Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: V/vu6mBl8RRGWkSa4Lq/PTHXP9DqV1WQPmwcQz6JBD4=
Subject key identifier: FA:92:D6:BE:C3:4A:A7:1A:58:26:D2:F6:08:E9:49:C8:7D:88:3E:A6
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 0196C2DDCC3CB804B53BDAB078861AF17C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 05:00:37 +0000
Manifest this update: Mon 12 May 2025 05:00:37 +0000
Manifest next update: Tue 13 May 2025 05:00:37 +0000
Files and hashes: 1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=)
2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: tffiz1SHL0/+D1oRSLmKJJxSGP3Xr+lLUt93Ku/H/uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:cc:3c:b8:04:b5:3b:da:b0:78:86:1a:f1:7c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: May 12 05:00:37 2025 GMT
Not After : May 13 05:00:37 2025 GMT
Subject: CN=fa92d6bec34aa71a5826d2f608e949c87d883ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:38:b5:b8:33:2d:22:0f:cb:37:b3:8e:a9:
a5:41:65:51:c1:da:77:8c:9e:f2:79:2b:bf:41:4a:
b0:78:c3:c5:73:6f:92:ac:48:3c:88:6a:e2:ad:9d:
c4:39:d1:63:32:f4:66:03:f0:68:83:73:49:0e:b9:
f7:04:0f:02:a0:14:bb:f6:34:f5:1b:cf:86:ec:fa:
01:3c:bd:e3:9d:44:e2:8c:78:f5:78:19:7f:f6:b9:
1b:66:79:77:99:12:1b:2e:0e:59:f1:f5:29:1d:62:
7b:7d:2a:3c:7b:29:45:e7:5b:57:e4:a1:a6:46:26:
7d:08:52:7c:8e:2e:14:c2:1d:f6:73:fd:b5:ce:3b:
af:bb:bd:60:33:cb:ca:10:d1:2d:25:40:05:5c:47:
32:4d:3d:43:a8:2f:ce:4f:d2:a8:a8:4c:f0:d1:c9:
91:bf:24:f2:92:59:10:63:d7:a8:c3:23:42:21:17:
c3:64:2d:e1:04:7c:4a:ab:9b:2e:cd:3a:a6:df:f8:
b1:1f:f3:15:04:f1:ce:10:42:b2:fc:42:65:df:b6:
24:8a:ca:dc:0d:8f:e7:4c:8a:92:53:43:60:e8:ec:
37:dd:29:e1:37:c0:a9:5b:e7:cf:91:0f:ba:0b:18:
ae:85:63:55:0b:a0:54:71:cd:bf:05:fa:57:8c:2a:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:92:D6:BE:C3:4A:A7:1A:58:26:D2:F6:08:E9:49:C8:7D:88:3E:A6
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:17:48:1a:18:61:5f:f9:7d:69:68:d0:f6:dd:03:b0:37:95:
aa:e5:ea:f9:1a:a7:95:d7:3d:95:04:37:d6:8d:6c:a4:07:90:
2d:2d:41:b6:82:63:b0:77:22:c6:66:ba:12:04:7e:9f:f5:61:
c3:50:c2:1b:27:e9:93:08:ed:6f:eb:81:89:cf:a8:89:93:af:
da:7d:69:07:ed:ad:e7:c1:55:eb:3e:e0:78:06:fb:cc:ad:21:
68:11:4e:25:5b:24:40:54:70:ce:b4:25:0b:b8:e3:48:c2:8b:
35:08:54:bc:a3:63:b9:c6:44:29:41:60:7c:56:61:53:f3:87:
c5:5e:41:1e:86:55:db:16:dd:5d:89:df:78:19:54:ff:af:e7:
f9:a9:5b:9c:27:ed:08:ca:f5:21:1f:9c:02:72:05:b4:95:c1:
5b:00:52:f1:d9:4c:a0:c3:09:cc:3f:b8:a7:0e:08:ae:27:8d:
df:04:6d:9d:14:95:84:0a:d8:1f:5b:33:00:94:46:b0:d5:15:
34:22:31:bf:cd:1a:89:7b:c0:6a:1c:9c:89:a2:cd:56:3b:8a:
5f:fe:c4:e9:59:65:14:75:8d:c5:a3:e2:de:8a:35:a8:7a:e8:
b6:46:18:fd:1e:2e:f7:58:e1:cd:bc:e5:53:c3:11:d4:16:50:
75:d9:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:34:55 2025 by rpki-client