Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
File: m1iV5_am1KupyWH3E7LnlxXwIfA.mft (raw, json)
Hash identifier: pOiOnSGbOZuE7HjxoCIly9CNu4bOLOULrPKx5YUWUXE=
Subject key identifier: EB:DE:02:30:B7:0A:72:11:27:7B:1C:E5:E9:7D:61:53:CB:DE:17:D9
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Certificate issuer: /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial: 01969FACF205C8630EFD3DA3B7041C11B28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 09:00:33 +0000
Manifest this update: Mon 05 May 2025 09:00:33 +0000
Manifest next update: Tue 06 May 2025 09:00:33 +0000
Files and hashes: 1: W2N06bo8iEVj3MND-0JAHiLxvxg.roa (hash: IfUBswKG3p9cJ5exxnjeIuTVTsjdF6z/UKkR7O3Lfdw=)
2: m1iV5_am1KupyWH3E7LnlxXwIfA.crl (hash: MkSK/JD8skrDdNQxCtAYvcDoMU8zj8/TfSBpr+3Sq4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:f2:05:c8:63:0e:fd:3d:a3:b7:04:1c:11:b2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Validity
Not Before: May 5 09:00:33 2025 GMT
Not After : May 6 09:00:33 2025 GMT
Subject: CN=ebde0230b70a7211277b1ce5e97d6153cbde17d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:15:01:2a:b4:82:3d:5e:e8:51:95:92:4f:
01:33:cf:ff:33:8e:f8:a7:a1:36:e4:d6:59:a3:bc:
b7:24:ff:43:8e:5c:a5:6c:3e:21:43:90:68:8d:2b:
82:1b:72:2d:17:1a:8a:3e:5c:c2:78:24:85:4f:b5:
12:0c:33:12:f7:e7:58:ca:b9:ed:c6:36:da:a9:e6:
9b:95:9f:d7:89:4f:ed:63:38:be:9c:ef:8f:85:1e:
bb:b9:42:34:75:9a:be:90:d4:dd:19:86:28:e2:d0:
d2:d1:20:e0:d4:48:bd:1b:70:91:60:ec:74:ea:af:
97:68:c6:e3:3d:5b:b6:cc:43:4f:0c:48:66:12:2d:
af:d5:3e:a4:56:4a:07:9b:15:d6:ca:b2:6b:62:83:
42:7a:63:88:bd:f0:29:8a:82:4c:7f:d1:af:a5:51:
a2:df:b0:ad:33:5b:f7:c7:02:eb:e1:8c:fb:ab:e2:
37:93:ce:36:1c:69:cf:e4:58:d8:22:0a:bd:3f:00:
12:00:15:8f:25:47:eb:fe:c1:66:a0:a7:b9:3f:75:
b3:19:54:1e:7d:53:f8:aa:ee:8a:89:36:95:78:34:
ca:da:94:bd:e4:b1:18:15:53:cd:8d:4e:7e:4f:6f:
ec:0e:72:bd:26:2c:2f:b6:74:5b:83:5f:a9:0a:c3:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:02:30:B7:0A:72:11:27:7B:1C:E5:E9:7D:61:53:CB:DE:17:D9
X509v3 Authority Key Identifier:
keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:61:c5:61:ee:5e:87:48:75:20:0f:42:e4:56:e2:ee:fb:4c:
03:09:d7:db:61:4e:9a:5d:81:61:60:38:ff:b8:c6:db:e9:3c:
84:45:c9:a8:25:38:da:5b:b6:9e:31:ac:0c:e9:f9:31:6c:6b:
91:5f:a5:37:07:0b:43:5e:6c:4f:32:08:46:80:07:e9:45:9a:
e4:8c:05:cd:d7:37:28:4c:3c:54:3d:d5:1b:30:75:5a:71:6c:
c1:67:a0:93:48:61:cf:c1:de:e6:65:d7:c9:7e:88:af:07:15:
1d:61:d3:f0:7e:11:29:6c:a6:27:11:2c:f5:04:26:0e:46:11:
5e:8b:22:c3:1f:1c:73:3f:d1:f1:76:9d:52:3b:3d:06:7b:b4:
4e:cc:f4:76:61:27:03:70:41:db:ab:81:1b:f2:7a:0c:f7:5b:
70:82:90:68:de:99:58:63:5c:52:4e:09:c8:65:f9:07:31:4c:
a1:75:74:3b:33:7a:77:07:e9:0f:08:34:c3:35:46:65:76:e0:
2b:13:73:5e:22:a7:82:6d:02:fe:73:56:56:d5:64:00:6f:00:
58:42:c1:23:7f:a1:49:6f:09:fa:de:13:c1:67:13:35:a0:aa:
24:fc:31:c3:ec:7b:dd:10:90:2c:dc:18:b9:fe:75:2f:25:e9:
9a:8c:fa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:52:56 2025 by rpki-client