Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: ZSHxxohEq+2wY4m2Q0DRrDJL5I59TRsnbP0Z5eDgpHc=
Subject key identifier: FF:92:CD:37:11:18:D0:5A:F7:32:F8:10:BD:8A:87:C1:EC:81:18:61
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 019688808CC66B76A3054DCD60EBF4656651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 21:00:48 +0000
Manifest this update: Wed 30 Apr 2025 21:00:48 +0000
Manifest next update: Thu 01 May 2025 21:00:48 +0000
Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: 0IZfj/tDJXvAamvB7GZmTASRF4uU5qZQj+0cStFdBAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:8c:c6:6b:76:a3:05:4d:cd:60:eb:f4:65:66:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Apr 30 21:00:48 2025 GMT
Not After : May 1 21:00:48 2025 GMT
Subject: CN=ff92cd371118d05af732f810bd8a87c1ec811861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:55:24:03:17:57:2b:2e:38:2b:5e:37:cf:
17:1a:d5:38:19:3f:e7:5c:d0:03:fa:5a:6d:da:8e:
33:01:3e:43:df:49:38:d6:53:95:d1:81:38:a3:72:
5c:8a:b4:46:28:a0:62:d4:d1:30:81:ad:7b:04:a5:
ee:9d:50:85:93:22:7c:14:26:cf:32:bb:cf:03:e0:
25:45:4d:15:ec:97:94:30:61:81:df:a4:02:60:32:
80:fd:52:46:c8:ba:ae:26:a0:5c:33:24:fe:b6:a2:
a9:dd:e7:b2:5b:38:00:3d:15:17:39:8e:41:22:7e:
81:18:b6:a2:46:74:7c:70:d3:91:eb:2b:d7:e1:d1:
4b:78:b9:d9:03:fd:01:f8:f3:f4:f6:1e:97:00:8a:
f3:19:15:48:24:89:f2:ac:f7:34:ad:f4:8c:3a:0c:
8b:e3:2d:aa:68:e1:5e:52:ac:42:d2:4d:38:c7:fb:
98:0f:ed:cc:f0:aa:ec:5c:f8:9b:60:f1:23:de:ee:
1d:62:08:a3:f3:bb:3e:2f:2e:86:10:66:d1:2e:94:
1e:b5:fd:f5:7f:4a:d2:3b:ec:63:34:f3:b9:f1:9c:
ce:7f:7a:4c:e5:2d:81:e4:c3:34:d3:62:e4:c7:81:
a8:fc:19:78:4f:fa:d8:e5:03:d3:de:1b:ac:b4:70:
09:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:CD:37:11:18:D0:5A:F7:32:F8:10:BD:8A:87:C1:EC:81:18:61
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:23:73:90:13:e6:43:e3:d8:55:58:4e:e1:8d:4a:87:af:86:
c3:f6:f3:06:9d:e5:c9:96:ee:67:15:af:06:bd:dd:5a:49:01:
0b:46:fd:16:38:a6:1c:61:cf:3e:83:16:b6:bb:58:64:33:69:
b4:81:26:9c:6f:52:8d:10:4a:d1:4c:3e:4f:c1:e1:9c:fa:19:
e4:6d:4a:d9:32:d3:7f:74:e5:00:af:73:b1:43:07:83:98:ea:
7a:eb:be:e6:63:e3:aa:49:e0:4e:cd:db:2e:68:56:fd:b5:25:
71:e8:d0:10:5a:de:5c:ac:c3:88:c6:50:95:7e:35:05:6d:54:
26:4b:3b:06:9c:dc:ef:5b:e6:60:d8:98:91:b1:d0:39:bd:7d:
be:17:d8:98:ea:ed:8a:9d:8b:ba:e5:05:99:99:92:82:11:ef:
0c:1b:b8:3d:50:79:e7:97:96:aa:ca:20:cf:af:8e:b7:43:f0:
a8:f1:15:c6:d0:a4:7e:a8:1e:98:2a:75:91:23:e6:85:aa:e1:
2d:62:fe:10:ff:02:ca:25:25:6c:b5:17:b4:0e:07:af:41:4f:
2c:c7:f4:83:1c:35:e8:ae:b9:ab:d3:2b:41:b9:49:d0:58:7d:
7e:9f:30:64:22:f8:42:57:89:96:26:ea:ec:d3:86:f5:4f:ee:
dd:e2:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:19 2025 by rpki-client