Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier: afhWVOLXmuhUEtbcSvzLoS8atssev8RQl/rlTC51k3U=
Subject key identifier: EA:5C:FA:88:AE:8E:CB:13:E1:AA:E5:6B:8D:58:33:D5:37:9B:25:03
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 0196AFFC18C7E9269CC3661A16498E8188CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number: 1531
Signing time: Thu 08 May 2025 13:00:56 +0000
Manifest this update: Thu 08 May 2025 13:00:56 +0000
Manifest next update: Fri 09 May 2025 13:00:56 +0000
Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: diAse3PH92nH1VkHgZ80BMrAQuy48xblIjoP5hLkuPc=)
2: SM900vRB7gei6pS6Q178I2UX-lU.roa (hash: EDUY4+JtCT9uXEY3z6PPpKcKtOUgL6hoTy+pDX+nuro=)
3: rE12S5_UCVz_qE96OpsYCotvRdo.roa (hash: HmY8gAlqRzAv6/rOzxQZtJmfpwofsJXd2sCI5/LnmTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:18:c7:e9:26:9c:c3:66:1a:16:49:8e:81:88:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: May 8 13:00:56 2025 GMT
Not After : May 9 13:00:56 2025 GMT
Subject: CN=ea5cfa88ae8ecb13e1aae56b8d5833d5379b2503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:55:88:a7:14:60:26:56:f4:26:49:c0:79:
96:c1:4b:3f:24:5d:9f:fc:5a:d3:a4:f1:cb:af:7b:
96:f1:0d:19:46:f9:d6:ab:3a:2e:06:ef:a2:ae:87:
52:3e:eb:f9:54:76:7d:4f:32:72:dd:8f:9a:2b:30:
4c:08:7d:95:37:e3:53:3e:e8:ac:01:fa:ad:ce:ff:
2a:bd:f8:e0:8f:b2:11:f9:cf:0c:64:5e:84:88:39:
09:79:e9:af:9c:ca:3a:d3:fe:16:c4:1c:a9:71:2c:
f3:98:b9:0b:8f:28:f2:3c:d2:29:a1:5d:fd:9d:16:
61:37:55:06:e8:2c:1b:6f:19:c0:c6:ce:cb:e9:2c:
61:71:3a:a2:c4:1e:f8:5e:80:dc:af:a6:f8:61:26:
b1:04:c7:40:07:21:0d:08:6e:6b:a6:fe:fc:7a:d0:
13:bc:97:90:84:5c:50:27:6a:16:61:dc:1a:d8:a0:
2e:96:c7:4b:e1:56:9d:18:38:32:a6:02:df:24:75:
8a:9e:84:b0:8d:39:b8:b3:82:01:37:c4:c8:93:07:
bd:79:cc:e3:c7:66:cf:79:f6:20:eb:e1:7a:8f:bf:
a1:bc:83:f2:e7:0e:dd:b3:f4:06:75:f2:bb:be:34:
a4:06:23:3a:96:f0:f3:38:aa:5f:11:1d:2d:0b:59:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:FA:88:AE:8E:CB:13:E1:AA:E5:6B:8D:58:33:D5:37:9B:25:03
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:11:6a:d2:26:b0:3b:fb:7a:13:bb:92:2d:51:8d:73:2b:44:
53:4a:fa:25:db:0a:ac:df:0c:ed:c5:10:eb:19:a3:70:36:be:
fb:51:77:e2:7d:83:e7:cf:91:59:4e:5f:f5:61:3c:55:55:bf:
65:27:98:3c:73:d6:ef:5e:89:08:90:bf:1d:82:02:47:e9:ff:
8f:f1:6f:e2:11:f6:b8:6e:3c:7d:31:6c:e8:d8:2d:19:e2:46:
31:72:c7:19:55:a3:90:f0:d5:a0:66:dc:bf:1f:df:5a:ed:a3:
1a:13:a5:b8:5e:7e:70:bf:dd:57:3f:70:fb:72:12:b5:ac:cb:
6c:c1:6f:dd:47:38:0b:25:9b:83:8a:fa:66:c2:df:8d:da:fe:
de:ca:ca:db:e5:85:a6:de:b0:76:46:c2:49:8b:d4:2e:c0:58:
38:20:ec:1c:27:bf:19:d3:2a:c6:de:aa:50:fc:1e:d2:11:c2:
fb:3f:5a:50:97:24:0e:3e:fb:71:f5:55:a0:a6:0c:ba:de:60:
16:48:4b:8b:1d:5c:aa:a5:e1:06:c3:9f:e4:c8:61:61:1a:74:
4c:20:3a:ab:7a:3a:54:e3:5d:d4:52:94:08:9a:a5:9c:4a:bd:
6f:c3:72:71:3a:35:2a:5b:4d:92:21:61:83:a4:a6:9b:c3:29:
53:70:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:44:17 2025 by rpki-client