Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: f0kNX0xU068EKiMA1g8TkZwDLiglXy2JZjx6+OC1VtM=
Subject key identifier: C0:7E:D0:A9:5D:C8:DD:2F:2C:C5:DC:05:C9:3E:D6:F0:D7:FA:6C:06
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 0196C917076D1805D13BFBFF64D454A41F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 10:00:51 +0000
Manifest this update: Tue 13 May 2025 10:00:51 +0000
Manifest next update: Wed 14 May 2025 10:00:51 +0000
Files and hashes: 1: 9t22owOYC7Mw8jA_t9_7gDwHF1o.roa (hash: iV2EeKk18zEE+h5tJ2D8tk3awOGzeRIEDnvnGsDqR3g=)
2: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: vgS5Diskrblef/P7UlTbn06iWR0DXH9JMNGxmeM4U1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:07:6d:18:05:d1:3b:fb:ff:64:d4:54:a4:1f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: May 13 10:00:51 2025 GMT
Not After : May 14 10:00:51 2025 GMT
Subject: CN=c07ed0a95dc8dd2f2cc5dc05c93ed6f0d7fa6c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:ef:2a:d1:f0:5f:37:f8:48:03:99:5c:a6:
fe:e0:aa:d4:04:e5:45:d8:05:6c:70:a4:1c:3b:f6:
d0:f5:05:bd:ed:70:9c:61:63:09:b3:8f:51:2b:80:
d8:3d:a4:9e:60:31:6d:cb:d2:3a:7e:7b:4b:66:49:
43:fe:be:f3:e8:4d:12:a9:c5:33:1a:05:d4:24:b7:
03:2f:a8:62:b8:ee:73:8b:95:c1:48:fd:10:ef:85:
3a:c3:70:b2:c9:f8:3b:ce:9c:d4:e4:93:34:f4:b2:
dd:e3:27:70:ce:08:51:d0:ec:a4:fe:25:6c:84:05:
63:40:50:45:08:01:d8:85:e6:4f:0b:04:de:7c:18:
97:1d:91:ea:29:26:b9:0b:49:98:c8:af:00:4a:eb:
a7:63:df:c5:64:eb:6f:fe:e5:69:88:9b:df:65:4a:
57:65:bf:9b:a9:17:a1:0e:4f:44:67:00:c2:28:6f:
0b:42:5a:78:a0:3c:a9:a9:9e:5c:44:68:7f:6f:1f:
99:6a:9a:fa:0b:3b:73:0e:79:cf:05:ba:e3:69:df:
46:f8:ed:c0:40:41:59:73:1a:34:c8:e1:29:4a:61:
fb:d5:d3:03:98:6d:a5:cd:13:29:6a:94:6a:03:86:
36:f6:70:45:79:2d:c5:57:21:33:6e:7c:7a:3d:77:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7E:D0:A9:5D:C8:DD:2F:2C:C5:DC:05:C9:3E:D6:F0:D7:FA:6C:06
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:19:98:a7:27:dc:1c:30:bf:81:ee:70:f1:c2:54:85:ea:23:
c7:ae:92:dd:64:4a:5d:4f:e7:65:8e:ad:77:47:01:ce:c9:75:
ac:0f:ca:44:05:df:32:91:b7:92:59:94:73:c7:36:94:c6:42:
41:3a:d3:43:fb:58:97:8d:f9:9e:21:b3:ac:3d:eb:07:18:6a:
ac:1d:d0:0f:e7:72:f8:98:2b:60:56:d6:4c:b2:f4:73:41:51:
46:3c:4e:63:b5:fb:34:5e:5b:6a:fd:af:b1:0c:60:d7:52:0b:
ff:b3:da:f8:0a:f7:9d:43:8d:02:a4:a9:a4:12:c9:b8:fc:9c:
cb:17:3f:31:c1:f4:eb:23:d8:d9:9f:83:46:af:c3:28:78:50:
2b:ac:6d:23:8a:61:bf:95:1c:e0:12:5a:b6:79:69:e9:91:38:
3d:46:85:94:fa:05:b4:3a:7a:37:6d:23:4d:f8:7c:e0:b2:d2:
6d:58:6b:13:5a:98:46:67:9f:5b:2b:d7:ae:bd:11:81:83:6c:
c3:ac:f5:89:0b:f2:02:fa:a2:a6:3c:06:b1:a5:ff:3c:13:5d:
54:7f:4c:79:05:77:0d:70:35:93:8b:13:48:4f:10:19:e5:48:
7b:5e:4d:bc:cc:64:90:65:7a:08:64:56:69:c1:a5:8e:b5:e8:
43:e2:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:08:26 2025 by rpki-client