Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier: 5A/1zyn4oofGttt6/ppFj1nVg8AFpxKc+iZVS4BetUU=
Subject key identifier: 8B:65:AC:D1:FB:A9:66:8B:57:54:9A:F6:D4:A7:CD:4F:36:91:84:C9
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 01965CBA29B2380CF09AF653F6D442E546BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number: 0EA2
Signing time: Tue 22 Apr 2025 09:00:26 +0000
Manifest this update: Tue 22 Apr 2025 09:00:26 +0000
Manifest next update: Wed 23 Apr 2025 09:00:26 +0000
Files and hashes: 1: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (hash: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=)
2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: hIWR34etdj2Wr00/unBjF174rvlBECsEHXMTwLre2UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:29:b2:38:0c:f0:9a:f6:53:f6:d4:42:e5:46:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: Apr 22 09:00:26 2025 GMT
Not After : Apr 23 09:00:26 2025 GMT
Subject: CN=8b65acd1fba9668b57549af6d4a7cd4f369184c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5d:fc:da:be:07:5a:8d:4a:cd:6b:36:e2:be:
ba:2b:ca:54:ad:7e:2e:f0:38:0e:02:9e:10:e2:85:
46:74:07:28:35:f7:34:6b:31:b6:12:e0:98:d5:ab:
9d:27:6c:b1:af:e7:09:d8:d4:09:b1:71:a5:06:5d:
b7:44:f1:cc:59:80:74:7a:13:d7:3e:e9:3a:76:4b:
8b:94:ce:44:c9:41:5b:09:88:65:5f:cc:a7:21:19:
c4:96:64:f6:83:4a:6e:27:0c:b3:51:7c:f4:bb:97:
bb:9f:39:f9:84:6e:c8:7d:af:1d:ba:9c:a6:ce:2c:
f5:24:f9:dc:b7:e7:fa:d7:73:97:53:dd:f7:72:61:
56:13:18:28:8e:5c:77:11:e9:58:d0:d1:c4:5b:9f:
c6:cb:ee:3a:47:b4:66:63:ac:1c:fb:94:5b:d4:7d:
28:3a:a0:e0:59:74:74:ca:a1:51:1e:05:4e:4d:9b:
8e:61:a1:d3:f0:81:9a:7b:18:ab:61:f7:cb:63:e7:
4c:ac:40:d9:e7:f4:17:05:96:67:55:84:07:17:60:
f2:94:85:ac:ec:20:ac:ed:77:e4:da:16:b0:1f:3d:
d2:9d:29:b3:87:81:aa:69:9c:53:e6:7f:a3:34:af:
b6:e6:3f:f9:56:30:2b:dc:40:10:a3:d8:ec:88:8b:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:65:AC:D1:FB:A9:66:8B:57:54:9A:F6:D4:A7:CD:4F:36:91:84:C9
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7e:28:41:83:2b:96:a9:03:3f:e1:c8:8a:15:c8:cf:86:e2:
a8:aa:c3:2d:21:e7:06:cc:5c:8c:64:27:01:85:e0:02:d5:5f:
6a:8d:86:a4:67:70:e8:e4:de:a4:a5:dd:49:8e:e6:49:6f:5d:
f1:c1:01:a6:4f:61:28:83:e4:56:7e:d6:5b:ea:6b:81:9a:d5:
71:66:2e:65:6a:e1:b4:97:e2:42:ab:b4:c8:85:fa:2b:dd:da:
db:df:9b:f5:9b:76:b9:8a:47:0b:b5:83:62:94:1b:0b:db:37:
03:0a:3b:30:61:3d:99:ee:bd:e8:3d:1d:fb:38:a0:d7:89:fe:
69:f4:cb:69:db:21:45:a6:9f:3b:d4:dd:a4:7a:96:3c:80:8f:
0d:cd:f4:36:78:c7:2c:41:56:82:89:93:59:24:2f:10:f5:21:
f0:77:ee:a2:2b:cb:f4:12:96:10:9e:33:ca:5f:c6:a6:a3:b4:
e4:b3:18:cf:91:f7:37:79:95:2d:ad:b9:f1:24:ce:f2:f0:6e:
11:70:6c:98:b3:c8:e8:e5:15:c9:c8:b1:98:a7:0c:9e:47:f5:
1c:ad:1e:6d:1d:d2:b0:b3:0f:e1:9f:24:a7:8e:f0:21:ec:30:
b2:d6:67:bb:e2:a3:de:c3:89:b7:04:b1:78:96:72:74:3a:5f:
bf:9c:c0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:41:14 2025 by rpki-client