Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: sQf1vqxDEzeuOEQ3kd2bz7cD82/d/iBlDKZfnXbpzQ0=
Subject key identifier: 0E:FC:25:DF:0D:4F:8E:7D:77:C6:06:72:29:B2:9D:B8:94:34:FD:57
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 01963FF982CDA04F47269D14EEB1B271DD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 05F0
Signing time: Wed 16 Apr 2025 19:00:38 +0000
Manifest this update: Wed 16 Apr 2025 19:00:38 +0000
Manifest next update: Thu 17 Apr 2025 19:00:38 +0000
Files and hashes: 1: casId6bSRHTNn5PL96DuG2TJvlE.roa (hash: L+JMLEBjCTLo3pT1VkKD/pB+PbvKkE5XXjy3KroLN1g=)
2: kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa (hash: 1P+cwreujhRRyFPgrb8zcY4I1d2u+NU9now7YdN+EEs=)
3: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: BiGWAyhipdS33/mpRyocI2ZyBSnUY66VTTJtuBTC0XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:82:cd:a0:4f:47:26:9d:14:ee:b1:b2:71:dd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Apr 16 19:00:38 2025 GMT
Not After : Apr 17 19:00:38 2025 GMT
Subject: CN=0efc25df0d4f8e7d77c6067229b29db89434fd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:b1:1b:b8:04:d9:9e:9a:51:83:22:47:31:
0a:e7:82:fe:be:74:07:15:2f:53:0c:ba:a6:29:e8:
8b:46:00:59:66:55:53:4f:c9:48:15:66:af:ca:80:
29:84:46:50:a4:df:65:d7:6c:17:ab:1b:06:ce:ae:
de:cf:ae:1b:c1:0d:0b:13:b4:5e:74:f3:95:8d:6f:
5d:cc:c0:88:7d:84:57:a1:99:fb:bc:a4:6b:0f:2e:
e7:68:96:84:c7:12:cf:1f:89:78:9d:62:fb:92:ff:
99:03:43:c2:fe:93:09:bb:02:18:f0:fb:ed:38:08:
f4:d8:34:f7:18:97:69:ee:46:97:7d:02:5e:a3:93:
9a:8d:ab:83:16:8e:c6:22:b4:95:c0:95:52:f8:61:
fa:ba:15:4c:1d:d9:8a:0e:f6:25:3d:6b:5d:40:8d:
80:17:15:1d:83:cd:4b:e0:14:f1:92:39:46:f5:89:
86:24:2e:c2:93:cd:5f:ce:7e:ae:54:de:2d:18:7a:
44:f2:fe:5a:d9:cd:80:32:a0:db:94:81:ed:a9:55:
d8:0e:e7:b5:1a:d4:82:fc:aa:85:84:22:e8:99:a0:
99:cc:9d:14:84:37:3b:f7:ab:97:76:a6:98:68:2c:
10:af:78:94:f3:32:b3:46:d7:47:61:87:ff:8c:1a:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FC:25:DF:0D:4F:8E:7D:77:C6:06:72:29:B2:9D:B8:94:34:FD:57
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e8:cd:80:7a:08:e5:c1:41:2d:e2:e4:4e:34:ab:2b:41:5b:
d8:73:ee:01:cf:1e:77:8a:50:e9:9c:dd:bf:54:38:79:9d:49:
5f:60:21:64:d9:f3:ec:7e:e7:57:42:a1:1a:4e:9a:7f:58:39:
50:a1:63:be:e3:c3:43:09:74:48:63:24:59:71:8f:5a:7f:4e:
ac:7d:88:af:c6:90:48:aa:7c:84:f4:4d:40:ae:0e:36:54:98:
04:f5:dc:99:0f:31:f3:27:54:6c:fa:83:c9:ac:aa:d4:85:20:
b2:ff:bd:68:bd:e7:e9:53:3f:47:99:24:75:38:2b:8a:3b:7e:
70:36:63:1f:82:e0:e0:68:ed:ce:49:be:df:cd:83:dd:83:ac:
38:a7:5b:e4:63:04:19:b9:2a:32:58:5e:85:72:59:17:0c:23:
23:81:f5:ec:db:ba:fe:81:6e:59:79:8f:a8:9c:16:51:5e:5f:
d9:53:d2:79:5c:d2:73:f3:e6:01:5c:94:53:90:47:f5:08:3d:
71:55:a9:ff:80:83:92:45:3f:1e:e5:bc:07:01:d1:c5:2b:06:
fb:b2:5d:4e:81:e8:fb:5b:d6:6c:60:2d:27:ee:24:30:01:d3:
0c:5d:9b:23:46:16:3d:fe:42:7b:2e:9d:59:88:16:a8:f8:de:
d0:4a:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:31:15 2025 by rpki-client