Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: ihQn96q3AkI1cC/zW9xRDHlbrlnWpS4O6woD7myNkPQ=
Subject key identifier: DF:E2:B7:4D:75:69:C5:1F:67:22:DF:B8:08:6F:55:EF:93:80:D8:D8
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 0196B6A26B47BF04EF8A091E0D57255E55C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 20:00:19 +0000
Manifest this update: Fri 09 May 2025 20:00:19 +0000
Manifest next update: Sat 10 May 2025 20:00:19 +0000
Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=)
2: Lqe5vcwgWue09k7p7ctNg9AlXcM.roa (hash: YaDYxTi/SH2+EMKhFcDi7OA2pSDfUeTirPWPAhdJeo0=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: KpC/51BamPpkrFvGfz8TlfFYml3YFAQzXiesVslfrG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:6b:47:bf:04:ef:8a:09:1e:0d:57:25:5e:55:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: May 9 20:00:19 2025 GMT
Not After : May 10 20:00:19 2025 GMT
Subject: CN=dfe2b74d7569c51f6722dfb8086f55ef9380d8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:c9:38:a6:7e:6c:a5:e8:f4:12:83:15:b9:
17:9a:79:11:15:83:4d:58:39:e9:39:11:bd:0c:f3:
4b:b9:6b:3e:05:ef:89:f5:3b:18:c6:a6:40:68:1c:
1a:c9:78:73:fd:a3:4d:d8:63:e8:58:91:53:c8:78:
fc:3d:03:17:63:1f:32:b3:23:fa:38:e2:3c:08:ff:
d7:bd:aa:45:2a:b8:44:f5:9c:49:07:77:b7:ab:a0:
e7:c6:d7:68:0f:76:fd:35:ee:b7:de:7e:17:23:96:
6f:a3:33:c7:d8:cf:50:3f:22:93:86:ff:38:67:db:
73:2c:b9:e7:61:72:aa:cc:e2:04:cc:27:4a:d0:a5:
8c:5b:a6:1f:94:4a:5a:18:99:d6:9d:28:3b:87:3a:
98:bd:56:20:a8:b2:7a:1a:fd:69:37:bc:7f:11:99:
e1:42:27:31:68:56:5a:3c:fb:b3:91:f9:54:18:36:
d5:70:45:1d:0b:1a:c3:0d:ab:cd:0e:ad:d0:40:fb:
ad:24:c3:ed:94:6b:3f:0c:5f:b8:05:08:e9:3f:aa:
5a:b0:da:b2:e7:d8:7f:99:81:fa:b6:90:83:c4:29:
c2:11:27:a3:74:85:70:84:0b:c3:12:6e:60:b2:5c:
70:1c:4e:33:f0:31:d8:0f:30:ba:fb:23:d9:1f:0d:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:B7:4D:75:69:C5:1F:67:22:DF:B8:08:6F:55:EF:93:80:D8:D8
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8b:79:1f:90:ad:fd:8c:01:08:ba:47:5e:f1:08:a3:32:6f:
f6:2e:df:00:be:d9:de:61:1b:83:f4:77:3b:71:e4:55:0a:ce:
61:39:12:4e:7e:dc:fa:04:60:2c:31:0f:67:3b:3a:af:59:c6:
61:e8:2a:81:b9:04:c9:b5:45:23:d4:ef:ff:94:07:ea:42:8f:
45:d5:f2:4f:86:3b:42:4b:d2:41:62:25:69:26:6b:06:eb:ba:
81:11:57:6f:b0:93:7f:8e:05:54:5b:a4:72:e8:a0:30:b3:23:
d9:11:58:b9:9d:d7:df:55:c2:2a:6d:00:b8:21:57:c0:91:c4:
f7:df:5d:73:4c:9c:4f:51:38:fb:a9:90:8a:78:b5:cf:93:39:
6f:3e:13:3e:64:d1:8d:2d:fe:57:64:62:d4:d3:9f:71:fd:dd:
2b:f4:c1:fb:6a:27:47:62:99:63:79:0c:58:51:2f:79:a1:9a:
ee:42:3d:9f:7c:c5:8f:96:07:6e:ea:98:57:2c:5c:8c:0a:21:
34:6e:24:f6:d6:9b:17:3b:55:fa:02:91:47:0a:dd:91:fe:1a:
29:d7:01:ee:00:57:31:69:e3:1d:b8:5c:8d:76:f2:d0:86:7d:
e9:ed:31:71:21:70:44:c8:df:11:4d:a5:34:7f:1f:39:07:d7:
39:18:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:50:50 2025 by rpki-client