Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
File: su7525PeEaAlPVqoxT7Mrg-cPTM.mft (raw, json)
Hash identifier: uXv3Ewrc8lPwZd2GQBE4AS77/nCGVCc2mNDp/jNc00c=
Subject key identifier: 94:3D:BC:76:B5:98:D2:70:3D:BA:94:3A:4A:CC:5D:5B:7A:CD:B5:0C
Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Certificate issuer: /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Certificate serial: 0196AA6731E56BCDD316B3020A717FFF0297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
Manifest number: 089C
Signing time: Wed 07 May 2025 11:00:11 +0000
Manifest this update: Wed 07 May 2025 11:00:11 +0000
Manifest next update: Thu 08 May 2025 11:00:11 +0000
Files and hashes: 1: HmEXSyMzNsE6ZXWyBUFqSz_-J_I.roa (hash: QHoycNdEbZMja0gAvjEgeC3E4wx2OI9vc9S4Y873m1w=)
2: su7525PeEaAlPVqoxT7Mrg-cPTM.crl (hash: /btIMSbTGHuM6gEBAZXWaBzJYft6DyOd49Dz7/ebvJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:31:e5:6b:cd:d3:16:b3:02:0a:71:7f:ff:02:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Validity
Not Before: May 7 11:00:11 2025 GMT
Not After : May 8 11:00:11 2025 GMT
Subject: CN=943dbc76b598d2703dba943a4acc5d5b7acdb50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:05:b3:89:74:8b:01:37:ec:d7:66:df:d7:59:
21:16:a6:bc:5a:f0:be:09:83:84:d1:b0:6b:e3:12:
d1:5d:f3:be:40:ba:b4:d4:58:17:bd:f8:30:d3:5c:
63:ef:85:66:47:c3:72:89:ea:1a:42:b1:86:e7:d9:
d0:7b:51:74:4c:6e:53:d1:30:d3:9f:95:3f:b1:b5:
44:91:37:51:60:ad:5a:87:e6:32:db:50:f9:aa:6e:
4e:f6:fa:b2:f7:c8:97:3c:73:8b:2f:36:7e:09:6e:
1b:42:c4:65:92:dd:e3:c4:52:53:59:a9:f2:33:6d:
7f:6d:0d:a2:4a:4c:25:dd:df:0a:e3:ee:de:2d:3b:
bd:b7:93:23:95:71:da:2c:2c:ba:b8:e7:86:b3:12:
64:bf:1a:c9:f9:f6:bb:01:c6:80:82:a4:44:af:f5:
cc:87:f1:bb:6b:91:d0:4d:c2:8a:c0:76:e3:c8:b3:
3c:1a:90:14:fb:82:5b:77:76:e3:b6:0c:86:20:9e:
86:89:2b:08:af:40:13:bf:a6:59:d9:9c:9e:44:f6:
07:90:84:ff:1d:05:a4:cb:17:10:cb:70:25:ab:c0:
5c:53:ae:de:61:97:e6:c7:e5:fd:13:5d:0e:a2:ca:
2b:f5:41:5d:63:d0:db:3c:8d:73:f1:38:85:90:b5:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3D:BC:76:B5:98:D2:70:3D:BA:94:3A:4A:CC:5D:5B:7A:CD:B5:0C
X509v3 Authority Key Identifier:
keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b8:e0:c6:d2:51:39:a9:e2:01:7f:a8:43:f8:6f:4a:c6:03:
cf:a1:50:1e:cd:f3:fd:c0:4f:cf:60:6a:27:fa:6a:5a:6f:19:
04:07:72:39:7b:fb:e6:c9:17:21:dc:16:71:b6:55:84:19:07:
e5:40:8f:6c:40:7d:65:74:82:29:9c:d0:ba:29:16:67:36:35:
4e:32:d4:ad:09:95:1a:b4:60:59:3f:08:82:86:09:ee:86:9f:
ae:11:7a:d4:e7:17:de:12:37:fd:e8:00:05:12:94:e3:38:59:
da:05:4d:95:4c:07:13:2d:f7:88:4e:18:d4:f9:04:bd:0f:16:
08:19:27:ae:29:e7:02:2e:ea:ee:39:6b:89:e3:50:03:ce:91:
cb:89:9f:60:49:a2:fe:db:05:21:b0:a4:9a:c0:e3:18:33:f9:
f5:8e:c5:f8:86:db:18:c3:b7:05:55:a6:1f:d0:45:d2:c9:20:
f4:de:13:3e:ed:04:75:06:f7:82:3f:23:15:cd:ec:ba:98:89:
75:6e:ec:02:4e:a6:2a:5d:87:c5:a9:1d:d9:85:8f:01:01:e3:
82:8c:f5:b4:d5:0f:b3:b8:a8:fb:53:3c:36:58:7f:8a:df:e5:
b5:9c:a5:8c:64:4b:de:24:36:82:0d:12:d3:20:2a:c4:08:d2:
e4:54:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:24:55 2025 by rpki-client