Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier: IyZOFZABFIMMEx1fql3Sn2XcuxrcPPwRnJm8m+HI63s=
Subject key identifier: 9B:4E:30:1B:37:28:E1:BC:D6:A7:D7:14:31:0A:41:06:C7:1F:39:41
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 0196AFFC7F350311A8E0CD9A34B16CFDDEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 13:01:22 +0000
Manifest this update: Thu 08 May 2025 13:01:22 +0000
Manifest next update: Fri 09 May 2025 13:01:22 +0000
Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: 1gZVnMOwt5pcRyetp3PMeZQGWKsUNZrFOftiEnMd7vU=)
2: e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa (hash: +VPNQ16MVhJiwbxpGaUiyY+7EYW+EvR2+xy1H+6qMTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:7f:35:03:11:a8:e0:cd:9a:34:b1:6c:fd:de:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: May 8 13:01:22 2025 GMT
Not After : May 9 13:01:22 2025 GMT
Subject: CN=9b4e301b3728e1bcd6a7d714310a4106c71f3941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:25:71:ca:e2:52:96:c2:ea:f7:de:84:38:
5e:12:1f:b6:51:65:90:3a:1a:48:bb:cf:17:e1:8f:
9d:f7:1d:fb:1e:d7:8c:05:17:fd:87:a2:99:3f:b3:
bb:ad:c7:e3:61:d1:43:de:96:78:13:c6:f9:ce:8c:
53:73:de:23:f6:f0:a2:50:28:df:46:b5:bc:25:35:
93:31:d1:75:fe:f0:9c:7a:57:c8:22:a5:24:b1:17:
a8:02:56:a6:ef:1a:c9:0b:27:85:f4:8e:43:70:e1:
89:c4:f3:3a:3c:21:ec:5a:3c:23:f4:ee:96:60:46:
18:77:d0:5b:fe:47:1f:c2:95:51:c2:ee:87:55:23:
2e:21:ee:21:d6:b2:52:22:13:4d:81:40:d6:0c:76:
f9:f9:e9:2d:73:56:ce:08:cb:cb:1d:9e:74:1d:48:
33:11:ad:fa:9c:a8:3e:df:69:4e:4b:3f:c1:dc:ee:
f3:ab:44:6f:dd:a9:42:a3:db:a5:88:23:02:95:f0:
39:6a:02:1e:65:87:81:e8:01:50:dc:35:e7:0c:ae:
9e:fa:b2:57:a0:9b:b3:d9:86:b9:c7:66:03:99:7f:
4e:a6:46:ae:ef:5f:7a:a4:f7:f6:6c:ab:98:b9:67:
37:f6:95:27:6c:48:ff:ab:e6:b2:2f:b7:fb:6f:92:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:30:1B:37:28:E1:BC:D6:A7:D7:14:31:0A:41:06:C7:1F:39:41
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e6:d0:7a:8c:38:63:4b:71:93:78:b2:58:b7:f0:f8:a2:05:
3b:96:3e:c3:02:d7:42:aa:94:ac:f9:ec:8f:20:71:c2:d1:68:
2b:87:ea:aa:1b:d3:12:b9:c4:91:01:f4:d8:af:d6:1b:6f:c0:
fc:ce:1a:a0:49:5f:9a:f5:55:69:d8:5a:ed:8c:03:65:86:2d:
36:58:dc:26:37:48:25:6a:ff:8b:ac:ef:58:4f:31:9a:90:87:
12:e2:de:e6:f8:e4:85:8a:f9:4c:fe:73:b3:0e:0d:c2:bd:ac:
a5:a2:a7:2b:b5:f1:20:6e:1d:17:c0:d0:1b:fc:0f:08:35:ea:
85:33:2e:09:93:37:f9:ce:8c:84:77:da:59:ef:57:63:80:76:
88:5e:43:d6:ba:7a:0b:29:3a:53:e7:0b:04:ba:9f:be:a8:00:
e0:4d:35:0b:5f:7b:f3:90:0c:e5:25:e7:e8:fc:31:04:55:44:
14:58:dc:a4:ff:bf:31:68:1d:ab:cd:61:4f:ce:5e:72:c8:23:
50:43:39:39:80:6e:74:75:a3:eb:a0:b0:fc:53:1a:f5:82:01:
c9:23:74:5e:cb:72:48:30:90:15:fd:f6:fd:0a:6d:ed:bc:82:
86:33:4b:08:94:ff:fc:bb:4d:dd:24:39:20:32:17:8c:82:2d:
6e:e9:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:31:51 2025 by rpki-client