Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
File: 4tNxxKeqqFX4zDsa6oAilCCoDyA.mft (raw, json)
Hash identifier: GvFZoOSe7fLIMyi8S915Gc8AVEDN1EgvRs2NgIiwezY=
Subject key identifier: B8:AB:32:2E:C2:D4:2D:5A:98:33:85:35:CE:B2:BD:88:6E:D5:ED:4B
Authority key identifier: E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
Certificate issuer: /CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Certificate serial: 0196B82357AED766DDFCEABFB2FA437EA252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 03:00:45 +0000
Manifest this update: Sat 10 May 2025 03:00:45 +0000
Manifest next update: Sun 11 May 2025 03:00:45 +0000
Files and hashes: 1: 4tNxxKeqqFX4zDsa6oAilCCoDyA.crl (hash: NFG7bexHf1dK6LT+JduO8wdlcaqPoin+UEQB0xfZ78w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:57:ae:d7:66:dd:fc:ea:bf:b2:fa:43:7e:a2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Validity
Not Before: May 10 03:00:45 2025 GMT
Not After : May 11 03:00:45 2025 GMT
Subject: CN=b8ab322ec2d42d5a98338535ceb2bd886ed5ed4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:bd:c1:58:7c:48:fb:d2:fd:26:c4:50:bb:
95:f4:6c:06:c6:62:95:ef:f7:c4:01:69:e5:ad:8f:
b8:e8:f7:da:b1:f5:71:9b:86:1a:76:cc:3e:1f:eb:
0b:b9:48:a9:8d:4c:31:30:2e:9e:9d:70:17:3d:e3:
07:5b:9c:d1:8a:6b:84:43:0f:d8:70:76:25:92:64:
db:de:46:0a:5e:b0:e1:f7:da:a7:2c:24:1a:8e:9b:
15:ea:29:e4:dd:98:56:84:f3:92:1b:96:2c:74:79:
c4:fc:f0:f9:1b:e4:3e:5c:0a:74:9f:a5:09:58:76:
ea:d6:bd:44:36:15:fc:b5:15:dd:4b:49:ee:ee:35:
ee:a2:51:21:ed:86:c5:4a:14:de:79:d9:b8:67:3b:
c3:55:47:e3:7e:8d:d0:15:25:ad:bb:e2:de:98:c9:
25:96:70:38:45:00:3e:23:76:c1:f6:a3:fb:fb:53:
05:ee:f3:27:fb:40:dc:47:22:f0:09:b4:58:28:90:
80:99:f0:fd:62:68:58:32:d4:99:fe:5e:17:51:fc:
5e:21:2b:76:53:26:67:71:66:0d:e6:6e:87:f6:61:
c3:d7:19:fe:c7:74:55:d7:71:87:4a:79:30:5d:36:
88:1e:f5:ec:6c:6d:9c:82:cb:cd:f4:83:ec:e4:1e:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AB:32:2E:C2:D4:2D:5A:98:33:85:35:CE:B2:BD:88:6E:D5:ED:4B
X509v3 Authority Key Identifier:
keyid:E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:80:f1:12:b5:42:37:cb:7e:bd:c6:e8:e7:22:0f:f4:ab:f7:
ce:04:c5:84:af:62:72:7f:07:75:09:c7:55:2f:92:97:5e:b5:
6a:82:c0:24:8c:63:4e:3f:f9:30:2c:62:6f:37:a8:de:d5:87:
7c:e7:1f:b1:21:61:c8:d0:88:ae:2d:9b:c2:e0:91:e4:cc:e7:
aa:ed:ee:35:2f:3e:a7:9c:e8:6d:88:76:9c:2b:78:39:97:5f:
ea:be:56:dd:4e:8d:11:d8:67:02:4f:ce:17:6f:9d:b6:13:f2:
97:1a:5f:ce:7e:c5:de:d8:41:1a:7f:03:c3:96:8f:2d:11:18:
64:5b:01:96:2a:9d:3a:28:1c:a9:58:89:88:a3:9d:50:df:5f:
95:7b:f3:3c:f1:ba:9a:7a:2c:35:8e:98:e1:9c:f9:db:7c:4e:
cc:8d:f2:fd:0a:d5:49:56:32:58:57:90:c0:9e:b9:8b:2b:c8:
f2:1d:bb:10:26:4c:1f:ed:db:96:a2:f3:45:28:67:79:21:2a:
7c:6d:22:dc:7c:a3:fd:4d:3f:28:1c:62:e2:57:39:93:94:65:
5b:f1:f8:a6:47:f5:74:af:78:3b:ea:8e:6f:bb:4c:b3:20:1b:
e8:49:ce:d3:87:3d:59:ca:54:1b:fc:5f:54:06:a7:67:e1:8e:
91:e5:2b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:31:52 2025 by rpki-client