Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
File: S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft (raw, json)
Hash identifier: DxErnLs8s3R+65hZEJ4rGIZEqWh5tkm5+B+gpw/5l2U=
Subject key identifier: A5:8E:24:11:E0:88:27:94:1E:7A:9B:7E:D6:6C:B7:EF:93:E6:E9:D4
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial: 0196C57108D879237D7C60814C32066BB309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
Manifest number: 14EE
Signing time: Mon 12 May 2025 17:00:41 +0000
Manifest this update: Mon 12 May 2025 17:00:41 +0000
Manifest next update: Tue 13 May 2025 17:00:41 +0000
Files and hashes: 1: S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl (hash: 11fRncg7tist5TiUrnXU7b4s26dC4brJB/JJEXyyINY=)
2: zO3b4_gkop7bpRFmwUyQSnP3CuQ.roa (hash: KQ8uWDK74BxQd55e4CkD8HOGjkQGRjBDcA3U74QNwgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:71:08:d8:79:23:7d:7c:60:81:4c:32:06:6b:b3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Validity
Not Before: May 12 17:00:41 2025 GMT
Not After : May 13 17:00:41 2025 GMT
Subject: CN=a58e2411e08827941e7a9b7ed66cb7ef93e6e9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:6d:74:68:77:c2:a6:fa:b6:b1:e2:14:ad:
36:6d:68:33:9f:21:a7:29:66:cb:92:87:9e:33:a7:
5e:eb:fb:1a:14:19:12:95:68:8f:0a:d5:c3:8a:a2:
be:83:cb:b9:35:9a:5d:b0:c2:31:cf:a9:77:02:09:
4b:0c:7f:02:9f:59:74:ed:59:9e:8c:7b:e0:98:60:
7f:7a:98:31:f6:99:64:f3:e3:15:23:3d:ad:53:68:
1a:53:61:ca:63:d7:c0:57:8a:69:7e:9e:9c:59:8c:
6b:f7:9c:45:6f:68:03:b1:cc:ed:22:4a:f3:53:2c:
0d:40:39:8b:08:d6:c6:c6:f8:e7:84:f2:bd:56:1e:
58:ce:bc:ae:28:26:f5:7f:b6:fd:ec:a3:17:1d:59:
ca:37:1f:a3:44:e9:07:13:e8:35:b1:53:91:01:2a:
d6:57:ec:93:bb:31:ef:04:55:b1:fa:1a:f5:bf:4b:
82:52:43:a1:82:5f:ef:25:0b:3c:5a:de:3e:04:f0:
b0:b2:57:71:7e:54:29:12:3f:89:da:48:69:f6:38:
0d:db:fb:2e:70:d6:f9:02:d3:b7:89:dc:19:5e:eb:
05:64:23:5f:84:f2:f7:88:9f:de:ae:43:66:77:ba:
b9:21:f4:3c:ca:94:10:8f:22:bb:13:89:3b:db:3d:
01:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8E:24:11:E0:88:27:94:1E:7A:9B:7E:D6:6C:B7:EF:93:E6:E9:D4
X509v3 Authority Key Identifier:
keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f6:0b:9c:bc:7e:bb:0e:53:02:c7:6f:84:0d:a3:74:9b:a0:
61:28:c5:8c:80:ca:52:da:20:26:b3:0d:a4:1a:32:a9:47:2c:
38:2f:4d:e7:0c:ef:94:43:8c:9c:df:1a:ad:fb:e4:fc:21:0d:
25:7f:63:56:1e:14:07:d6:80:0d:01:a8:dc:fe:12:13:ae:d2:
b3:0d:7d:0a:f9:e8:e0:bb:be:67:d0:fb:81:e2:31:f3:74:f6:
79:e0:09:68:fe:4c:5b:6e:02:31:d4:91:e3:61:15:db:ae:d4:
92:74:e9:76:dc:04:ce:88:78:93:bf:97:2c:42:9c:a1:57:b0:
64:94:68:ef:5f:da:03:08:1f:a7:00:6e:c4:74:73:56:b2:7b:
2d:07:81:04:3b:a5:3b:80:b4:81:e8:91:50:8d:a5:88:27:f5:
f6:a8:da:1d:b1:b3:f5:0b:9b:83:03:97:13:17:88:9d:1c:bb:
56:3f:4d:65:e8:f8:56:10:5e:dd:fa:1e:fa:c4:b9:01:66:4f:
9c:5a:b0:fa:92:25:80:1f:72:da:db:97:26:96:fa:4c:3b:22:
59:d4:e1:9b:5f:89:ce:6b:2c:0d:bd:cc:8c:90:25:7f:d7:9c:
1f:d3:8c:74:66:63:d0:95:d4:75:3a:c0:a5:3a:7c:3d:ee:b3:
0e:e8:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:12:59 2025 by rpki-client