Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: xXtCkwcu0vEb6AX0gnKjK1LrMhuQH2Kmvdt/XrXFRR4=
Subject key identifier: 96:BB:8A:0A:0E:CD:3D:31:7D:1F:04:58:1D:F6:E0:4C:64:E7:32:00
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 0196B85A01C90A8195FB9EA436FDDB930C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 04:00:28 +0000
Manifest this update: Sat 10 May 2025 04:00:28 +0000
Manifest next update: Sun 11 May 2025 04:00:28 +0000
Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: 6wzaVEnYEravA1vr3eLN/z8OkibsAwEaj7D+wFfehXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:01:c9:0a:81:95:fb:9e:a4:36:fd:db:93:0c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: May 10 04:00:28 2025 GMT
Not After : May 11 04:00:28 2025 GMT
Subject: CN=96bb8a0a0ecd3d317d1f04581df6e04c64e73200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:19:a3:9a:6d:16:fb:b2:5e:c6:c7:1b:dd:
65:06:a1:69:c3:27:33:a7:eb:e4:b1:f7:a8:9f:1c:
df:df:ed:87:66:7e:c2:5c:fd:a4:a0:0a:d3:64:65:
71:a7:5c:7c:bb:51:ef:03:a8:7b:4c:d9:6e:4b:b5:
25:10:90:fd:ba:d7:2c:73:18:c9:48:5f:77:9b:c7:
06:bf:86:ce:f5:3a:cd:1d:36:37:28:80:a8:e4:75:
96:ca:88:6d:1a:88:97:3b:14:da:42:1f:d8:c1:63:
66:49:9c:e7:c6:7e:ce:67:0a:10:45:25:7f:c6:5d:
96:8f:31:8b:6b:a5:a5:d9:82:d1:c4:21:08:aa:0a:
a5:31:f3:d4:18:87:80:df:68:ea:1e:1a:1f:d0:88:
8c:6e:ff:33:fd:41:e1:25:09:ce:ee:b4:cf:26:50:
49:19:1a:a3:34:be:75:12:b2:0f:fd:36:b9:61:d2:
54:ed:e4:94:75:40:3f:3a:44:3b:8f:dd:03:bf:82:
40:ab:d7:e5:ae:7e:ef:13:9b:d0:db:a8:95:b3:b7:
19:66:d1:d1:65:8b:84:a0:ba:03:3f:0e:5f:5a:bd:
c7:65:e4:a5:0e:1f:b0:74:12:6a:19:6c:52:bd:00:
e3:ab:f9:e0:75:93:1e:31:11:6a:ef:7c:d0:86:7f:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:8A:0A:0E:CD:3D:31:7D:1F:04:58:1D:F6:E0:4C:64:E7:32:00
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:56:19:dd:ce:5b:17:9b:53:fc:44:f1:e8:f7:29:01:c5:3c:
21:44:32:3e:5c:25:d5:52:40:c4:c0:82:f8:74:e9:12:4d:65:
f3:4e:22:bc:00:5e:8f:16:5f:35:56:2d:c0:cf:26:91:f6:c7:
02:56:cb:53:ec:28:35:96:1a:bd:6e:12:20:ae:98:49:23:7c:
08:5b:9f:b2:fe:f8:cb:3a:75:57:b9:f7:5a:9b:78:25:a0:aa:
75:36:e8:83:b6:1c:b4:99:07:b2:22:0c:1a:8f:e6:27:81:c6:
32:d7:56:71:f1:cb:08:8b:69:f7:99:50:87:a1:24:39:e0:1c:
c7:c7:73:8b:c6:7f:6f:2c:b4:16:5d:2c:50:5e:f8:e5:e4:82:
41:44:07:79:10:35:9d:57:1f:7b:7a:9e:78:5c:f5:9e:60:86:
ca:c6:f4:41:ba:9e:4f:01:52:8e:b6:c2:5f:31:62:05:9a:5b:
e2:58:83:74:c2:bc:52:3d:43:be:9c:f5:b7:43:cd:fb:5a:66:
d4:b1:de:25:3e:26:18:c6:0a:6a:46:3f:13:cb:45:8f:1f:7b:
0b:7d:77:48:67:4f:ad:3c:dc:93:a6:91:f0:51:55:9c:81:00:
22:23:00:9e:41:d2:83:a2:66:31:3a:de:b8:8b:bd:fb:ed:b2:
23:13:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:17:17 2025 by rpki-client