Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: puHojm0UdbxkwFcBgzbKrvfAwF/7IxYgz/zXdE9tG1Q=
Subject key identifier: D5:C4:9E:49:5A:2C:2F:D9:01:48:2E:F9:E6:5B:FF:77:9D:84:A5:31
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 0196AC8CF2F04ED3EE095BB0749077C9F74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 21:00:40 +0000
Manifest this update: Wed 07 May 2025 21:00:40 +0000
Manifest next update: Thu 08 May 2025 21:00:40 +0000
Files and hashes: 1: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (hash: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=)
2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: xagkrOEKjfmDkJG17TqvNXSFeEXndBti1rKfbQkkK8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8c:f2:f0:4e:d3:ee:09:5b:b0:74:90:77:c9:f7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: May 7 21:00:40 2025 GMT
Not After : May 8 21:00:40 2025 GMT
Subject: CN=d5c49e495a2c2fd901482ef9e65bff779d84a531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:7d:d5:59:ea:46:8f:10:20:9b:68:d9:64:
39:a3:75:41:4c:59:8f:37:3c:6f:f9:93:0f:9d:00:
e9:79:5f:16:07:9d:f0:55:52:77:1f:ff:ea:d1:19:
4a:66:0e:c3:7a:f1:90:61:64:82:60:26:71:bd:6a:
62:16:ce:60:05:b0:c6:6e:d1:fc:ec:4b:67:3e:21:
62:56:e6:e0:7f:c7:73:a3:4f:70:61:0e:3d:6d:d4:
cb:91:f6:77:77:40:00:b6:6e:4a:f4:a0:b3:cd:d5:
0d:d4:21:2c:e4:33:de:4c:a8:37:0d:87:7d:14:41:
e2:50:35:0e:35:e8:0b:da:89:bb:f7:19:7e:90:88:
a0:6d:84:e5:2e:d6:e4:21:70:ec:05:7c:7c:2a:54:
85:c1:87:db:31:d4:c2:3d:ec:bb:62:f3:12:29:a6:
95:88:14:29:96:a3:8c:45:28:3f:87:20:ea:da:ad:
81:af:8c:1a:5e:db:e5:85:a7:8f:55:7d:03:a8:86:
87:72:18:18:c4:2e:04:21:56:21:b9:34:54:6f:69:
2b:fa:45:9c:fc:5c:b7:c2:5e:93:8f:29:5a:0f:0e:
71:52:80:de:fd:c6:77:b0:e7:35:b7:e6:2a:e8:f1:
e1:62:88:ae:4c:ff:11:ac:33:dc:56:4b:59:1f:3d:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C4:9E:49:5A:2C:2F:D9:01:48:2E:F9:E6:5B:FF:77:9D:84:A5:31
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e3:07:b8:4e:35:75:5d:42:2c:87:8b:77:e9:05:39:25:ed:
c5:93:47:54:b3:9e:d3:aa:ea:aa:fd:d1:ec:f0:3a:0b:37:1a:
c5:e1:0c:e7:c3:77:44:75:eb:73:11:bc:b0:9d:7b:af:63:cb:
d8:c6:8d:6c:8e:b6:2e:51:c7:03:b3:42:ad:38:aa:6f:26:6b:
7a:df:e1:60:b8:e6:91:22:ea:68:b2:59:63:fc:83:49:27:c1:
bb:ec:7d:80:dc:1f:db:3b:2b:32:72:a6:53:23:b5:70:56:a9:
31:fd:62:43:3c:39:30:59:07:0d:25:d2:30:89:bb:76:0e:e4:
2e:54:98:52:0a:fd:22:d4:88:d5:a2:d1:6a:3e:13:06:49:af:
62:fa:b2:cf:c8:f1:70:d7:d5:15:2c:38:1c:04:e9:93:24:1c:
62:2e:b4:3b:62:ed:45:45:79:a8:95:1b:97:74:61:05:83:b0:
bb:63:d8:6d:f9:88:d6:26:29:45:c1:af:d5:d4:bf:1e:6e:22:
25:ec:2e:c8:75:ff:b4:67:ce:fc:9f:f9:94:73:11:d0:15:25:
87:dd:40:3f:10:e4:15:e1:c2:0f:83:52:a4:96:40:f8:dc:8b:
9b:d2:56:b0:0a:b9:51:ac:98:28:2b:51:36:6a:93:5b:1d:e1:
ba:0e:b2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:42:39 2025 by rpki-client