Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
File: saC9QgWKA5D0Y8_rexfiHeC3VQA.mft (raw, json)
Hash identifier: wlAPD4si8JCo+Vaf0n58mMOFBQVlubhxbBONerLNtAY=
Subject key identifier: A8:FB:C4:2D:80:D7:4C:9A:FF:76:AD:95:66:E8:F0:B2:EC:93:68:FD
Authority key identifier: B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
Certificate issuer: /CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Certificate serial: 0196A01A7AAE2E3325767DF4383B9CEC686C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 11:00:11 +0000
Manifest this update: Mon 05 May 2025 11:00:11 +0000
Manifest next update: Tue 06 May 2025 11:00:11 +0000
Files and hashes: 1: M5ygsUf6TUqUYI8FV2cjTiESBdE.roa (hash: inJMcRO+0HtRn269DlSaUq0NeeQUCkuMxbxILPu+WG8=)
2: saC9QgWKA5D0Y8_rexfiHeC3VQA.crl (hash: F4MKu18RMMAqZtR8AI/3k1RBmrV9oVVPfd05DOoXelQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:7a:ae:2e:33:25:76:7d:f4:38:3b:9c:ec:68:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500
Validity
Not Before: May 5 11:00:11 2025 GMT
Not After : May 6 11:00:11 2025 GMT
Subject: CN=a8fbc42d80d74c9aff76ad9566e8f0b2ec9368fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:9a:60:96:47:db:7f:48:03:98:ab:f9:10:
5e:d6:16:f8:17:16:89:00:c0:74:97:5c:25:16:48:
45:77:42:0a:82:6e:0a:04:ed:ac:81:e6:17:b2:fd:
dc:79:25:94:5c:1c:ee:31:b9:ad:3b:d9:ac:6d:46:
d9:f3:78:5a:0a:61:35:33:d8:33:72:2e:8f:bb:ba:
e5:41:5b:cc:e1:b3:43:59:f7:d9:6b:f4:6b:30:34:
3d:69:ef:6f:1b:75:36:1b:32:bc:9e:cf:fb:bc:62:
c0:81:c2:8d:6e:4b:b6:d8:cb:23:29:13:45:5a:95:
cf:b3:3e:c5:ac:c7:b8:9a:04:f4:f2:c4:70:fe:e7:
fe:08:ef:d8:79:36:eb:59:3d:83:94:af:28:cb:03:
c0:1e:7a:c9:ef:ef:f9:46:16:45:2d:9a:6a:ed:ce:
b8:6f:67:e1:d8:3c:a0:54:37:d7:e4:f8:49:18:14:
40:bf:9b:8e:35:73:3a:f1:30:8f:28:6d:9c:09:69:
e3:62:c2:fa:81:ec:2f:d3:b5:f3:08:5e:f1:77:4b:
08:58:2e:00:b6:e4:ef:8a:9f:96:b7:74:a3:5a:fc:
cd:01:dc:f8:e0:17:90:ed:47:c6:81:87:b9:d0:b2:
28:68:e8:dd:50:2d:4d:6d:41:bd:35:01:e1:69:88:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FB:C4:2D:80:D7:4C:9A:FF:76:AD:95:66:E8:F0:B2:EC:93:68:FD
X509v3 Authority Key Identifier:
keyid:B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0b:ed:e4:04:37:54:8d:34:84:f1:84:7b:3e:22:32:13:70:
2b:c3:61:8c:0c:56:cb:62:3d:3b:16:96:1b:9c:3e:5a:e9:80:
14:21:0a:c6:1e:20:e0:ee:97:74:7e:94:d8:b1:88:7c:9d:5f:
ec:42:e2:80:04:3c:2c:bb:73:fa:11:b5:b6:22:37:5b:0d:08:
dc:a5:01:73:50:02:18:bd:28:24:22:2d:bf:b8:a5:c0:fc:78:
b6:ad:b0:b6:72:61:77:44:c1:2a:c4:dc:11:f1:81:46:bf:8c:
87:9e:2d:4e:7c:a9:93:0a:19:46:57:4f:dc:81:41:57:97:9e:
3c:d7:ad:22:1d:e6:f2:fb:c2:a7:b6:1b:9c:bc:12:68:78:68:
40:56:ba:3d:64:ba:83:d1:f5:15:00:29:32:f6:9b:b6:8a:df:
fd:e5:bd:15:01:d1:0a:be:d0:cd:40:f6:47:ac:0b:ca:f7:21:
ac:9e:87:69:24:dc:84:45:a9:6c:2b:bf:f4:f1:71:3f:49:18:
35:4c:34:87:55:94:01:42:b4:88:20:72:46:8e:54:c3:3c:f9:
84:f5:af:87:6c:9c:f2:ef:7a:54:78:72:55:3a:f8:78:87:e8:
e5:b4:01:f9:38:d0:9a:97:5f:d1:42:81:18:af:6d:2f:63:e3:
cb:e5:7a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:20:24 2025 by rpki-client