Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
File: 9S8g0NOy78W8l6R7d1vYuheU-eU.mft (raw, json)
Hash identifier: cwlad1ygYbrJNSrIRPUw5b2N/sDaY4bj/YCKGx1VArA=
Subject key identifier: 3E:40:07:AC:BE:4A:49:5B:40:49:4B:C3:82:9F:08:B2:6E:69:ED:DF
Authority key identifier: F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
Certificate issuer: /CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Certificate serial: 0196A72F61B1AF5D17BF0A2FE37FD061C947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 20:00:22 +0000
Manifest this update: Tue 06 May 2025 20:00:22 +0000
Manifest next update: Wed 07 May 2025 20:00:22 +0000
Files and hashes: 1: 9S8g0NOy78W8l6R7d1vYuheU-eU.crl (hash: mITEE0gR6CQ/gv+NpKzvAPYhN1ilrDPn/eMMLC3WynQ=)
2: CEOAcQGoF-M49o3FqEoqpthBq7c.roa (hash: o7aWAwYKfU3X1B2JaQq/PQb9tN2IBMnSaEyBCSBzIfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:61:b1:af:5d:17:bf:0a:2f:e3:7f:d0:61:c9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Validity
Not Before: May 6 20:00:22 2025 GMT
Not After : May 7 20:00:22 2025 GMT
Subject: CN=3e4007acbe4a495b40494bc3829f08b26e69eddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:3c:0d:5a:31:e5:70:d4:70:0d:fe:d7:e4:
aa:56:d7:44:c2:da:90:22:bc:45:5f:b9:a0:d3:75:
9c:93:35:2e:2f:2c:ef:2c:ab:79:f0:ed:ff:4c:d1:
14:52:67:1c:7c:ec:a0:57:a4:ca:65:e1:89:46:b1:
0a:44:15:3a:7e:a3:2f:15:aa:c3:b3:f7:d3:d4:07:
07:ba:d9:ab:2b:3a:8e:0a:c0:91:cc:5b:f7:20:69:
ff:20:e3:1a:7f:75:91:83:1d:ed:23:d6:9a:fb:3e:
f7:47:ea:fa:44:67:54:76:7c:81:ac:28:59:f8:89:
42:e9:07:50:6a:e5:21:98:4a:21:7f:2b:81:f5:45:
35:4d:8b:8f:e1:cb:08:e6:98:e1:8b:8e:c7:04:64:
6d:fa:86:36:df:9f:d9:99:de:66:e1:85:5b:84:5e:
f5:4f:ed:62:f6:12:27:a6:d8:82:27:0a:a3:fd:c6:
0a:15:09:7e:db:a1:02:b1:dc:88:5b:1c:eb:71:28:
6a:0f:20:a5:51:f7:14:91:1a:66:36:8f:2d:d8:89:
31:90:e0:45:1f:e6:c8:a8:67:b5:c0:d3:9a:39:da:
6b:63:ac:e3:5b:06:08:12:83:be:d6:0c:4d:91:28:
c9:70:ad:37:e6:56:eb:f4:55:c2:14:53:7a:fd:79:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:40:07:AC:BE:4A:49:5B:40:49:4B:C3:82:9F:08:B2:6E:69:ED:DF
X509v3 Authority Key Identifier:
keyid:F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:eb:02:7d:f3:a8:d6:90:42:e1:4c:16:79:76:bc:58:2f:94:
cf:72:80:d2:29:7d:90:0f:94:9f:ff:3e:b5:bb:62:72:f1:3c:
de:32:eb:9a:81:76:a2:9e:9c:b1:e0:95:84:8f:e1:33:32:32:
d0:9c:7d:e0:b0:2a:bc:00:7f:68:6a:c0:0c:7f:0a:e2:32:da:
fa:e5:21:3f:92:f4:07:a6:f8:e0:92:b0:00:e8:a3:d8:7b:23:
e0:bc:c5:2e:73:bd:9f:31:05:19:35:cb:bf:73:a6:13:6b:f7:
82:b5:c4:c9:f7:76:48:54:db:3e:ba:c9:2c:bf:59:08:ae:41:
10:bc:df:6e:a6:50:28:19:61:6e:12:ff:f5:e6:02:ea:f6:e9:
cc:f5:48:fe:79:aa:0b:4d:4e:05:2c:02:28:7e:1f:a8:5a:b4:
28:e1:fc:22:45:39:da:96:1a:94:14:b8:89:c1:82:62:02:37:
d1:9c:fc:33:b0:c9:70:36:e2:b6:33:43:d3:cf:24:cb:2d:2a:
f8:b9:e7:5c:79:47:08:6f:26:4a:7c:5c:ff:2f:e3:34:25:93:
ad:1d:d3:79:d9:d3:e1:ed:51:76:b9:7c:0d:25:5d:2d:8d:2e:
e9:b8:e2:92:61:1e:43:18:18:ab:56:de:ac:0d:27:37:14:43:
2b:8b:3a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:10:23 2025 by rpki-client