Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json)
Hash identifier: iQttM3hzY3tKrIaVtQ+o987tR2vHQDmi9xDPRcsN86s=
Subject key identifier: 71:9A:7E:FE:59:0F:80:4B:0D:A1:BE:71:45:43:1A:30:F5:7E:C6:DF
Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Certificate serial: 0196C04ADF266E975A8845CE4E2851E115F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 17:00:54 +0000
Manifest this update: Sun 11 May 2025 17:00:54 +0000
Manifest next update: Mon 12 May 2025 17:00:54 +0000
Files and hashes: 1: 65jp3a6f2gh4Tkpte2rBeESresA.roa (hash: 07jq7hxGRgJkHsgPxiO4p+naJnzzp9QCQTCf5Ueq5Sc=)
2: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: 6ejE5bPgRuvseBMtBHVjmTmUjbQPUg86LXmsULpl6VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:df:26:6e:97:5a:88:45:ce:4e:28:51:e1:15:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Validity
Not Before: May 11 17:00:54 2025 GMT
Not After : May 12 17:00:54 2025 GMT
Subject: CN=719a7efe590f804b0da1be7145431a30f57ec6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:e4:95:8c:d7:90:e0:03:55:7d:bc:ff:69:
85:a2:6f:92:fc:a7:34:81:5c:b6:ff:b7:a9:ee:6a:
86:59:8c:37:d6:b0:20:bb:13:0b:f7:7c:db:23:54:
ea:74:3d:fe:1e:df:d5:0f:ff:1e:c4:e8:13:98:44:
43:1b:75:3c:66:8c:44:fb:c7:7f:95:f9:78:7e:38:
b4:12:4f:f1:48:25:4b:de:a5:3a:47:ec:f5:e5:b3:
0b:4c:c0:90:3e:82:72:74:a5:05:8d:26:e5:f9:70:
a7:9d:af:b3:7d:e4:b8:96:0a:89:f9:21:e4:a6:0a:
05:1f:8d:a6:32:40:04:00:d0:58:73:54:0c:a4:8f:
a6:fa:41:0c:8f:38:4b:65:47:f5:05:16:48:f3:9d:
90:1a:21:e0:d0:9d:24:12:3e:5e:21:3f:cb:0e:6a:
d8:d9:fd:db:ce:d7:78:38:00:de:2f:ee:31:eb:e3:
9e:47:8c:70:09:7a:ba:8e:d5:b4:f6:1c:bc:3e:ed:
25:02:46:3b:24:2d:92:a9:62:7f:60:e9:64:df:16:
79:31:24:1b:b2:6a:03:64:0c:9d:2b:6f:c7:f5:52:
f9:58:eb:6e:a5:cb:95:52:d7:89:22:72:11:d5:5e:
eb:e2:5f:f1:d5:48:17:7a:b1:f4:af:54:35:80:8f:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:7E:FE:59:0F:80:4B:0D:A1:BE:71:45:43:1A:30:F5:7E:C6:DF
X509v3 Authority Key Identifier:
keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8c:bf:3c:ec:56:61:fe:88:b8:91:75:1c:15:c9:69:39:81:
04:26:df:d4:3c:90:2f:91:d6:26:56:93:5a:64:e4:09:41:f5:
a3:74:75:7d:ab:7a:fb:f1:85:d6:46:ee:77:74:fd:fe:31:f9:
ce:dc:40:cc:65:a6:48:ac:d6:1c:b4:47:f5:24:c4:5c:ae:28:
7d:b9:13:a2:01:b6:3d:40:43:71:c7:ac:7d:41:fc:3d:e8:37:
c2:6c:07:b0:4a:f5:f9:7a:74:cc:fa:cc:e3:7b:bb:73:02:9a:
f4:51:d5:f7:d9:71:be:e9:74:61:6e:3c:c5:52:4c:c0:78:03:
b1:c0:67:9f:e8:e0:33:96:8b:ae:e3:01:bd:5e:4e:05:5e:f6:
72:05:46:a4:42:a3:72:6d:23:0d:8d:96:51:e0:b5:3f:12:1e:
f5:f4:7a:6c:bf:18:4d:20:6d:61:d8:56:b5:56:39:ac:c8:c4:
0a:89:c2:c9:b6:d0:31:03:71:ae:c6:30:86:23:90:99:f0:73:
60:c8:2c:64:30:c5:d3:e6:a1:f3:21:83:16:07:2f:71:97:ed:
62:55:bd:fe:12:5a:20:c2:7f:70:0e:6d:fa:50:3b:11:ba:a4:
80:39:d0:46:4f:0e:48:37:d9:12:b2:87:a5:62:12:82:09:74:
5e:6f:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:12:39 2025 by rpki-client