Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
File: e4jUpKsYpZtmTauv2ziA3DWyK5E.mft (raw, json)
Hash identifier: sYvGwKQMsDxYU2VBkdIePrj6R03nQ3YMaXJwrDcXOoQ=
Subject key identifier: 3F:98:25:BA:6A:E8:E0:E2:42:6B:F5:91:B8:BC:0D:BE:FF:3B:E5:E0
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial: 0196A54114B9BE59133B24ABF55BABD708E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
Manifest number: 152D
Signing time: Tue 06 May 2025 11:00:27 +0000
Manifest this update: Tue 06 May 2025 11:00:27 +0000
Manifest next update: Wed 07 May 2025 11:00:27 +0000
Files and hashes: 1: XWu-Cy3k4bG46jzu68jWDU2BUlE.roa (hash: oYNAZflFkpftatNeWIk412xMRJVARxZKG+FJn7voe4M=)
2: e4jUpKsYpZtmTauv2ziA3DWyK5E.crl (hash: YImOv28FmlGTdV5gtx5rKf0UMoUowNI8bcTu37XDiGA=)
3: jYKhHXV1OB2pC6LjAmSh2r6YUk0.roa (hash: 7C9VKQGPhygAtV4ulo4sNDzQRhMNsoU08LmAQx4ncWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:14:b9:be:59:13:3b:24:ab:f5:5b:ab:d7:08:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Validity
Not Before: May 6 11:00:27 2025 GMT
Not After : May 7 11:00:27 2025 GMT
Subject: CN=3f9825ba6ae8e0e2426bf591b8bc0dbeff3be5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:6d:ac:b9:25:46:16:7a:b9:42:26:98:ef:
2a:a0:88:9d:89:34:f2:81:d6:d6:68:d6:6f:0f:3e:
fc:8b:f8:e2:e2:de:1c:28:e3:be:ca:a1:5f:b3:8d:
1d:42:14:f5:e0:eb:5d:4b:2a:98:62:65:7a:24:a2:
42:79:c0:d7:dd:28:9a:8e:db:35:08:4a:56:9d:29:
7f:97:65:96:e6:8c:38:91:74:eb:56:32:cf:53:a0:
43:30:c0:d4:71:8b:8d:76:22:53:d3:3c:d9:91:91:
51:11:7b:95:48:0c:1b:21:e3:06:55:e6:cd:ae:62:
fb:5b:cd:9a:b6:18:d5:fc:0c:48:30:2a:43:97:e6:
f0:c3:72:0a:22:95:1b:13:ee:d3:ff:a9:b3:b9:91:
c6:f9:91:22:d5:1e:12:c0:49:af:fb:07:74:5e:3f:
d0:9c:2d:dc:9a:c6:df:09:cb:4f:8b:e6:40:98:06:
17:67:e1:a1:3f:70:f1:88:1f:aa:a0:cb:d1:95:b0:
95:d7:f4:43:36:28:fb:d2:b0:23:08:8f:dd:a2:05:
28:03:94:af:06:a1:c8:32:9b:b6:77:79:2a:22:83:
ec:b7:c5:f5:cf:87:44:ae:46:7c:1b:27:9d:25:75:
fa:60:45:fe:47:64:db:e4:4b:27:99:63:28:ec:49:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:98:25:BA:6A:E8:E0:E2:42:6B:F5:91:B8:BC:0D:BE:FF:3B:E5:E0
X509v3 Authority Key Identifier:
keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1b:a4:28:48:6c:8f:1e:3f:59:44:a6:8b:3e:63:ab:24:e9:
fe:40:25:e6:ec:c8:82:40:45:63:0c:09:56:5d:9f:ab:51:47:
5c:43:fc:7c:4c:e5:0e:fb:43:e8:2a:2d:b8:f5:f6:3d:ef:45:
9c:40:52:14:18:2b:90:37:14:0c:0a:d7:ea:40:59:ae:fe:0d:
9b:f1:4c:d2:9a:e6:f7:70:c8:fc:e5:70:1f:4c:b3:62:4c:e2:
00:2e:6b:b6:b7:ca:5e:8c:b8:95:7b:da:24:fc:b4:a1:ad:2a:
24:c1:ea:da:4f:8d:5b:f2:9b:0e:fb:f3:66:07:6a:83:7b:c9:
82:b7:43:00:a4:fe:00:11:c7:e5:fb:66:a3:99:11:0d:51:b9:
3b:9b:75:9a:7b:0d:e6:5b:0b:0f:12:7e:93:7b:30:4e:a8:64:
7e:6f:8d:c6:fe:5b:18:5a:ce:d2:a8:76:e2:7b:bd:9d:b9:96:
0e:72:c9:c3:90:3c:16:20:2e:33:01:d5:ae:2f:51:f9:28:44:
e5:87:73:3d:96:fc:b2:0a:db:cf:89:2b:b4:a8:74:10:5d:b6:
82:e3:88:e9:e8:0f:26:19:b5:af:1f:c8:b5:65:91:6a:88:73:
b4:ae:f3:cf:32:01:31:86:56:5c:6f:0f:87:7d:d8:af:e6:82:
48:14:f0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:34:35 2025 by rpki-client