Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File: rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier: tEkUNpsIJnhPTeA8/p71CH+jVyKRUiCDbjiGeOLSTzI=
Subject key identifier: B0:7E:56:BC:1D:6B:6B:C8:08:80:C1:E6:A3:9D:16:A8:A1:0C:7E:5E
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 0196BCA46BAFF6C89FF2D2BB1A0BA9688F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 00:00:14 +0000
Manifest this update: Sun 11 May 2025 00:00:14 +0000
Manifest next update: Mon 12 May 2025 00:00:14 +0000
Files and hashes: 1: 1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa (hash: 4xRutx43UVc6W0el47UeYIWEsInjaHlLdoMFA8q84mY=)
2: 2IN1Er2MsTzD9JeH28eRdl-c7u0.roa (hash: 02dSVlb8MKuiq6SZlhNvmzUoRJ0PeDVGS4rbsaqtZBI=)
3: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: l7YOMa8WDhJqwVeKkunFYeT9DrGgQq6jiyqnQTtgS/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:6b:af:f6:c8:9f:f2:d2:bb:1a:0b:a9:68:8f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: May 11 00:00:14 2025 GMT
Not After : May 12 00:00:14 2025 GMT
Subject: CN=b07e56bc1d6b6bc80880c1e6a39d16a8a10c7e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:be:f9:9e:92:86:57:10:9d:a0:f8:30:72:
14:6c:1a:7c:3d:53:6d:cc:84:ba:4b:83:53:a1:35:
5a:3d:6f:7a:61:db:f0:09:38:fa:4f:95:3b:25:ca:
f8:d2:9e:d0:c1:69:fb:88:cc:08:fb:35:ef:06:e5:
90:b1:e5:8d:42:43:c7:97:0c:40:90:ee:bf:e2:74:
5b:84:03:3c:3b:cc:93:b4:53:05:d1:9a:6c:aa:4f:
85:e9:c6:57:fe:bc:bf:a5:fd:2f:81:b2:5b:3f:04:
97:e6:b8:52:f7:79:35:77:7c:7f:e4:24:12:e3:38:
4d:b3:6c:cf:42:d1:f4:75:a4:36:9a:d0:b4:1f:c2:
e3:77:18:2e:c9:c3:e4:ee:7a:82:22:be:39:67:31:
ff:61:ef:b9:00:ab:e4:43:e4:6e:cb:ba:6a:c8:43:
cd:ee:9c:ff:c6:b6:8f:06:35:df:c1:60:d8:e5:3d:
16:56:85:fe:39:b3:42:84:30:ef:f0:ea:81:a0:4d:
31:fe:be:2b:32:a4:9d:26:42:6b:fb:73:4d:66:5e:
bf:12:8e:78:5f:73:1c:3b:7b:55:c9:76:f5:07:1f:
35:b5:b9:c4:d1:81:94:1e:e8:ea:90:5e:59:1a:c9:
8e:23:2a:2f:b8:4a:4e:47:78:e5:c8:0e:02:ee:48:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7E:56:BC:1D:6B:6B:C8:08:80:C1:E6:A3:9D:16:A8:A1:0C:7E:5E
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0f:a8:5d:3a:94:59:c6:68:22:43:f1:5a:57:ec:97:c7:1d:
a3:9f:01:3b:21:d7:2b:d7:09:4f:35:d3:27:86:6d:dc:e8:46:
2c:81:8f:77:33:a0:f7:6f:54:68:c2:a6:de:ca:6c:79:ba:0a:
66:c0:68:72:05:6d:c0:27:82:2c:85:dd:9e:d7:92:76:3f:e2:
6a:f9:4c:8b:a6:02:1c:e9:27:cf:f0:fd:7f:be:98:36:dd:9c:
78:98:21:7f:ca:3b:78:c5:4e:23:ef:8d:7e:5e:c8:5d:cd:bd:
b6:50:22:de:42:b1:02:5c:92:03:97:81:a2:52:b4:06:bc:f8:
98:71:bd:93:8d:27:64:33:ae:51:0e:49:1c:76:4c:53:fe:b1:
ce:0e:ee:53:1c:ba:9c:7b:f8:44:28:bc:65:0c:18:fb:96:44:
6d:48:e1:60:5b:d0:e4:b3:22:64:e3:18:42:68:35:2f:e1:32:
33:b1:ae:9f:cf:5c:46:c9:c7:07:60:a6:bf:95:8f:59:35:7b:
7c:64:59:bb:59:6a:49:d7:f3:56:73:17:1b:f0:34:e2:08:d1:
3e:46:3e:fc:71:9e:67:39:fb:7a:f8:66:fb:02:7e:5e:80:55:
83:f8:49:e1:18:33:04:e8:d4:54:f5:6c:87:be:6f:62:88:28:
7c:f9:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:26:47 2025 by rpki-client