Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: hd6ZhfEflrDS7eDX9jc2q+VO7vOjP4lkYLKrtP1qfcs=
Subject key identifier: B5:54:42:EB:88:B0:63:E6:63:99:B2:02:7C:CC:F8:99:B2:18:DA:D1
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 0196BCA479942B7EBCEEF8ECE403D4180DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 00:00:17 +0000
Manifest this update: Sun 11 May 2025 00:00:17 +0000
Manifest next update: Mon 12 May 2025 00:00:17 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: hT0VWdyvm5TZdbsXaN2+jZ6ordCbRGe7hPDA/sRXl40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:79:94:2b:7e:bc:ee:f8:ec:e4:03:d4:18:0d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: May 11 00:00:17 2025 GMT
Not After : May 12 00:00:17 2025 GMT
Subject: CN=b55442eb88b063e66399b2027cccf899b218dad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:67:a1:ba:25:d1:7f:1e:6b:0b:91:66:ac:
df:4b:53:83:e6:37:0a:2a:a2:b8:c1:2d:24:6c:32:
2e:70:e8:3e:24:1e:1f:94:9c:a7:7d:88:5f:20:69:
7f:bb:7c:c6:05:5f:0d:90:cf:b1:c3:7c:65:7b:ba:
b1:2f:a4:59:91:83:60:33:61:ab:2e:16:91:f7:8b:
69:73:bb:b8:cb:e8:2e:af:4f:3f:f9:56:40:3f:6a:
0b:28:ee:4d:00:3a:a7:fd:58:d7:1a:cb:81:88:b0:
13:98:d8:a6:73:fb:c9:83:de:a1:b3:dd:12:b1:f0:
6c:23:af:b5:42:64:a9:c8:3d:6f:68:3d:87:e0:cb:
91:06:9f:c5:92:9a:9e:8c:70:e4:a7:8b:d4:16:ad:
1c:69:b8:b0:a1:d5:bb:57:55:b7:68:ed:fa:06:22:
fc:4c:95:8e:9b:29:e2:0e:50:7c:4c:97:5f:7d:69:
0e:62:20:75:64:12:fd:d1:00:f1:bc:cd:43:88:d4:
29:88:f7:67:89:96:88:d4:8e:06:76:56:77:b7:fb:
0a:36:cd:54:5f:28:c9:3b:d9:95:e4:16:df:23:40:
f2:96:49:7c:98:bb:9e:0c:59:74:66:24:c8:ec:d2:
cd:3b:d1:b9:c9:d6:85:0b:f4:45:57:c4:cf:81:9c:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:54:42:EB:88:B0:63:E6:63:99:B2:02:7C:CC:F8:99:B2:18:DA:D1
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:79:52:35:eb:92:dd:b3:7b:ca:43:51:70:8b:b8:36:51:5a:
f5:f8:0c:2c:9d:ef:57:fb:68:9f:44:29:71:56:9f:02:d4:13:
6b:d6:53:00:34:70:cb:42:58:50:37:d7:c1:37:0c:02:08:e4:
61:4f:32:27:58:0c:ac:bb:f8:90:b8:e5:cc:a9:50:dd:47:41:
80:da:98:61:6f:ee:7a:5f:14:e7:b3:dc:3f:e8:01:53:9c:6c:
fa:89:cf:f5:e1:d4:47:ff:17:a3:2f:1e:6e:de:91:4a:c6:8a:
13:c3:9b:53:17:69:55:67:fc:6f:65:8e:68:db:f5:7a:c9:84:
48:d5:23:ac:58:3b:82:81:99:4a:b4:2b:34:67:15:3a:7d:15:
d9:f5:be:92:89:f6:92:65:fb:b5:fa:82:de:06:f9:32:d5:c2:
fe:54:6e:e0:80:35:a6:d1:42:75:fa:9b:9a:4c:1f:45:7e:ee:
2d:2c:54:3f:d8:f3:76:1f:b2:4a:d5:46:a9:6e:42:d7:d3:3c:
7c:80:ee:40:57:79:ab:57:6d:8f:4a:79:cb:3c:83:68:14:f4:
77:91:56:2f:17:2f:c7:a1:9a:fa:b5:cc:d0:80:95:15:3b:37:
70:0b:45:d7:af:6a:7c:1b:7e:bb:ea:1d:0e:ec:bb:28:ee:e6:
59:47:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:47:42 2025 by rpki-client