Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: PVq43SupZh0qIxWNZHmCAWjP1zCtatw4cY655TEOKmE=
Subject key identifier: A3:98:6D:F6:26:19:1C:15:71:3B:29:84:EB:7C:57:8F:1E:89:4B:33
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 0196A1643BA36A050C82B13CBBD02A45094E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 17:00:22 +0000
Manifest this update: Mon 05 May 2025 17:00:22 +0000
Manifest next update: Tue 06 May 2025 17:00:22 +0000
Files and hashes: 1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
2: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: pLNzRwW7a+F3Fhkrn7TgDcicUeOHXPshA0UrY8kOwXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:3b:a3:6a:05:0c:82:b1:3c:bb:d0:2a:45:09:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: May 5 17:00:22 2025 GMT
Not After : May 6 17:00:22 2025 GMT
Subject: CN=a3986df626191c15713b2984eb7c578f1e894b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:fe:4c:6a:55:cc:67:61:b3:f2:07:f3:6d:
02:96:3a:a1:bf:a3:cb:33:d9:e8:f4:83:b5:30:0b:
c1:e0:8a:28:5d:3d:f0:e7:0b:15:41:dd:b3:c5:2a:
73:2b:f6:e0:97:96:c3:f3:29:d5:ff:fd:82:d8:22:
32:25:ae:fe:9f:c2:82:1d:e3:28:63:94:6f:47:22:
42:fe:a6:54:d6:f6:6b:d6:50:be:b2:10:3f:28:51:
21:5f:f1:1f:af:41:aa:d5:58:d7:0c:8d:be:3d:63:
fd:11:9d:fa:78:65:5d:07:4c:00:0a:41:b6:ba:22:
91:0d:bd:ae:4c:11:d5:53:c0:65:52:0a:dd:00:a2:
76:43:11:35:45:5e:74:49:74:8d:b7:1e:5a:e5:0d:
07:44:73:32:c1:6f:5b:c1:54:64:e8:79:92:e5:ef:
00:92:0a:99:4d:61:ff:91:da:44:01:b4:41:e2:31:
fd:25:cc:46:59:c3:a4:f6:24:7a:ed:cb:1c:f5:c3:
98:3d:4b:cd:5b:af:05:5d:8b:fd:3d:ff:b9:94:d0:
24:be:70:01:04:24:d2:6c:20:e0:fe:ae:64:ea:d1:
49:89:53:d6:f8:f7:00:14:57:52:7a:21:03:77:ca:
a0:5a:fb:93:b8:ad:89:d5:6f:08:4a:ec:9b:6d:a2:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:98:6D:F6:26:19:1C:15:71:3B:29:84:EB:7C:57:8F:1E:89:4B:33
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:06:67:46:d2:3c:57:23:13:0b:5c:31:3a:c0:d2:49:75:59:
0c:39:69:02:a0:6a:38:2c:2c:53:d1:90:35:b3:bc:5d:4a:56:
9e:4d:22:43:1c:60:c2:3a:d8:57:c2:4f:15:fb:d9:68:c5:29:
79:8f:b9:f4:6f:d2:fd:b3:6a:56:9e:c6:8e:a2:30:9e:1a:c1:
ce:30:f1:4b:e0:81:8b:91:ce:08:e9:a8:56:a1:c6:c7:ce:3c:
b5:39:80:b5:3e:fe:b3:f9:eb:53:7f:4a:50:a1:d8:aa:85:99:
cc:73:4a:5c:3e:2d:58:a1:1a:f9:08:d9:4c:9f:b1:2f:ce:19:
82:2f:0e:c0:62:3e:7c:83:ba:ab:c9:30:25:cd:23:86:9c:74:
2e:d0:a2:e8:63:c9:a5:a7:9c:35:04:ad:af:02:f9:93:df:a2:
73:87:fa:d3:d5:e5:51:48:78:cb:5f:71:31:ce:ef:99:1c:1e:
c8:81:3b:0f:58:87:fc:11:50:04:d1:87:a5:05:8e:d8:24:d6:
a6:29:f6:3e:da:97:08:87:82:6c:f9:b1:6e:53:99:d2:5b:c5:
16:32:25:2a:1d:ef:91:1c:01:5a:4c:3d:ea:64:1a:12:27:77:
07:80:ad:bc:46:0b:77:94:fa:9c:cb:35:e3:96:30:d9:ad:ca:
e3:7d:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:42:42 2025 by rpki-client