Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: C3zuqeEiVPu7rdjrgAPHr6DogVl4wmy2nqS3g9zLZII=
Subject key identifier: 75:3F:3F:53:97:71:C9:9A:34:7D:D3:2E:72:C2:63:86:6F:B9:C2:35
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 0196BFDC9CC8FC4AB78350BA70D7307FD0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 09DA
Signing time: Sun 11 May 2025 15:00:28 +0000
Manifest this update: Sun 11 May 2025 15:00:28 +0000
Manifest next update: Mon 12 May 2025 15:00:28 +0000
Files and hashes: 1: EmdE4lFlfaABPtiZtlnbFIKNWhE.roa (hash: xZDQuK6O09neLie5Q456W4oztNFuHLsLoArEyWHRJSU=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: MtCI1XWoclfzc8C3bmWIHi5RzDTGhj+ff3AVB/stTxk=)
3: lCpE9-_9vA0HzQAwKrWQ7gX2Gi8.roa (hash: YkwTTveNH0IQGCLC0ZIMEDB0zjPdx3yFhcYm5gkoPpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:9c:c8:fc:4a:b7:83:50:ba:70:d7:30:7f:d0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: May 11 15:00:28 2025 GMT
Not After : May 12 15:00:28 2025 GMT
Subject: CN=753f3f539771c99a347dd32e72c263866fb9c235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:dd:36:32:d1:e5:21:81:f8:3f:bc:d1:40:
24:d6:59:56:a6:ba:54:2e:ba:a4:d1:7a:2e:a3:f9:
24:98:93:23:44:d8:fe:8a:b8:ff:02:bf:3d:4c:a7:
4f:35:e0:b7:c1:55:8d:9a:90:f3:2c:2d:51:f1:fe:
54:67:66:4d:04:3b:c9:11:61:5f:e8:6b:4f:83:7c:
90:6d:5f:4a:2f:80:9d:cf:5b:11:e3:dd:18:38:21:
8f:6d:c8:ec:90:25:58:3f:60:4d:c9:ba:49:e8:8c:
9e:e0:b7:02:8a:49:ec:c0:04:1a:47:fe:ec:7d:91:
70:a0:c2:98:02:4e:f1:d8:bb:1c:85:74:5e:fd:e7:
dc:85:65:a1:27:19:28:8d:50:c6:44:54:87:2d:7c:
8b:84:9b:7f:2f:12:8f:3a:0b:1a:64:b1:50:e5:6a:
fc:c6:72:54:4e:91:51:ea:3b:ce:b3:4c:27:ad:a9:
f7:95:7e:c3:e4:4d:b1:cc:e7:4d:7e:0b:55:14:6e:
e2:ef:51:ec:64:87:b0:f1:61:55:1a:17:a0:22:dc:
99:6e:9c:f7:89:bb:1a:b8:73:02:da:1f:74:ab:16:
dd:4c:86:6b:c4:f2:bc:62:19:0c:f0:35:d3:9a:54:
ab:00:c2:b0:bf:68:d7:36:a2:5d:5b:5b:70:82:ca:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:3F:53:97:71:C9:9A:34:7D:D3:2E:72:C2:63:86:6F:B9:C2:35
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:de:52:a4:14:63:b6:12:5c:3b:da:e8:7d:cf:68:56:f2:7d:
50:34:9a:5c:a7:a2:e7:23:06:b1:16:d6:d6:52:6e:8c:bb:1b:
7e:cf:79:9a:67:99:1e:0d:99:4d:df:13:45:ba:cb:78:90:81:
af:5f:88:45:61:a9:e7:59:ee:ba:71:ff:b7:35:af:67:4a:56:
63:c6:9b:38:ed:91:31:6d:79:5a:9a:68:b8:99:fd:94:38:f9:
ac:c4:ce:43:98:50:1b:3d:04:0b:11:e9:06:a8:49:e1:1c:65:
8f:73:2b:1f:0e:74:fc:32:05:c0:82:30:43:b4:01:6e:1e:3b:
28:54:5e:21:ac:34:e3:a8:5f:ef:0a:cb:c2:25:a1:17:99:a7:
4b:7e:5f:65:e3:dc:cf:b0:bb:db:fc:01:7a:24:97:74:e2:7e:
c3:ce:f6:1c:7a:0e:78:a0:9f:8b:ee:88:fb:34:5b:cb:5c:c3:
7a:5c:55:9e:eb:b0:f5:ea:84:52:ff:ba:bd:39:39:db:4d:92:
1d:dd:55:3f:45:98:f8:f5:10:ad:ea:34:75:b9:6f:3c:31:7e:
3f:a6:d1:a5:a2:9f:90:22:68:d4:20:8c:23:9e:5b:40:40:54:
69:fc:b8:02:de:82:3f:1f:68:2c:ce:af:e7:de:1c:6e:49:1e:
51:e1:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:24:13 2025 by rpki-client