50:e6:30:09:0a:1e:6e:f7:48:
ed:a6:7b:d1:33:76:52:67:38:e8:2d:a7:40:8c:ed:
89:74:41:f9:7a:77:93:16:f8:b0:31:55:03:10:93:
c9:b9:a7:0f:37:7a:f9:92:bc:a7:d3:fa:0d:0f:f2:
52:82:b4:d1:79:19:e1:3e:a5:c6:d3:3a:02:af:da:
06:34:c2:a6:89:3d:3f:c2:bd:04:8b:ee:d3:0e:39:
67:c0:3e:7c:de:c9:96:49:dd:94:99:dc:fc:77:a7:
9c:6a:f6:c3:2e:e2:89:e6:39:56:58:54:85:94:2f:
f9:9b:65:a5:08:3c:4c:ea:88:9b:f6:20:5b:30:e2:
84:f4:5a:dd:74:2f:55:d0:82:fa:b1:5b:15:a2:d2:
04:d7:bf:35:73:e3:b2:22:e5:03:27:f0:91:ec:26:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:32:BF:E2:82:6D:42:3E:60:50:84:C9:59:5E:89:F6:4D:01:E5:D1
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:14:93:5a:d7:64:17:cb:11:a9:9d:5d:c9:5c:20:40:0c:8b:
84:ee:95:54:51:66:ee:2c:1f:9e:c2:91:77:82:d3:11:2d:35:
41:6d:60:36:a6:f7:48:ce:89:d8:25:43:ec:a3:4e:2b:3c:e9:
31:54:b2:6a:b3:2a:35:b0:27:db:f0:ec:bb:21:33:76:97:d7:
22:60:59:a4:3d:bb:87:61:26:97:01:0f:2e:4f:cc:af:98:72:
6c:6b:fe:e4:8a:bb:c3:68:a6:46:bc:6a:3e:e8:58:5a:6a:e5:
42:b0:11:2e:48:ca:eb:43:ce:da:69:73:28:7a:90:94:3e:9d:
cb:12:eb:cb:0b:b2:2b:0c:4e:02:a2:fc:6e:56:e7:e7:24:db:
a7:c9:af:ac:89:5a:09:43:d0:ac:78:cb:31:02:b9:4c:26:fb:
31:f5:63:0d:cf:0b:0f:2a:c2:ea:1a:ef:b8:5c:e7:59:cf:95:
02:dc:3e:63:59:5b:ae:08:6a:98:1a:9b:3c:60:38:67:a6:2c:
d8:a1:7c:54:3b:51:05:ff:2f:3b:a4:c6:88:72:90:83:23:6a:
0a:1f:91:82:56:80:36:b2:64:39:fe:8c:7a:0d:89:58:b5:8d:
4f:c5:ef:49:c5:37:ef:e2:ef:b3:3f:85:f2:87:d4:86:ca:ac:
74:76:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:11:27 2025 by rpki-client