Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: WYltZL5EueVdXsCe+r0chPE57VSc+50eIhsjwTBuyxg=
Subject key identifier: 47:0D:1B:05:CA:E2:CB:3D:B6:4B:79:05:A2:E0:AB:67:65:13:8F:7F
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 0196BAED81241C9DAB83EEA50BD099A7058A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 16:00:49 +0000
Manifest this update: Sat 10 May 2025 16:00:49 +0000
Manifest next update: Sun 11 May 2025 16:00:49 +0000
Files and hashes: 1: 3TsgJTCqJzOcEWU1D_eLkn9vlVQ.roa (hash: FocquAr/i2n2K968hOeO0r6QOp/B6G9WWrm69jbwUbg=)
2: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: DZOnK2z1iTC4PK9sZ7Id0o1E5s90PPFHEyk4d8n8AaY=)
3: XfddXSazKRwlAti_xB3GX9aF4dA.roa (hash: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:81:24:1c:9d:ab:83:ee:a5:0b:d0:99:a7:05:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: May 10 16:00:49 2025 GMT
Not After : May 11 16:00:49 2025 GMT
Subject: CN=470d1b05cae2cb3db64b7905a2e0ab6765138f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:31:f2:97:45:05:41:42:65:42:4f:4a:4d:
b9:b6:e6:34:3e:f5:13:d0:cc:55:5e:b7:26:7e:6c:
96:76:b4:36:05:05:19:e3:4e:41:6f:5f:95:bf:b4:
18:3f:24:a5:4a:6d:b6:ad:f6:0a:33:0f:b4:f1:69:
a5:b9:62:0c:a4:7b:08:29:f2:42:fc:57:08:83:fd:
8a:c4:41:8b:77:58:c1:02:e6:ea:c5:fe:92:e8:c8:
bf:88:d6:35:a0:74:36:9c:7b:62:e0:90:48:41:4b:
a3:85:12:16:9f:5c:2f:68:18:d7:f6:16:03:a7:d1:
b2:8f:9d:4c:85:a0:41:d7:92:43:af:d7:20:f1:36:
90:13:e9:47:80:9a:a3:12:52:76:e1:ff:6d:32:1a:
21:1f:a6:16:91:8a:eb:06:a1:f4:e0:f5:31:b5:90:
fd:08:db:91:5d:08:32:49:6b:0d:56:b5:57:e6:8e:
95:cb:27:e2:6f:b6:e7:8a:02:10:4c:8f:3d:65:85:
9b:bc:a0:8e:84:d7:a0:58:8b:a0:cf:40:f9:ac:0c:
d9:d8:1e:d1:c9:0c:7b:9f:fb:12:ed:22:b3:e1:11:
c7:4d:11:97:f1:c8:13:b9:c0:cd:40:22:f4:d4:4f:
da:fb:f8:6f:4b:94:c7:af:60:77:80:b7:62:bd:12:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0D:1B:05:CA:E2:CB:3D:B6:4B:79:05:A2:E0:AB:67:65:13:8F:7F
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:20:ab:89:99:6e:81:ce:6d:a3:62:d6:f2:e8:e0:54:ce:9e:
a2:87:3d:b3:1a:eb:c1:39:aa:4d:15:9b:6e:27:a3:e4:59:32:
55:00:dc:4a:30:97:75:a9:8b:22:4f:e6:1c:37:e3:16:68:ec:
0c:67:62:44:63:3e:01:ed:b8:f2:99:2f:23:82:39:9e:31:34:
ac:ed:54:96:34:e7:6b:20:f3:29:70:54:79:55:99:d3:2b:da:
dc:bc:04:1e:ec:24:be:22:ba:2a:b4:ad:30:b0:e2:cf:ed:5a:
bc:22:80:12:b8:f0:c9:7b:d1:aa:14:e7:df:16:ed:bc:54:d8:
22:c9:a7:d9:e8:9d:f9:57:5d:9a:6d:be:0e:8a:73:16:94:a1:
aa:c8:ca:de:2f:4b:8b:c5:f6:79:07:f2:5d:06:1b:80:57:01:
71:3e:4b:c5:f3:66:b2:0a:0b:ac:e8:9f:25:ed:92:86:46:df:
fb:18:58:0b:10:1a:fb:31:4f:c2:38:af:4b:cb:c1:4e:34:0e:
e3:eb:65:c5:ea:0a:a1:07:78:a2:f1:f0:b3:8b:cf:6d:58:52:
e7:d6:64:b5:f5:8e:f8:17:df:1e:f9:da:2d:02:05:22:98:86:
f3:4f:77:77:9b:80:0b:68:fe:99:14:3b:90:35:78:df:03:8a:
bb:0c:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:36:34 2025 by rpki-client