Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: uKRpd0Cu07JmV9bezIvH0dahWtxLtm/8LO8rzWB+G08=
Subject key identifier: 9D:87:5F:FE:DA:23:9E:0B:49:E3:4F:7C:75:1E:62:F7:F0:E7:77:74
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 019647E9CB515E900F81DA9A030CB592CD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 13D5
Signing time: Fri 18 Apr 2025 08:00:26 +0000
Manifest this update: Fri 18 Apr 2025 08:00:26 +0000
Manifest next update: Sat 19 Apr 2025 08:00:26 +0000
Files and hashes: 1: 1tRI1NAS620irGWcDu4y9Qfw5Oc.roa (hash: cB16kbTr6A/atusEQcb+v3J61xx/lkSsq3ehr1/v5HA=)
2: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: I5aG3rrgmNZ4dM3nwDbfeQJa6Se46fjvaLOWd3LO71Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:e9:cb:51:5e:90:0f:81:da:9a:03:0c:b5:92:cd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Apr 18 08:00:26 2025 GMT
Not After : Apr 19 08:00:26 2025 GMT
Subject: CN=9d875ffeda239e0b49e34f7c751e62f7f0e77774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:6f:93:de:13:ac:74:c5:34:9a:c4:95:83:
ee:7f:75:80:72:61:e7:ad:0d:34:ff:db:41:7d:e3:
6a:07:ba:b6:18:f6:79:40:05:69:76:e6:26:dd:6e:
00:50:e8:65:7f:1e:66:aa:50:3f:66:6f:1b:1f:11:
fc:2f:41:6c:db:71:d8:ef:ad:d0:dd:b3:b2:e9:84:
52:57:47:8d:84:13:19:41:db:7b:c9:09:3f:95:bf:
34:e9:bc:26:34:02:7e:ab:d5:9e:22:d5:ea:0e:f9:
a1:a8:d4:0a:7b:2a:97:e0:38:b1:3b:24:e4:83:ef:
7a:fe:8b:08:8c:52:7f:63:9f:74:23:a4:76:e3:12:
bf:46:cc:4b:5e:00:99:1e:f9:d8:5a:c5:8b:3d:92:
b4:55:63:5e:10:e9:19:5f:c5:29:79:52:e0:ce:13:
aa:9f:1d:79:bc:d3:f3:d4:46:06:8e:4a:0e:8b:78:
e5:38:e0:9b:06:20:3a:f6:78:af:6e:79:35:4b:48:
6b:92:a5:6b:8c:64:8e:0c:fe:cb:3d:56:e2:69:da:
a2:f2:07:ff:46:cf:f6:3e:9a:93:55:76:5a:49:45:
3e:8e:7c:d2:aa:47:49:33:6a:db:91:69:bc:6f:0c:
5a:d8:a8:09:64:40:f3:d7:c0:16:f0:9e:4e:a8:20:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:87:5F:FE:DA:23:9E:0B:49:E3:4F:7C:75:1E:62:F7:F0:E7:77:74
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f1:31:88:52:f7:a5:b7:0e:f4:49:b6:f7:dc:c2:66:ea:9d:
5a:1e:eb:9f:28:f7:b8:85:94:9c:92:d3:fc:52:23:25:cd:42:
5c:ce:76:03:28:9f:e5:dc:e2:41:6f:de:43:ae:0f:72:2b:9f:
f5:44:9a:90:db:87:dd:79:11:df:17:14:8b:20:35:57:38:2e:
fb:ae:bc:07:4a:59:6e:61:75:f8:ad:71:b5:3f:5f:d4:89:0d:
4c:22:83:61:cb:18:54:7c:47:6c:93:34:91:d2:f5:97:79:ef:
1e:e1:dc:fc:ee:2a:6e:e5:eb:d9:e3:1f:76:54:e9:be:6b:78:
09:05:80:5d:40:d3:05:c6:52:bd:29:ee:bf:dd:20:39:67:1a:
de:41:c7:e5:14:fc:f3:20:43:f3:6a:58:c0:d3:e2:6f:d8:7c:
84:ca:60:a6:bd:aa:8c:e1:bb:90:78:ce:5f:2b:31:b2:53:4f:
60:85:d6:38:93:03:7f:10:06:05:b6:8a:f9:dd:18:25:0e:86:
e0:c5:4b:51:6e:f6:5f:18:96:2a:f8:60:5b:da:e7:72:cb:6b:
df:6f:ea:fd:67:99:ac:8b:fd:b6:9f:d9:a6:ea:37:43:94:b7:
c8:8d:bf:76:a2:b8:fb:c3:ac:d5:38:05:0d:4e:46:03:47:52:
d9:3c:55:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:11:15 2025 by rpki-client