Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: D0WQMQkJwPlAlJot6JarPq73uYCYmY5Uz5bfH7Yj37A=
Subject key identifier: C5:2E:3E:4A:55:77:1A:88:B9:88:A7:2F:C8:01:49:53:6C:6E:A5:A8
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 0196BE9328278F82C7676F50DCD69BCEF8FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 09:00:37 +0000
Manifest this update: Sun 11 May 2025 09:00:37 +0000
Manifest next update: Mon 12 May 2025 09:00:37 +0000
Files and hashes: 1: SE867Co1dWwT9rn_iwUHdqZbJb8.roa (hash: gDn91MwxNsmg9NA7daGFqFT1lPwuLwOn38cGeI8H8VA=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: 7HAIMGKQAVVvOwgA0s65TTDopigE8LqgybyhvE4EzJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:28:27:8f:82:c7:67:6f:50:dc:d6:9b:ce:f8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: May 11 09:00:37 2025 GMT
Not After : May 12 09:00:37 2025 GMT
Subject: CN=c52e3e4a55771a88b988a72fc80149536c6ea5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:f0:a5:56:84:2b:81:c0:4f:61:c9:af:4c:
f2:90:5b:2f:af:f2:a2:b3:37:d2:9e:6f:a3:94:0e:
77:da:b8:67:62:4c:75:66:25:34:a7:75:5f:a3:60:
ae:03:bb:17:29:87:3c:bb:12:cd:2e:d1:45:26:8c:
e4:f4:42:57:5c:98:43:4f:53:2c:a0:24:84:34:75:
14:70:41:fd:e7:50:23:2a:37:69:1c:a0:38:06:92:
13:e1:ea:f5:48:c2:9b:2c:08:4d:85:22:6b:b5:26:
de:5b:69:8f:54:6c:ca:d7:1f:02:c0:8f:e8:18:62:
dc:3d:af:f3:2b:48:60:1e:df:85:74:18:0f:f4:97:
f0:7d:ef:2a:bb:0f:28:eb:33:9f:05:1a:1e:3c:b0:
59:a3:9d:a8:a8:d6:dc:7e:14:45:17:83:18:1f:2e:
b1:8f:94:60:02:e4:1d:99:ab:32:63:5f:a6:2b:b6:
7a:6d:51:ea:33:b9:c9:07:69:08:f6:e6:74:56:de:
0e:d0:dc:b2:ff:67:89:54:86:fc:37:b9:8d:d1:04:
fd:c9:0b:60:49:31:f6:05:f6:23:74:6f:02:25:32:
2f:80:b7:15:59:ec:bd:1c:38:06:f4:ef:69:fd:03:
4d:f3:08:e8:7a:01:7e:78:8d:e6:cd:9d:b4:cf:b9:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2E:3E:4A:55:77:1A:88:B9:88:A7:2F:C8:01:49:53:6C:6E:A5:A8
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a3:5f:e3:49:c0:00:bc:58:86:aa:94:94:ad:37:2c:1e:0f:
99:dd:e1:6c:3a:95:2c:2e:f8:c6:62:3e:bb:40:87:b8:f9:0c:
2e:04:fe:59:9b:e7:db:3d:03:f6:14:69:43:52:15:0a:3f:e3:
8b:a0:24:62:6c:20:34:14:3e:f0:d5:3c:f3:24:4b:62:21:a2:
4a:95:02:fc:73:1e:51:51:c3:ef:ba:94:03:39:bf:f6:bc:8a:
bc:8f:52:ba:58:23:30:b3:cb:46:3b:93:f2:51:fc:32:99:cd:
09:20:52:87:3f:10:f8:91:9f:4c:7c:66:9f:98:46:46:9f:59:
00:12:ce:86:2f:d4:bf:6e:97:80:2c:95:66:c7:ad:65:22:75:
c2:9f:2d:2e:93:c5:8e:28:b9:cb:52:90:b3:37:1e:bf:e0:10:
f5:1c:57:d5:0a:e6:54:c2:09:49:54:7e:72:67:bf:b0:f6:be:
11:cd:28:e5:ca:8c:c7:ce:bf:a0:98:7c:9c:97:11:34:41:5e:
de:f0:e4:6a:fb:56:8e:26:f1:7c:61:b3:75:46:08:16:f0:31:
13:e9:a9:c2:ea:ef:2b:b3:ee:7d:ba:52:74:71:78:ef:74:59:
25:be:86:52:cd:d3:e7:1b:b3:38:8b:70:b5:87:e8:e0:56:20:
ea:40:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:28:51 2025 by rpki-client