Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
File: rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft (raw, json)
Hash identifier: icZC6iOr8ZJQuLsup8YNdib60aazq8stOLlE+MtflVM=
Subject key identifier: CB:E5:E9:6F:64:E1:4B:55:D5:14:A3:8D:1A:F2:8F:7A:80:35:36:CD
Authority key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
Certificate issuer: /CN=acebf396c9adf94f84dc901656e255ce6d50660c
Certificate serial: 01965ACC089B44595174E1063F17BB7F9355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
Manifest number: 0177
Signing time: Tue 22 Apr 2025 00:00:42 +0000
Manifest this update: Tue 22 Apr 2025 00:00:42 +0000
Manifest next update: Wed 23 Apr 2025 00:00:42 +0000
Files and hashes: 1: C4fkDspID27_2W7uJ0bDWTiMbsI.roa (hash: IPmvbCiP1dYquC+xxAe/aHEwDNf0L9S57sM644oyMl8=)
2: rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl (hash: lBnUuDtU7MfoS4PAuoiCVc/kIAQ7dFsCIPr0zRcwh7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cc:08:9b:44:59:51:74:e1:06:3f:17:bb:7f:93:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acebf396c9adf94f84dc901656e255ce6d50660c
Validity
Not Before: Apr 22 00:00:42 2025 GMT
Not After : Apr 23 00:00:42 2025 GMT
Subject: CN=cbe5e96f64e14b55d514a38d1af28f7a803536cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:50:a6:c8:44:cf:92:24:43:5d:d0:4b:da:
bb:03:18:c6:da:23:c6:35:10:19:82:84:98:a2:49:
fd:5d:4f:62:00:e3:16:1e:3e:40:68:6f:5b:17:c3:
74:54:15:6e:00:5c:4b:67:88:83:69:25:38:cc:62:
4f:a4:04:22:9e:9d:fb:10:db:60:ed:77:df:da:5e:
f2:9f:aa:b6:5d:1f:4e:52:bf:94:cc:b0:39:00:0a:
ea:1d:d8:aa:91:07:18:35:ec:1b:5f:67:9f:02:c0:
72:8c:5c:3b:8b:9b:3b:71:03:2b:cf:85:3b:69:0f:
dc:f8:b7:3c:4a:f2:ee:cb:45:f9:a6:c2:72:42:f5:
13:b1:42:14:a1:7d:57:1f:1b:7c:3a:eb:60:25:7c:
47:33:48:f6:3e:45:16:b4:3d:73:6b:d3:2f:8b:26:
14:83:08:fb:cd:30:9e:ea:78:b8:02:4e:f3:3f:5a:
96:4d:59:10:f8:92:0b:f0:cb:9f:ba:e7:39:35:de:
75:3b:21:96:05:56:5f:37:e4:e5:7e:24:3a:dc:67:
02:c7:c6:09:1b:26:9e:fa:6d:de:3a:92:c7:a2:0c:
d5:ab:7b:85:19:c3:36:08:c0:87:9f:7b:d2:cb:0a:
98:fb:fa:a1:a5:78:50:71:c2:ce:5b:67:c1:cd:e7:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E5:E9:6F:64:E1:4B:55:D5:14:A3:8D:1A:F2:8F:7A:80:35:36:CD
X509v3 Authority Key Identifier:
keyid:AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9a:fa:52:c0:ac:f3:fe:52:6b:4e:54:9c:21:41:7c:d2:ed:
b5:f6:8d:3f:f2:da:b2:26:90:39:96:43:79:38:ac:ef:c9:9a:
b8:24:6d:5d:73:e3:b1:f5:54:48:1a:e5:34:c3:9f:ba:06:3f:
d3:be:62:bf:42:d5:4a:c7:a8:c4:50:2d:4e:e5:f9:83:20:24:
e3:d9:34:26:c9:4b:92:80:af:43:af:3d:9f:b9:eb:02:62:66:
6f:2b:3a:62:fa:3e:8e:d7:9b:e7:ca:10:c3:6a:b3:22:d3:c3:
b6:67:20:0c:7c:9e:14:ec:8c:95:27:d7:5c:85:94:1f:92:af:
fe:4b:e4:2d:03:21:3d:93:43:ba:53:08:74:e4:50:09:bd:b2:
9d:03:20:37:f3:1c:59:a7:ad:99:8f:8d:84:58:bd:5c:fc:f3:
4c:b7:85:61:6f:e7:87:e8:12:f6:3e:f2:b7:61:de:15:d4:dc:
a0:46:25:c6:96:11:c3:f9:55:57:c5:d3:9b:c9:a8:d7:25:29:
92:b9:17:7b:03:29:98:3e:d9:e1:90:58:a8:f6:20:c9:2c:85:
cb:6c:57:70:25:6a:fc:54:ef:78:20:0d:3d:04:18:14:90:1f:
cc:8d:1b:48:c6:7f:d8:fc:35:1e:89:bc:f4:69:73:9f:ea:97:
c5:1c:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:42:56 2025 by rpki-client