Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: 8pzeu04rKcgTJLAtSUnOeRfdFa/JWzPRZjEGSnkcavk=
Subject key identifier: F6:CA:90:B1:95:CD:68:42:D4:13:73:7F:DE:8C:10:E0:F6:F8:07:8B
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 0196A051E87F568986E96B16F57671087F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 12:00:44 +0000
Manifest this update: Mon 05 May 2025 12:00:44 +0000
Manifest next update: Tue 06 May 2025 12:00:44 +0000
Files and hashes: 1: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (hash: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: xTg2KQq1p62WLYh7JlWdE+1HM+gaUS4d2klnfF1IoCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:e8:7f:56:89:86:e9:6b:16:f5:76:71:08:7f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: May 5 12:00:44 2025 GMT
Not After : May 6 12:00:44 2025 GMT
Subject: CN=f6ca90b195cd6842d413737fde8c10e0f6f8078b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:86:b6:bf:74:b8:02:42:3a:1b:a5:18:ae:
c9:ef:71:75:68:77:4f:a1:06:cd:b8:14:aa:77:2e:
76:9d:b9:59:48:90:b9:e0:e0:ae:2c:d4:6a:5f:94:
e5:c7:4c:33:ca:11:2d:b0:fd:82:df:8f:67:68:09:
11:fc:6e:6e:08:ef:d4:dd:95:c8:1b:8f:7d:12:68:
be:08:93:fb:e4:62:4b:dc:f1:b9:c8:0e:5f:21:b8:
2f:e1:04:a0:49:d3:6b:cc:a5:b4:9f:12:84:a2:dd:
77:30:40:3b:be:04:dc:e3:34:4a:f7:df:88:79:2a:
ec:b2:9b:c6:8a:fe:44:ea:51:4d:5b:75:0c:be:42:
ee:3d:26:e2:c2:79:0a:78:f7:d5:e5:e4:ac:74:b6:
a7:24:d8:2c:3b:92:f7:c0:2e:c4:96:42:98:62:9a:
9b:ff:ad:42:e3:b8:b6:ab:f7:ae:c2:53:8c:da:8a:
15:2a:1a:34:a3:25:cf:e1:fd:fc:94:69:d1:88:d2:
90:87:a2:f7:aa:41:3a:4b:5c:a2:9c:ca:24:df:68:
99:ea:b5:df:e4:70:f0:f7:f5:11:44:21:59:8c:ef:
f0:10:1f:c1:84:2b:6c:a9:5c:08:fc:21:10:57:66:
ed:4c:d1:72:e2:24:28:8e:7b:03:94:94:6b:fd:79:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:90:B1:95:CD:68:42:D4:13:73:7F:DE:8C:10:E0:F6:F8:07:8B
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:26:53:2f:8b:c1:ce:5e:d7:ae:2d:b0:10:a1:22:30:9a:ae:
b1:bf:7e:11:09:d5:0c:0c:99:b0:48:b4:2c:09:72:38:b7:cb:
5a:64:84:8a:13:c1:a2:2a:83:ed:c2:59:67:0e:d9:33:b6:14:
09:ef:39:61:2d:27:4a:05:dd:36:18:f5:9a:43:56:a4:b4:64:
2b:f1:2f:ca:09:72:3f:6d:a1:80:e5:a7:67:84:4e:40:f6:44:
6d:53:58:ba:d2:7e:e9:5d:a2:12:5e:b3:0e:17:9e:cb:40:31:
86:a7:2c:9b:34:07:4e:68:05:43:f3:82:e2:1b:60:c8:fa:ee:
3b:d9:eb:4a:38:d0:37:cf:37:dd:ac:63:84:68:02:b7:35:e5:
d4:74:54:21:e7:72:47:59:e4:09:1e:2c:46:47:9c:c3:6c:20:
cb:62:f6:52:0d:12:a1:f5:44:e1:4b:d6:d2:55:21:36:41:92:
63:77:90:61:00:44:20:db:24:1d:77:44:95:5c:91:d4:09:ad:
9c:7f:74:66:82:ea:49:bf:1f:ce:93:a9:b1:90:d6:ef:fd:19:
70:f1:97:42:c0:dd:ed:3f:43:65:58:d0:ba:06:73:72:99:ea:
33:61:81:ae:ea:d2:63:f5:21:79:0c:24:af:dc:97:79:db:51:
f7:f1:a4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:47:07 2025 by rpki-client