Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
File: m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft (raw, json)
Hash identifier: rY3MwVpUGQn+6yQWNVpcYfhQ2wDO45+9cH3UHmv7kX4=
Subject key identifier: F2:50:61:99:B3:B4:93:7E:09:9F:2C:02:6B:6E:C1:3F:8B:72:03:56
Authority key identifier: 9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
Certificate issuer: /CN=9b868a76f5b4748e1e4bba834701a68577c63462
Certificate serial: 0196B935B2E08CEA84044D8C5D1B8127E5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 08:00:26 +0000
Manifest this update: Sat 10 May 2025 08:00:26 +0000
Manifest next update: Sun 11 May 2025 08:00:26 +0000
Files and hashes: 1: El3AzP_du9cgKwe4cAMY6ohro7o.roa (hash: unokVLZGXnsuik1b2lzzTnShCOzK3B+jbNl72+ddVqo=)
2: m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl (hash: TRYG77UljIrEHZoH6waosMJ6Aj+fZJ5WxdCCFnKCndQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:b2:e0:8c:ea:84:04:4d:8c:5d:1b:81:27:e5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b868a76f5b4748e1e4bba834701a68577c63462
Validity
Not Before: May 10 08:00:26 2025 GMT
Not After : May 11 08:00:26 2025 GMT
Subject: CN=f2506199b3b4937e099f2c026b6ec13f8b720356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:61:4d:fd:a1:59:52:d9:64:58:b0:34:53:
e0:84:72:95:d6:2d:e4:82:4d:66:fa:d1:33:32:a6:
d7:e5:4f:76:31:15:07:03:db:5b:75:3f:1a:5d:c3:
44:61:0d:ea:39:1d:7e:f3:38:e2:51:42:3c:03:6b:
92:bc:22:ed:63:2a:6c:52:18:cd:07:30:85:58:5c:
7e:de:98:0a:48:07:dd:7f:16:c4:18:ac:55:db:8b:
d6:1c:5c:b4:db:86:e8:6b:91:f3:40:7e:7c:7a:e2:
8a:b2:d2:37:f4:b3:8b:0c:c0:1c:35:be:f7:df:64:
18:f9:25:84:d7:f0:3c:ed:52:b0:cd:44:f5:a9:82:
7d:52:07:36:69:a7:b4:77:17:28:d3:81:66:e9:32:
35:84:3c:2c:d4:6f:fd:4c:92:77:67:8a:a8:b3:0a:
ed:0a:36:92:96:7b:83:cf:ba:11:82:c2:f9:0f:2e:
38:7c:24:a1:c8:13:db:08:c5:52:c6:72:18:f4:ed:
d3:8d:bd:e8:31:0b:9c:8d:0f:9f:d5:9a:42:49:90:
30:30:30:f9:65:35:7c:9c:30:82:c0:96:7c:b1:0f:
9f:6a:75:97:fb:4b:0a:fc:45:c1:3d:8a:e2:1e:72:
32:ce:81:88:83:d1:d8:f2:88:48:05:bd:dd:f3:85:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:50:61:99:B3:B4:93:7E:09:9F:2C:02:6B:6E:C1:3F:8B:72:03:56
X509v3 Authority Key Identifier:
keyid:9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:de:bc:df:e4:d9:e0:b6:e6:65:19:0f:d8:40:7b:0c:bc:ad:
e9:b1:a2:ac:98:f5:05:e8:9c:ef:ef:c4:9d:1c:65:93:ea:da:
2a:55:c6:30:c7:52:e0:e4:5b:9e:a9:43:6b:c4:8c:6a:dc:5c:
f8:d4:33:55:5b:6e:59:8e:c7:0b:86:86:5c:0e:f3:02:2c:6d:
a2:56:29:82:27:40:e9:bf:ea:5d:da:be:b3:b2:db:6e:ec:c4:
35:e9:25:ba:6f:85:36:b7:5c:e6:74:d2:8d:66:10:86:00:39:
6c:1c:b8:b2:8f:12:85:3d:dd:e8:4c:e8:0f:4e:96:f6:07:9b:
28:74:c9:90:08:a6:cb:0c:2d:ca:79:11:e8:5e:5a:cc:c9:4a:
b8:ce:d0:c3:c9:d1:d7:53:51:bc:57:39:4b:48:60:b0:c6:b6:
87:66:92:61:17:c7:ed:c4:80:3c:68:ae:e6:ab:89:df:55:92:
b7:22:f4:17:4f:00:59:c8:c6:52:f5:16:72:ca:fd:a8:a1:d8:
fe:33:d8:f6:95:8b:04:a6:45:1c:cd:09:8e:39:bf:a3:dc:f2:
75:07:33:5c:1f:cc:d8:c8:e9:80:bf:fd:aa:79:ff:81:e2:09:
20:d3:0f:0b:92:3f:a3:b0:39:b1:bf:22:f0:2c:6a:49:20:3c:
b8:c3:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:36:11 2025 by rpki-client