Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: Uro3YEFoekJ2Jb/OjyobVMeGFHgv32asiR8BjplF69s=
Subject key identifier: 9F:7A:BE:63:C9:96:A8:97:CA:90:72:F4:90:B6:46:D8:AD:3D:D3:1B
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 019651917DDC375D854DC288F8EF13BFA728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 0ECE
Signing time: Sun 20 Apr 2025 05:00:11 +0000
Manifest this update: Sun 20 Apr 2025 05:00:11 +0000
Manifest next update: Mon 21 Apr 2025 05:00:11 +0000
Files and hashes: 1: DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa (hash: cD2uBmETpIdrWKKJGmi5CrnlQnFYngKqgmK3aNdcBqA=)
2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: mg7yrrcsKTooa11zuhXQJHNQxKkqVd4Ce3s7fIo3Y2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:7d:dc:37:5d:85:4d:c2:88:f8:ef:13:bf:a7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Apr 20 05:00:11 2025 GMT
Not After : Apr 21 05:00:11 2025 GMT
Subject: CN=9f7abe63c996a897ca9072f490b646d8ad3dd31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:71:34:1d:8f:20:0b:14:1d:03:57:2f:4f:
fd:5f:c3:16:7f:16:db:e8:15:8f:4c:c7:89:a9:ec:
6f:47:6f:cb:5b:42:1e:98:3e:33:44:c3:89:ef:81:
76:ef:d3:af:a9:11:96:fb:63:e3:d7:b8:43:a4:09:
28:cf:7d:81:b3:36:a2:0e:47:69:87:7c:f6:24:55:
68:b6:b4:e8:67:28:54:2e:54:ab:c8:1b:c7:c4:17:
9d:76:ed:da:3f:4f:dd:bf:f6:ef:03:80:e9:08:e3:
08:26:cb:8b:61:87:c1:95:4e:7f:1b:8b:1e:0a:35:
d0:03:00:87:ec:36:43:89:15:26:1a:6e:48:5d:fb:
e6:de:51:43:33:78:df:4e:dd:e4:85:af:1b:d3:f4:
84:f3:4a:39:4a:e3:75:9a:e6:19:6b:e4:38:25:99:
73:c2:07:db:d9:9a:75:20:ad:65:19:29:04:dd:48:
da:ca:e3:8b:d4:66:9f:98:fc:92:0d:6f:b9:ed:e7:
cc:f3:9c:e3:83:2b:58:06:11:5e:1f:40:2b:7f:08:
f4:4c:6b:1e:8c:85:07:c1:c9:a2:68:b3:0b:d0:a8:
8a:4c:ed:5c:1e:4b:c5:a3:43:6d:14:2b:fb:22:d7:
90:45:72:3a:e1:94:f8:f0:b2:ab:d8:bd:6d:7d:1a:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7A:BE:63:C9:96:A8:97:CA:90:72:F4:90:B6:46:D8:AD:3D:D3:1B
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a0:45:ea:99:2b:2f:8f:c6:31:2a:2e:da:b2:13:43:15:6d:
88:c3:49:4b:32:40:b5:26:b3:46:e1:b3:6d:70:27:6e:c9:73:
64:bd:dd:c8:d4:20:8f:e7:fb:49:ba:7c:7d:6c:9c:f6:16:2c:
eb:f9:ac:97:9e:50:0d:65:36:c7:74:96:58:b3:bb:7f:17:0e:
1d:22:20:21:95:2d:72:de:c6:74:66:1e:7d:fe:36:ce:26:a1:
bf:62:a9:f0:17:2a:4a:68:0b:03:60:24:de:bf:a2:8a:24:1b:
f7:b0:34:e1:ae:4e:23:77:34:1d:38:83:25:f7:35:bc:48:ff:
5e:cb:09:e7:24:6d:cf:a4:ef:39:94:a2:15:e0:d5:5d:3c:b4:
55:c8:47:dc:fe:c5:5f:38:a3:4e:f3:bb:65:2d:47:e9:99:25:
33:2e:f9:15:fb:b1:7c:1b:0a:46:7c:3e:eb:2e:bd:75:12:63:
ef:49:3e:a2:91:53:31:2d:2a:63:49:e6:a0:26:8d:b6:05:af:
42:bc:99:35:e3:c7:2e:7b:05:31:70:86:d2:64:ea:7e:c1:77:
e8:c9:bf:2e:02:28:e1:dc:41:44:75:a6:76:fe:f7:6f:02:22:
48:0f:0b:41:2b:ab:0c:95:0a:be:2c:b5:ba:1a:b9:0a:f4:e3:
67:19:f7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:06:13 2025 by rpki-client