Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
File: rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json)
Hash identifier: ONW11nmfeFKaLEM4RXPqF4trmn+cTH9YxZg5Hmp4FWU=
Subject key identifier: B3:60:D6:CD:01:04:DB:B8:AE:7F:9B:A6:43:A9:67:0D:64:AD:E8:87
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial: 0196BC003E308320CA15165D89D994C74354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 21:00:54 +0000
Manifest this update: Sat 10 May 2025 21:00:54 +0000
Manifest next update: Sun 11 May 2025 21:00:54 +0000
Files and hashes: 1: fEfLOGBVJeUecVVlEjapZ06Oj8U.roa (hash: OleUOgz+9pFvUxQajAS7ULw6aOZyzyIU0DZD60L7Tws=)
2: kM5CulzBTgjqTdxC0kA20nIBInM.roa (hash: 4mPvZr8lZjvljhR4YU0MwI6WkG6rsEag6Ecnz4z85HY=)
3: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: C/ievir0vXOiF/PYR/udgestJvJ6/p38N4hdP/9oMwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:3e:30:83:20:ca:15:16:5d:89:d9:94:c7:43:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Validity
Not Before: May 10 21:00:54 2025 GMT
Not After : May 11 21:00:54 2025 GMT
Subject: CN=b360d6cd0104dbb8ae7f9ba643a9670d64ade887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:bb:00:8c:54:19:1f:5d:82:1b:68:3a:65:
9b:60:34:df:ec:d8:b1:13:8a:3e:dd:32:3d:8d:2d:
ab:c3:94:de:3a:15:3d:46:0e:e3:5d:76:93:48:c5:
99:d7:d2:ac:f7:00:d8:ad:81:12:5f:61:fc:8d:d6:
57:89:00:da:c5:8b:3e:5a:74:b0:f5:16:0b:7c:12:
28:08:5c:69:5c:79:0d:32:dc:04:31:13:80:2c:c7:
39:0b:1a:a4:32:8a:3d:eb:85:7e:17:e6:ff:13:85:
6a:b9:e9:12:26:9b:cc:82:57:4d:74:50:e7:4f:03:
20:a4:20:eb:d4:10:7b:cf:f8:4e:d3:5f:11:54:76:
bf:a1:9a:1e:4c:12:e8:dd:9a:de:a0:d5:df:50:2a:
61:1f:09:6e:34:71:7d:17:00:e8:88:d3:78:c5:06:
7c:c7:a7:8b:06:23:dc:7d:49:53:a2:6f:fb:13:7b:
b1:18:6c:c8:62:9a:4b:a4:e8:3e:43:13:a1:ab:19:
4b:e2:77:80:03:71:66:4c:c8:2f:ea:05:5f:f7:18:
4d:ab:09:92:df:53:06:7d:af:3f:c2:b4:45:32:a2:
0d:18:0f:fd:c1:d3:80:e9:28:7b:0f:ba:4e:b4:2a:
96:45:17:68:e8:4a:84:f0:50:fe:8c:d1:1c:0b:30:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:60:D6:CD:01:04:DB:B8:AE:7F:9B:A6:43:A9:67:0D:64:AD:E8:87
X509v3 Authority Key Identifier:
keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1e:5a:14:95:1e:21:5d:72:b9:87:8c:19:5b:fc:c9:ca:ca:
b2:3e:81:78:00:19:84:26:47:83:fc:65:a7:0f:09:d0:06:9f:
a8:c5:40:04:da:85:d5:1f:e9:bd:7a:c3:dc:0c:83:92:e5:78:
04:e7:5f:7c:f4:ff:f2:f9:a1:04:9d:5e:41:f2:3b:6f:d0:02:
00:af:10:a9:19:26:8b:fb:0f:1e:71:13:32:6b:49:47:99:61:
d4:f6:08:48:8b:76:15:03:97:12:b7:94:b8:49:c4:3f:64:5f:
ed:5b:81:8e:2b:d3:91:ea:b7:35:b6:24:f3:48:04:36:d9:63:
50:96:80:53:e8:55:8a:c1:d1:c3:41:00:1a:f0:06:5d:5d:cf:
d8:28:32:26:c6:0a:db:63:d3:9d:28:8f:0d:a9:32:42:d4:06:
cf:d7:2d:69:75:96:b2:8c:a2:4e:49:c1:60:24:97:ec:84:9c:
dc:a7:73:e2:63:88:96:b8:4e:6e:2e:48:93:88:64:a5:f2:9c:
f8:e7:5c:47:b9:57:ef:a5:ed:be:b7:8d:b0:0c:ca:fc:de:13:
42:c7:59:64:1a:c2:0c:5b:31:ed:c6:26:26:b5:80:6d:48:d8:
f7:3a:a8:76:30:83:0a:9d:8f:bf:c1:df:44:7d:3a:2e:d9:cd:
74:e6:3a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:13:52 2025 by rpki-client