Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
File: my5v1Q3cgXq7rFpk98ahJUaFnOI.mft (raw, json)
Hash identifier: 8PxUDspM5PdWmBcEWC6Tl6CBR1JV8S1i873MhKQ72xA=
Subject key identifier: B5:72:73:20:1E:75:DD:71:9E:ED:6A:85:0B:AD:E3:5C:DE:E5:25:B1
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Certificate issuer: /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial: 019655DCDEA7609785A5453C5685785FA606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
Manifest number: 12F5
Signing time: Mon 21 Apr 2025 01:01:00 +0000
Manifest this update: Mon 21 Apr 2025 01:01:00 +0000
Manifest next update: Tue 22 Apr 2025 01:01:00 +0000
Files and hashes: 1: jyUtfXExJkIeWPFE-JODMPcR0NE.roa (hash: IvazoNxGfM9C2jqRgwqUMFSQjgy5bfUJvRSuAgaM680=)
2: my5v1Q3cgXq7rFpk98ahJUaFnOI.crl (hash: 7bUJMSvldJ/gE8uZE8IEGBQNnHUd8uPcgBDD91lGYTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:de:a7:60:97:85:a5:45:3c:56:85:78:5f:a6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Validity
Not Before: Apr 21 01:01:00 2025 GMT
Not After : Apr 22 01:01:00 2025 GMT
Subject: CN=b57273201e75dd719eed6a850bade35cdee525b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:f3:f3:4d:91:93:78:8b:05:03:04:99:56:
9e:f0:aa:d8:1d:55:c9:b6:b3:0b:bd:be:6c:7f:96:
42:fa:68:35:87:d4:7b:36:37:2c:55:74:5f:45:25:
0b:eb:ae:1e:0a:26:1d:a3:80:ff:9e:51:ae:fa:9e:
9c:7c:6c:8f:f0:db:6e:9a:a0:a0:33:34:7c:ab:77:
a9:ae:9d:10:bf:09:a6:55:5a:96:d7:fa:55:f5:11:
63:07:82:de:52:66:77:41:e0:61:50:e4:c7:87:db:
48:bf:41:f6:89:41:f8:ec:e7:8f:e3:85:21:52:7b:
6e:a5:11:e4:eb:88:06:0b:e5:e2:64:19:1d:35:0e:
a3:02:d8:7f:b2:3f:25:2e:b5:cf:e6:5f:26:b4:b0:
f3:c8:5f:1c:02:2e:e5:2c:5e:8a:37:cf:b6:15:d8:
a2:21:2d:99:2c:84:6b:73:07:62:16:ab:65:f1:11:
9c:b5:a1:b4:56:67:ef:23:40:e6:7c:01:20:40:28:
9a:83:87:e9:f6:07:f8:d1:ab:44:64:9b:71:dd:2f:
1d:0d:c0:c7:ea:7e:ad:02:08:96:51:a1:ff:d1:3f:
d0:9c:ba:17:36:4a:33:d9:c5:08:c7:59:99:7d:8e:
88:21:42:2b:74:66:b8:94:75:37:f0:f6:6f:38:ea:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:72:73:20:1E:75:DD:71:9E:ED:6A:85:0B:AD:E3:5C:DE:E5:25:B1
X509v3 Authority Key Identifier:
keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fc:07:90:f5:a5:7b:a4:88:49:35:7e:7e:76:a0:ee:55:b0:
4e:68:e2:42:cf:65:14:2e:d5:12:b6:d9:46:c7:8a:42:12:28:
db:6f:20:e0:cd:dc:0a:40:d8:a7:54:dc:69:1d:87:31:29:04:
b3:95:f1:17:d3:9d:42:db:26:d3:bb:83:21:f1:ed:90:fb:98:
31:89:1e:47:8b:8e:3e:ed:23:02:13:28:4c:67:8a:5a:02:cc:
45:47:9a:be:69:2b:cb:22:11:d2:14:29:11:1c:27:07:42:5e:
1e:44:28:61:20:8a:55:58:85:79:76:e0:4b:3c:f8:0f:15:6b:
4e:33:ef:2d:c8:00:e9:a8:7e:4c:43:e0:3b:cd:b5:e6:8a:aa:
e2:e2:56:c7:70:a0:85:f4:b2:d7:a8:49:2a:7b:bd:f9:9f:a4:
eb:e8:07:f5:8f:62:7f:ee:6f:88:f6:d5:9c:c0:2b:af:0e:fa:
49:be:56:80:14:25:71:fd:7e:2c:d0:90:12:f1:e3:5d:99:14:
a6:c5:9a:54:59:09:ca:17:ee:81:63:5c:0e:a2:9c:02:ab:ed:
fe:66:1e:f0:b8:f1:2d:b3:cb:9a:2d:74:d9:43:d4:fc:34:9e:
4c:46:d2:25:f1:84:17:59:8d:74:d9:71:d4:60:4a:e9:dd:5c:
50:7a:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:15 2025 by rpki-client