Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
File: aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json)
Hash identifier: YAHfAGwkW4HyrIY8//x5h/IPEIA0aZbRL5eyzoWkNnw=
Subject key identifier: 1E:38:32:07:15:1B:E8:45:EE:5E:9F:99:55:92:13:64:EC:4E:1D:57
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 0196B5C6B71D47F87E29032C3B07DA2BCE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
Manifest number: 03F8
Signing time: Fri 09 May 2025 16:00:21 +0000
Manifest this update: Fri 09 May 2025 16:00:21 +0000
Manifest next update: Sat 10 May 2025 16:00:21 +0000
Files and hashes: 1: 9V1tND3zl52dvTGUP5zkoYgjSzk.roa (hash: ZFwBT8PQBALn0UQygkKFbmysfnKpnWDyHSFsXkqI3os=)
2: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: stgRU5+O3xXigT5E5eJehAo7Ss+wYEOGn/wap9C84Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c6:b7:1d:47:f8:7e:29:03:2c:3b:07:da:2b:ce:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: May 9 16:00:21 2025 GMT
Not After : May 10 16:00:21 2025 GMT
Subject: CN=1e383207151be845ee5e9f9955921364ec4e1d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:2c:e0:a3:e6:5b:5a:e5:b2:06:25:d2:95:
bb:a3:5d:4f:77:d5:4f:ff:d1:2e:a4:56:5a:08:55:
99:b8:bb:70:df:c3:5c:1c:d7:2e:30:f2:3b:d9:da:
8d:ce:40:c2:31:c4:3b:4c:ac:46:de:a4:05:83:84:
d1:6c:6f:b6:0c:b0:4e:3a:95:00:e9:c3:8e:bb:e5:
98:3c:59:fd:d5:cb:b7:cc:6e:cb:15:df:fb:d1:f3:
32:b9:b8:92:97:41:7f:b3:0f:38:0e:fd:13:72:6d:
3c:66:d0:75:ca:04:6a:b9:1b:6e:36:0e:6c:b6:9e:
d8:50:16:a3:48:a1:51:a9:01:e4:19:64:91:b2:84:
7e:c7:a4:b2:c2:b7:e0:c3:21:ba:63:21:a9:4e:8b:
ca:87:b2:40:cb:6f:6f:f2:50:22:cd:07:00:f2:74:
6b:2d:02:e2:27:11:d1:74:49:8f:54:f8:d6:93:16:
1d:68:74:ea:2d:c3:e8:b4:d6:6a:51:ad:2c:b7:bd:
e2:74:1d:34:43:46:2a:9e:0a:75:8a:49:b7:ad:40:
6e:eb:f7:ad:a3:58:5b:96:3f:18:e5:86:1e:6a:62:
ce:7e:f3:c5:02:6f:88:dd:77:cc:a6:87:1e:d4:06:
ba:73:41:df:64:ba:b4:72:ac:f8:69:15:2e:a8:fe:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:38:32:07:15:1B:E8:45:EE:5E:9F:99:55:92:13:64:EC:4E:1D:57
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:37:5e:7d:3c:a0:01:4e:a0:02:93:17:49:1c:e1:13:37:9d:
f7:d8:d3:5d:db:56:26:1f:d9:ba:20:93:ba:60:69:b7:79:ce:
37:e5:50:ae:49:90:24:34:a1:68:4c:82:59:b4:1e:30:55:88:
14:5c:ee:00:e3:ae:37:70:0e:85:33:c3:8a:a4:8e:47:e1:68:
f7:6a:f4:e7:61:5f:9a:48:5e:5f:19:34:d9:55:5a:3b:dd:55:
36:e5:67:57:77:f0:fe:d2:a2:f1:4d:43:74:5e:ca:2b:89:1c:
0d:60:94:70:bc:ab:a6:cd:fd:97:cc:c1:18:4a:8b:38:ea:c5:
62:ec:51:90:76:94:d3:d3:d5:6a:98:d2:90:ec:a8:ba:ca:01:
f5:95:73:7b:05:7f:a9:72:9b:fa:35:bf:23:85:3b:5e:a4:2f:
ea:17:0c:b1:e2:45:ad:30:2b:78:e9:93:18:a4:37:7b:60:43:
a5:a2:ac:f2:85:d1:54:8b:01:d9:bd:17:62:0f:7b:63:d3:67:
a0:59:ed:8f:ce:54:d4:3f:30:ce:18:15:dc:04:eb:ed:3c:4f:
99:df:5a:a1:3b:d6:6b:42:43:a0:42:d1:5c:5d:3c:a5:ed:0c:
88:92:0a:7b:8f:75:02:ea:67:f9:4e:00:e1:61:ab:c4:9f:c6:
c9:74:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:25:41 2025 by rpki-client