Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: UeF/NpjV0w73x1XqihqM0Ubwi/IpSG98oJ0hGsyyX4I=
Subject key identifier: FB:00:AD:5C:3F:99:DB:93:89:81:14:4E:62:BC:BF:B3:FF:30:32:F8
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 0196AE0DA41986A229BE951F2DD911780254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 1533
Signing time: Thu 08 May 2025 04:00:51 +0000
Manifest this update: Thu 08 May 2025 04:00:51 +0000
Manifest next update: Fri 09 May 2025 04:00:51 +0000
Files and hashes: 1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=)
2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: gUnwEXZ3onrfP2cNrtwdy9uexCvnYyVVi/rb+AD/OCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:a4:19:86:a2:29:be:95:1f:2d:d9:11:78:02:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: May 8 04:00:51 2025 GMT
Not After : May 9 04:00:51 2025 GMT
Subject: CN=fb00ad5c3f99db938981144e62bcbfb3ff3032f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:c8:4c:01:82:b2:94:6a:1d:99:40:9c:64:
7c:e4:92:4e:4b:25:b4:88:32:77:e4:8e:a2:9c:9e:
88:4e:cf:dc:08:cf:67:bc:67:82:a5:dc:5f:9e:ea:
10:86:21:a1:1d:b2:d6:52:00:67:11:ca:2a:f5:c7:
3e:93:e1:38:d0:07:de:8b:5e:3f:62:7a:51:31:42:
87:dd:c8:36:b1:f5:fc:79:66:d9:41:e6:e0:91:60:
dc:d8:26:69:14:9e:75:c5:ef:23:b9:13:10:59:17:
52:10:7f:2f:81:ec:e2:4c:d8:3e:6a:25:8c:e6:95:
a5:8f:2c:e4:20:5a:8c:cf:86:f3:2b:78:cc:65:40:
37:59:5a:6c:91:ee:8f:db:67:cc:94:c7:33:2c:6d:
70:c5:f5:f9:d6:b6:3a:82:7a:8f:10:2a:e8:d0:7a:
97:0f:7a:1c:39:cd:bf:83:47:1e:58:66:a0:7c:3f:
9c:80:0d:46:47:af:5c:2e:fd:01:4f:f5:64:53:d3:
92:9c:4a:6f:ff:60:26:fc:7d:b5:f2:3d:07:2c:cd:
ee:89:da:0f:d5:f7:03:c4:13:45:60:4b:ab:ea:30:
3a:c0:a4:ad:e7:1d:08:dd:6e:06:ad:a9:2a:50:04:
f4:34:e1:50:fd:3f:d6:cf:6a:1f:01:07:af:26:88:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:00:AD:5C:3F:99:DB:93:89:81:14:4E:62:BC:BF:B3:FF:30:32:F8
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:02:89:17:32:fb:63:be:c9:8f:4f:28:50:2d:e5:6d:6f:c1:
6d:9a:ab:ef:14:ea:62:dd:8a:48:6a:50:55:a4:73:de:52:f6:
79:d3:6e:15:94:b1:62:6b:0f:4f:ab:f7:78:22:9c:47:fe:a5:
7c:c1:98:aa:f5:8a:49:e2:6e:be:e3:88:98:63:53:ad:b6:44:
3c:be:9d:99:2b:d0:43:2c:8c:3c:42:d8:b8:2b:4d:26:c9:53:
4b:92:4f:b4:a6:d2:51:97:8b:35:bb:46:12:05:4d:8f:4b:91:
f4:f7:ee:9e:e5:da:0e:51:e8:73:b2:60:bb:32:8a:a7:2d:48:
a7:0a:5a:01:35:0b:fc:47:b7:1d:17:08:25:05:b6:07:24:0e:
cc:9a:2b:25:e9:90:04:2a:f1:32:b0:04:8d:2d:43:a1:88:e8:
35:90:c2:b3:01:0e:d6:57:1c:4d:fc:3c:9a:aa:e0:84:aa:97:
ff:1b:d2:38:f2:51:27:9f:1a:e8:1b:4e:5d:96:95:06:c4:25:
ff:dd:e6:bd:37:62:16:ab:3b:b8:d2:eb:df:70:3a:93:90:ab:
07:eb:a5:51:f5:1a:fa:e8:5d:72:78:42:d1:f6:c3:46:f8:1f:
a1:df:e1:03:71:6e:b2:f3:93:33:e3:bf:75:5a:4c:40:c0:6b:
30:f3:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:07:22 2025 by rpki-client