Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier: e3AFqBPpzoWcaDcpyTSFQM6E5lYouIdWKbjfvZI2nyY=
Subject key identifier: 0C:53:4B:E6:66:0F:13:1B:F3:0F:3D:FA:B3:F2:D1:2E:23:92:D4:C2
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial: 0196564A6529F668DEBE4B98AA73F0CB860E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number: 10
Signing time: Mon 21 Apr 2025 03:00:38 +0000
Manifest this update: Mon 21 Apr 2025 03:00:38 +0000
Manifest next update: Tue 22 Apr 2025 03:00:38 +0000
Files and hashes: 1: 1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa (hash: Q9hOadBBuPPxo3375iiCb6IfTPJTRKVivBWjEk+2yzQ=)
2: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: FuorVJNIw2aYfpZ+ZylGuEw7KxTcxeI1lnBKujYmtLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:65:29:f6:68:de:be:4b:98:aa:73:f0:cb:86:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
Validity
Not Before: Apr 21 03:00:38 2025 GMT
Not After : Apr 22 03:00:38 2025 GMT
Subject: CN=0c534be6660f131bf30f3dfab3f2d12e2392d4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:f0:84:29:5b:fe:82:0b:e2:3b:2f:79:54:
6f:a5:5d:25:33:c9:26:76:b7:58:0c:55:47:d4:a5:
6e:3e:59:0c:a1:60:6a:8e:04:5c:e2:b6:83:0f:81:
6e:ae:b0:24:d2:cb:06:aa:3f:c1:96:a6:9d:d0:fe:
6c:29:31:b2:3f:e6:5d:ad:82:61:31:34:cd:c1:36:
96:6b:6d:69:97:b9:84:bc:b6:0a:03:6a:98:58:46:
dd:d7:81:4f:47:f9:54:54:8b:37:a0:00:53:25:e6:
5c:74:d5:f8:62:e5:81:6c:78:f3:2f:bf:0d:27:4d:
b8:83:0f:bf:64:1f:27:6e:09:3e:4a:b8:31:32:cb:
73:70:ef:ae:62:a7:ce:f5:2b:27:b9:c0:6a:e3:62:
a0:d1:ae:9e:1a:20:1f:c0:d4:50:40:83:a4:5d:ac:
1e:6d:0a:72:11:dc:e4:19:29:e7:7f:37:52:de:83:
0f:71:fd:c9:a2:e3:29:64:85:c5:f0:a2:3c:a5:2b:
17:aa:5b:66:28:1d:93:fa:d5:ba:71:f9:fe:54:16:
cf:84:73:d1:d8:fb:68:c6:0d:01:70:6a:8e:29:8a:
12:0d:0a:1e:d3:1b:d2:08:c1:95:97:25:54:33:48:
17:fd:aa:64:f6:34:87:d2:00:a8:45:6f:5f:61:53:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:53:4B:E6:66:0F:13:1B:F3:0F:3D:FA:B3:F2:D1:2E:23:92:D4:C2
X509v3 Authority Key Identifier:
keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:09:94:89:77:fb:97:31:41:f8:b9:c1:92:ad:33:df:03:05:
08:da:65:ed:cc:2e:da:c5:a6:52:ba:f2:79:f4:f1:9d:e1:d2:
c1:4f:a7:c5:f3:07:eb:b9:e8:9f:0d:7f:0f:15:f6:49:c2:e6:
dd:da:64:60:87:0b:1f:3f:6b:67:5e:fd:43:bd:39:2b:97:48:
e7:61:12:b1:65:17:83:2c:46:74:a4:00:0c:d5:c8:95:38:40:
9f:30:c5:ce:30:ea:d6:5d:0e:94:a3:60:07:c1:84:3b:86:2f:
5f:82:a9:e4:46:49:27:6c:9d:69:a6:26:1b:54:db:81:44:f9:
ff:9f:d7:2e:41:cd:ba:c8:51:c9:79:d5:f6:6e:e8:b9:3c:b8:
6d:0c:8b:16:6d:6f:5c:42:be:79:e0:18:f2:81:bd:24:37:89:
8e:97:52:30:e9:33:9f:ef:c9:0d:1b:3a:b0:e3:59:e9:e7:84:
98:16:3e:8a:f2:7a:70:36:4a:2c:ae:cb:2e:1d:3e:73:91:c8:
f0:bb:e7:8e:ee:f4:87:44:b6:c0:cb:b0:98:a3:d3:30:59:a7:
da:38:2f:de:9e:89:b1:7f:41:49:89:39:bf:ec:56:14:12:3b:
8c:b9:a1:1f:9c:7a:de:9e:0e:d4:b4:5a:d3:68:08:02:97:9f:
de:b2:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:14 2025 by rpki-client