Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: luBD9rP44W21DbcivKm52JJiJT+wvljBjGUE8Iz5ynE=
Subject key identifier: FB:2A:37:95:EB:66:86:0B:AE:6E:CE:7E:70:74:89:19:1F:8E:61:5A
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 0196BD80CDE932040C6D3C57976078519C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 03AE
Signing time: Sun 11 May 2025 04:00:57 +0000
Manifest this update: Sun 11 May 2025 04:00:57 +0000
Manifest next update: Mon 12 May 2025 04:00:57 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: kP811HNDvW2QQwP/wPeqWKlzbRfZuqLmhuw8V2Qt9L0=)
2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:cd:e9:32:04:0c:6d:3c:57:97:60:78:51:9c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: May 11 04:00:57 2025 GMT
Not After : May 12 04:00:57 2025 GMT
Subject: CN=fb2a3795eb66860bae6ece7e707489191f8e615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:9a:9c:f3:bf:80:e2:8d:92:93:2d:aa:7f:
1d:ed:01:ce:59:8c:c1:64:d3:86:5b:a4:59:8a:cd:
3e:42:a0:87:c5:73:08:50:6b:41:38:21:14:26:a8:
84:7a:1a:a5:98:c6:ac:62:fb:8d:c1:66:7d:9e:8f:
bc:69:c1:47:da:12:ab:04:98:e4:67:0c:ff:0c:c2:
f9:2c:b9:ac:1a:c1:f5:a9:f2:e6:70:54:9a:fe:68:
d5:fe:c7:de:10:97:1b:1f:c7:60:e6:06:bf:06:0d:
ef:79:02:91:8d:df:98:0f:71:e7:f6:20:76:72:f3:
2e:37:05:5c:e4:44:59:dc:67:79:37:14:e4:88:09:
fe:2c:4f:49:89:52:5f:c8:7a:53:fa:0e:db:08:47:
9c:89:b7:85:9d:9e:e5:4c:81:66:e5:01:c7:b7:ab:
2d:04:19:bd:73:2c:63:c6:84:38:98:6f:4e:95:ea:
7c:ad:af:48:fb:f8:aa:e0:78:48:3a:20:db:c9:31:
30:fe:1c:a1:ea:71:d2:76:97:56:f2:d4:bc:09:bd:
01:cd:c1:23:e6:81:63:5f:32:28:d2:59:ce:85:7a:
e4:a1:09:6d:35:2f:14:1e:a8:0c:eb:2c:7c:3f:86:
b6:03:33:25:de:e7:51:e6:0b:2d:aa:51:a5:08:cf:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2A:37:95:EB:66:86:0B:AE:6E:CE:7E:70:74:89:19:1F:8E:61:5A
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f0:1e:2d:af:01:e1:11:76:a8:a0:4c:24:3a:6c:65:aa:98:
b6:c5:e9:e2:bf:9a:34:8f:ac:73:80:16:98:88:63:11:97:de:
8b:eb:5f:4d:53:38:3f:04:9b:9c:eb:ad:e4:c0:ec:9c:82:d7:
a5:69:1e:fa:8b:19:3e:86:ec:47:9b:00:a1:b6:b3:5f:69:57:
64:f7:f9:99:39:01:5d:b0:ed:df:aa:b3:6f:dd:9c:f6:c0:f7:
eb:c3:0e:dc:3c:f1:47:aa:43:c4:3f:23:22:f1:66:43:38:19:
19:56:bf:d6:74:95:03:eb:6b:26:e7:29:63:84:32:82:cd:c9:
8e:fc:74:98:6f:00:33:3b:52:d3:7d:a2:3d:50:5b:6b:09:d8:
8d:cc:47:0c:e6:4d:de:81:eb:5c:e9:3c:1b:99:26:f4:3f:f2:
41:29:c0:f1:71:c1:09:9d:90:71:19:f4:c0:6b:f7:48:45:df:
0b:d2:ff:22:c5:39:bd:b6:53:ce:04:07:ab:b7:93:8f:84:f6:
f1:a5:db:ed:f1:15:a7:ae:60:ff:b2:4e:f1:c7:a5:59:a7:ea:
6b:f7:72:03:a1:b7:15:6d:a2:b9:c7:0f:bd:88:ac:c9:dc:2e:
86:bc:fc:db:e1:f0:09:43:b1:6c:06:d3:f5:d8:40:b5:62:c4:
80:ca:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:38:34 2025 by rpki-client