Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier: EuCxp3CWPfaEAC55zY8UeEQuDO8xfxpg5itFv9njzWM=
Subject key identifier: 20:39:76:5C:5B:57:30:43:2F:BE:43:FA:68:A1:2E:4C:D0:76:9B:C8
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 0196C79654B03B5E95E5BACD8E620C634308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 03:00:40 +0000
Manifest this update: Tue 13 May 2025 03:00:40 +0000
Manifest next update: Wed 14 May 2025 03:00:40 +0000
Files and hashes: 1: WTZTgFi28jLlym6OE35mFLAhldM.roa (hash: jSGkSx+xIVrc/nZDnmv+Qse1KJ3JV2HCFfbdRdP+Xro=)
2: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: 1sB8OGM/sCjYAUc10U5FHmrI7eSBuNKmCD9LmuBIpAo=)
3: woxyfr4YHK9ZGgB6eP_og7DkRmY.roa (hash: 8ItNkdXM0aYCSxvQ5MhcZhdiy0lnPAozqUHboW5SaAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:54:b0:3b:5e:95:e5:ba:cd:8e:62:0c:63:43:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: May 13 03:00:40 2025 GMT
Not After : May 14 03:00:40 2025 GMT
Subject: CN=2039765c5b5730432fbe43fa68a12e4cd0769bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:ac:50:05:5b:3d:37:ef:d6:42:63:2d:69:
5a:b4:93:e5:7e:36:40:32:40:b5:3b:d7:d5:21:b4:
c0:73:72:69:d1:b1:c7:c3:2b:4f:df:4c:91:16:5f:
03:63:3e:19:53:93:6e:9b:d3:a4:79:ce:52:f1:f5:
a2:f2:9b:74:cd:51:d9:b8:0f:5f:50:a3:fe:b7:da:
2a:68:67:5b:b4:06:48:1a:65:58:a9:cf:e0:7a:fc:
9a:7b:83:c4:6a:07:6e:51:4f:ef:2e:c6:22:07:48:
77:8c:0b:2d:2c:a6:75:17:f5:46:29:a8:28:27:58:
6c:b6:d4:21:af:5d:fa:66:f1:9c:af:cf:93:01:51:
be:53:e0:4a:81:6a:59:54:23:e4:a2:bb:de:cc:2e:
3e:58:67:65:22:9b:32:51:f1:ea:56:0f:e2:d1:d3:
5a:38:bf:17:84:08:ee:c2:86:c9:5f:e8:f9:a6:11:
bf:69:04:e7:3d:3e:55:0e:62:9c:7e:50:b4:a9:12:
23:ee:d9:22:ff:d8:55:2d:24:d7:55:bb:46:c9:ba:
0d:75:05:0c:82:49:42:3b:7b:ac:d7:bb:40:c9:c9:
db:c5:01:2e:8a:77:19:54:ed:03:a6:22:b9:21:b3:
86:69:95:ee:fa:45:ba:c9:ef:ab:0e:d3:7f:b1:15:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:39:76:5C:5B:57:30:43:2F:BE:43:FA:68:A1:2E:4C:D0:76:9B:C8
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ce:ec:3d:b3:d5:18:c7:12:cf:32:ce:d4:26:ae:05:16:10:
1a:b7:7d:f0:48:5d:48:39:7c:3d:77:7e:62:38:cb:1e:80:83:
d9:35:4f:3f:4d:c7:0f:27:8a:83:01:db:7d:2f:67:a9:ad:c5:
12:86:74:a0:41:0a:db:94:1f:27:a3:96:d3:71:78:d7:00:39:
04:5c:a2:72:fb:f0:58:69:a1:66:49:59:3e:36:bc:c4:21:3c:
6c:32:e9:da:c0:aa:f6:f6:fe:79:a3:1a:30:c5:e6:76:77:46:
76:df:28:dd:9e:39:fa:e5:13:90:2d:e5:88:48:5f:e8:ed:fa:
9d:a7:83:ff:c6:9d:fe:07:3d:1a:0a:3d:bd:6d:b1:77:c2:8a:
ff:c1:31:4b:30:10:e9:80:d6:89:64:bf:11:36:7c:e8:70:46:
9e:08:a6:f4:35:35:ac:c7:f1:24:e1:19:c4:b2:e7:91:ff:b0:
03:5d:0c:8b:96:0d:3c:46:90:32:2e:6e:42:99:88:f8:8d:f1:
c6:e6:61:0c:cc:ef:3b:43:63:50:b4:d6:29:15:89:fe:2a:a1:
c7:9d:7c:78:f4:fc:0f:4c:68:32:c8:5a:e8:59:09:31:92:2a:
9c:e4:0e:54:af:11:46:ce:86:53:3d:28:a7:73:8e:65:20:91:
24:ab:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:43:57 2025 by rpki-client