Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: IbVnqYe1pOesmBpQ3/HJALA3yB0gYyUPeGE4fSRjjh8=
Subject key identifier: 3E:E0:B6:35:7E:05:14:2B:77:C8:93:A4:64:98:49:DD:7F:DC:9B:A1
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 0196DA0AADA1CBFB7A7483ED00E5B2945477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 1253
Signing time: Fri 16 May 2025 17:00:54 +0000
Manifest this update: Fri 16 May 2025 17:00:54 +0000
Manifest next update: Sat 17 May 2025 17:00:54 +0000
Files and hashes: 1: 1-HjAvExmkGaxksSqn85_Dy6VvJM.roa (hash: 8D5kTAs24JEFoR1NyKeFUo+R/Y6CsZUzK26/NpwtHaw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: g8ji5IKNjf0OYFGJMjdJ7CBIWzYVTS+sSHWTNAyWdUg=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:0a:ad:a1:cb:fb:7a:74:83:ed:00:e5:b2:94:54:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: May 16 17:00:54 2025 GMT
Not After : May 17 17:00:54 2025 GMT
Subject: CN=3ee0b6357e05142b77c893a4649849dd7fdc9ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:0c:0b:8b:d8:60:45:f6:70:18:cc:f3:93:
8b:4d:78:c8:f8:42:d8:c6:e6:67:2c:9c:77:48:95:
e4:ed:2f:cb:bc:4f:c6:83:7e:2a:4b:2d:83:c2:c6:
c1:27:8f:65:02:70:85:a6:b4:55:30:fa:c8:0c:7d:
45:f3:eb:ee:44:80:4f:23:32:77:8e:9f:96:f4:11:
1d:5b:6d:f1:ba:7e:d7:c6:76:a5:6b:4f:1f:32:1e:
6b:0f:bc:63:9d:46:91:15:e3:78:de:30:e3:84:fd:
24:6d:88:ea:0d:92:73:1c:1d:20:7f:41:98:29:08:
9d:19:16:9f:78:50:82:d0:c8:d1:97:74:b7:38:2c:
84:b4:30:f1:a9:d6:18:68:e0:07:d3:92:48:30:ad:
04:bd:8c:f2:3b:2b:c0:a7:6b:b3:ce:f2:30:fa:2b:
b0:7d:2e:b4:24:6a:11:b8:ed:5c:38:59:0c:f3:18:
14:9f:65:da:8e:57:f6:46:12:88:e2:5c:ca:0f:c6:
96:ec:ca:30:84:5f:9a:f3:8d:58:99:a2:ef:51:ee:
a8:eb:1e:d4:39:49:33:8b:44:6d:4f:21:e4:b1:de:
a7:04:8b:4f:fc:49:93:4c:70:02:f7:81:cf:ab:9e:
40:28:e4:93:1f:cc:28:1d:f5:51:9b:6a:83:71:83:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E0:B6:35:7E:05:14:2B:77:C8:93:A4:64:98:49:DD:7F:DC:9B:A1
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9a:df:88:f4:34:07:e0:00:1e:54:b7:3f:92:a1:61:81:8f:
c5:52:d3:55:20:25:1d:4d:60:59:8f:5f:a9:63:e7:33:d1:5c:
e9:3f:60:60:4f:af:b8:e1:d9:19:76:b2:5a:ac:a4:ed:34:02:
ac:aa:7c:5c:a1:c2:3a:b5:d8:7e:bd:54:65:3d:af:00:79:cc:
4a:83:a9:1a:8d:ec:d4:39:5d:48:2f:ec:89:e2:d8:7b:3b:1f:
3e:70:7a:65:05:7c:9f:2b:bc:fd:67:95:a0:b8:02:51:fe:64:
00:aa:2d:18:29:a2:05:77:24:1e:69:9e:fc:9c:b4:2c:96:62:
5b:58:37:62:f6:b8:d3:d7:95:4c:97:c3:8d:66:1a:8a:a3:42:
ab:a5:46:fa:d1:51:9d:05:99:db:41:41:28:31:8e:4e:69:c4:
12:8b:94:a9:03:be:87:03:8c:82:5e:c5:73:d6:ee:e4:6a:e2:
71:63:84:bf:1b:1b:5e:cf:0c:8c:61:a6:83:c7:ce:6c:48:aa:
a7:dc:6a:bf:2a:a2:85:e8:66:f8:99:82:b4:7f:93:ee:e1:c7:
af:d7:b5:20:f4:31:19:67:62:1c:56:e9:f9:93:59:bc:5f:4f:
81:fd:86:19:f3:b5:5c:2c:42:90:4b:67:35:a8:79:2b:cd:25:
fe:49:b9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:49:59 2025 by rpki-client