Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier: dUqGxng+qGu5E3Eoqfs2PbMt7WNJjeiDv2XjzeKGgXs=
Subject key identifier: FA:F3:CE:30:D2:88:07:3F:F1:37:BD:CF:30:3C:7B:9F:6F:4B:6E:BF
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 01968EF0255BDD693A50F2BB1D43E2278B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number: 0EBC
Signing time: Fri 02 May 2025 03:00:24 +0000
Manifest this update: Fri 02 May 2025 03:00:24 +0000
Manifest next update: Sat 03 May 2025 03:00:24 +0000
Files and hashes: 1: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (hash: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=)
2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: jwR8P31QlV8veuJDDDbZOdMA8eZgc0l5c5ucceP6/Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:f0:25:5b:dd:69:3a:50:f2:bb:1d:43:e2:27:8b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: May 2 03:00:24 2025 GMT
Not After : May 3 03:00:24 2025 GMT
Subject: CN=faf3ce30d288073ff137bdcf303c7b9f6f4b6ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:02:e2:7e:87:3d:c0:ca:3b:ca:b8:c0:e2:
07:69:7c:3c:21:59:e7:c5:7e:eb:7d:9a:58:e1:1e:
81:b8:0f:54:d2:3e:1f:74:21:66:77:f1:3a:b3:4a:
bc:a4:75:93:89:31:66:f3:a9:2d:fa:63:6f:39:17:
2b:9c:db:69:15:eb:22:ad:1d:9f:59:b3:b1:1c:47:
f9:c5:41:62:42:5f:db:a4:0f:a4:ff:b3:0b:f9:52:
5d:33:c0:f4:4d:85:9e:c4:91:ab:5d:b9:c7:75:81:
8f:7b:10:35:56:c1:dc:75:3f:de:57:0c:20:8b:90:
51:16:9a:00:04:42:69:ca:18:8d:06:ab:71:61:60:
f3:5e:ef:0b:3b:f2:bf:1a:5d:ea:5c:09:d7:da:24:
6f:17:29:18:30:e9:d0:65:e5:70:d5:31:33:4e:83:
d1:59:e0:61:47:40:35:0b:b6:9b:80:b9:c8:a4:30:
ee:c2:c9:a1:17:c8:33:ca:a2:c8:cd:f6:87:1b:53:
14:6d:2b:8b:eb:f3:b3:9a:81:84:d6:7d:b7:f6:89:
d6:41:40:bf:e7:58:21:38:b9:3a:2c:bc:fa:59:df:
36:4e:f3:9f:b0:b2:74:0f:d9:8f:50:2f:b5:8f:68:
43:36:bf:c1:8f:3d:cf:25:70:d8:90:cc:cd:80:54:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F3:CE:30:D2:88:07:3F:F1:37:BD:CF:30:3C:7B:9F:6F:4B:6E:BF
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:6d:58:fe:36:64:e0:33:33:36:eb:4c:3f:36:67:a1:0b:6a:
2c:91:eb:69:6f:47:b9:44:29:75:bf:6b:4c:47:76:30:9d:b4:
9a:6e:97:de:40:08:21:f7:95:a8:77:40:4a:e0:f4:6e:42:65:
31:21:f3:27:4b:51:f0:80:0b:6e:fc:82:33:53:f2:08:bf:00:
9d:98:4f:50:74:0d:b7:f9:24:2c:5a:e8:b0:46:76:40:ec:49:
6c:bf:b6:23:b6:30:64:7c:af:cb:73:8b:02:95:c9:44:df:32:
a8:4f:6e:ec:ac:1a:ca:3c:9d:5b:32:e7:0a:01:b7:d7:2a:f3:
4b:96:65:a3:8e:a2:7c:53:86:94:13:4a:79:bc:f9:97:0c:72:
da:cb:c4:80:b6:cc:00:64:1f:ea:4c:84:20:48:29:36:a3:26:
ec:bf:b2:11:ae:cf:91:06:7c:1a:d7:37:b0:3a:b9:f5:7b:77:
ee:66:43:dc:60:ce:bd:27:e4:64:14:c4:06:33:7d:e5:42:15:
ed:27:e4:d9:2b:fd:19:3f:07:b2:46:e6:d6:cb:04:59:a0:58:
9b:ae:a2:cc:72:64:39:05:71:20:b3:40:e2:94:6b:cb:8b:23:
31:b1:d2:bc:f9:e1:2f:1e:a0:1d:b6:78:c4:ef:0d:3c:40:4b:
f5:f9:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:35:54 2025 by rpki-client