Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier: hzYRmOtzpnDHOVFxOA++Sw0CALX+HnX3A8APdPG+c1A=
Subject key identifier: 4A:30:53:4E:BA:F4:4E:90:05:75:B7:B0:E3:C8:FF:CC:81:48:F4:70
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 0196C3F091D2C6020B316A466E296D62C3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 10:00:45 +0000
Manifest this update: Mon 12 May 2025 10:00:45 +0000
Manifest next update: Tue 13 May 2025 10:00:45 +0000
Files and hashes: 1: 4_25V1XttJ1qw5vFtRBIGOQ28e4.roa (hash: jrFE5OHsnZSV8YIte/QlrxAa0XpS7lb+A+yiq4ZHdDE=)
2: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: VvN58YCh6JoRhhsG8XBxl2xhUOurmvYbuN3sL/kjeeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:91:d2:c6:02:0b:31:6a:46:6e:29:6d:62:c3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: May 12 10:00:45 2025 GMT
Not After : May 13 10:00:45 2025 GMT
Subject: CN=4a30534ebaf44e900575b7b0e3c8ffcc8148f470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:54:2d:3f:81:44:3d:5b:70:48:54:06:b3:
1b:ab:b7:77:58:f8:1c:24:52:f6:05:58:e0:a4:56:
cd:c3:a7:c6:8f:ab:b6:75:fa:61:34:09:43:fa:c6:
33:a4:71:24:f0:59:7b:42:e7:24:27:41:ad:78:ed:
fe:30:ea:b8:71:7f:e6:af:b8:a4:83:2b:e2:48:62:
fb:a2:9f:fe:b1:ca:79:3e:9b:b2:b4:f2:8a:c2:32:
56:db:72:96:88:9c:5e:5f:b1:12:04:93:48:78:6f:
7e:24:f8:8e:57:c2:e8:ae:da:e7:e0:25:83:c2:3d:
f9:63:12:70:90:e9:05:94:cc:0c:9e:40:a7:d1:63:
f8:a4:5e:68:56:ea:12:62:73:52:ae:1a:a4:87:43:
3c:28:8d:08:cd:3f:1b:c6:46:a7:69:bc:96:95:57:
3e:5b:bc:45:11:6c:22:a1:32:c9:a2:2e:6c:3c:b6:
12:e9:25:fe:45:4e:4d:51:a1:a6:be:1d:b7:d5:04:
80:d3:1f:2b:c2:b5:92:58:9b:fc:bd:0f:91:e0:98:
86:01:ed:4c:69:a8:9c:c8:2d:d2:7e:1d:5c:6d:5b:
13:f8:a0:99:ca:c6:db:75:a8:8f:9b:12:69:8d:b3:
02:3f:13:82:e3:38:f5:59:66:3e:39:25:8c:5f:53:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:30:53:4E:BA:F4:4E:90:05:75:B7:B0:E3:C8:FF:CC:81:48:F4:70
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e7:66:dd:15:3d:49:7b:aa:87:c2:bf:0e:0f:b8:53:83:0c:
ea:99:38:c6:a6:b2:cf:a0:20:ce:18:1b:af:ed:20:d9:91:c4:
59:39:db:d2:26:f4:c0:7b:13:72:35:6e:eb:24:f3:00:60:ab:
07:fb:26:4c:a4:4c:a4:55:4a:ff:cd:dc:45:8a:56:2d:ef:9e:
49:49:e8:33:fe:b1:49:74:14:6f:98:17:f5:29:93:e3:12:ac:
ae:f4:1f:19:76:7e:6b:35:66:a1:c2:f3:02:4a:51:20:d4:d9:
1f:03:87:1a:56:6e:05:b1:66:6d:95:1e:32:e6:94:8c:21:26:
79:49:62:0c:3d:5e:99:74:fe:aa:cf:20:6a:a8:43:3f:c9:68:
e5:cf:a5:ae:c0:7b:1d:44:b0:9d:39:e0:8b:8f:5a:20:eb:06:
06:69:76:63:52:bd:e6:79:59:9a:33:21:01:68:5a:9d:27:05:
6b:5e:91:d3:f7:2a:d0:41:30:fa:b3:3d:ef:4c:e7:34:c9:74:
17:a7:5b:65:76:87:9e:e1:ad:77:4a:36:23:02:04:14:96:77:
1c:7a:a3:0e:16:31:c9:86:fb:82:1f:95:93:ac:a9:fc:58:29:
85:8b:2e:eb:c3:cd:37:f7:2e:65:09:6f:0c:d5:c4:37:5a:b1:
67:77:ab:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:51:26 2025 by rpki-client