Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
File: f3YJUscz9vLuklTtzRTg2qeLOIw.mft (raw, json)
Hash identifier: nWfFDRRuvOa5kH9+ERxA7YI4zezuJvK9loXNn984yUU=
Subject key identifier: A3:92:26:CC:4E:26:B3:8C:B6:2A:ED:94:23:BF:F9:96:95:27:33:E3
Authority key identifier: 7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
Certificate issuer: /CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Certificate serial: 0196556EC509160730F496CAB8AD00648B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
Manifest number: 02E2
Signing time: Sun 20 Apr 2025 23:00:44 +0000
Manifest this update: Sun 20 Apr 2025 23:00:44 +0000
Manifest next update: Mon 21 Apr 2025 23:00:44 +0000
Files and hashes: 1: ZCBQTSRDp2Vji2C9hSrbiPFq7OY.roa (hash: PB9NVbc1SKDdgUUB+S0NaDZM0GQCTky3OkA9OktttX0=)
2: f3YJUscz9vLuklTtzRTg2qeLOIw.crl (hash: gE/XscWo6nEamYc9Ee4tNOWDEC5szNZndJwyU4WKpX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:c5:09:16:07:30:f4:96:ca:b8:ad:00:64:8b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Validity
Not Before: Apr 20 23:00:44 2025 GMT
Not After : Apr 21 23:00:44 2025 GMT
Subject: CN=a39226cc4e26b38cb62aed9423bff996952733e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:f1:05:24:ff:0d:52:8b:33:42:ad:19:52:
11:b4:31:4f:70:7b:84:09:cc:3d:ab:59:d3:a2:41:
30:7d:e3:42:04:b1:ae:77:7d:bc:d6:62:6b:2e:6e:
df:de:76:77:ba:02:bc:b0:a4:60:05:1b:e2:1a:53:
98:8d:f0:a5:02:62:61:03:c6:a8:3f:c8:48:ec:97:
b8:56:96:c3:cb:7d:29:30:22:59:e9:c3:03:f2:6f:
34:05:5f:3d:c7:70:8a:91:74:37:ef:39:49:ef:6c:
ae:47:d8:9c:d1:7e:fa:97:60:ca:d3:46:d7:b9:4c:
af:36:f1:7f:37:0e:a5:04:3d:36:80:0a:30:38:dd:
af:3b:ac:dd:72:b4:e7:3e:2d:c2:57:55:eb:b7:f4:
75:12:89:05:58:41:1a:a4:2d:67:d1:17:b2:aa:e8:
d6:16:29:e9:90:08:f5:f8:bb:d4:03:49:7e:e8:cf:
45:f1:77:23:43:0c:0b:ea:94:c0:cd:49:e6:89:de:
dc:5e:62:f5:87:47:9d:49:7c:b6:cc:13:b2:99:33:
e6:87:3f:d7:91:e6:6e:db:a6:c0:52:8f:e6:3a:b6:
c4:27:d3:a4:64:ae:7e:1b:6c:1c:a9:d0:4b:47:75:
c8:0c:99:46:c9:ec:c5:ea:de:94:07:4d:85:bb:4e:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:92:26:CC:4E:26:B3:8C:B6:2A:ED:94:23:BF:F9:96:95:27:33:E3
X509v3 Authority Key Identifier:
keyid:7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ab:9a:c4:1d:e7:f3:f3:d9:05:87:4a:2c:20:40:02:58:44:
07:bc:01:b8:70:3d:24:42:90:8c:cf:ce:71:1d:9c:41:ea:72:
5c:3e:28:c2:dc:f0:23:9d:0b:2c:f5:e8:0a:80:07:07:75:18:
bb:a0:f0:35:be:8c:d0:6e:02:33:65:8a:e2:4c:75:49:c1:0d:
2d:fe:bb:f1:42:d9:56:3a:4c:66:99:f5:a4:4e:d4:24:1d:42:
49:b1:66:56:e6:29:e3:c5:fd:25:6b:95:3d:d8:30:96:d7:3c:
8c:17:f3:a2:95:ea:bb:6a:e9:b4:4d:1d:6b:db:45:f7:08:c4:
9d:47:66:83:90:e8:eb:05:4e:68:09:31:81:9a:24:29:13:79:
92:65:d8:c6:69:13:ac:4e:32:17:07:f9:38:6b:55:ce:0c:e8:
45:4d:4a:f2:8e:44:e5:b5:bb:3f:d6:92:44:f8:ef:c1:ae:c3:
ef:f4:4c:18:12:6c:fd:ac:56:f3:55:dc:08:ef:18:7e:e9:b2:
99:64:ef:ee:aa:70:d1:98:29:b1:f9:c7:4b:99:f0:7d:f6:4b:
0d:d8:12:ca:e1:a6:9d:6b:fc:f4:aa:e8:a6:63:a0:ae:0a:24:
83:a0:52:41:64:c7:b8:d0:40:d7:01:7a:55:1c:be:aa:8b:cf:
75:ca:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:37 2025 by rpki-client