Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
File: 4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json)
Hash identifier: Nr26xirgDJ94tXhTZZM2G3UqyzPJa17zU8/P6oVfjP8=
Subject key identifier: 59:66:9E:C8:ED:6F:02:21:D5:AA:C5:0E:75:37:96:AD:14:9D:79:89
Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
Certificate issuer: /CN=e2d63ca0542832e64264f3acb15619922fecf83b
Certificate serial: 0196B890CE7B1A3BD94781695E1608D6BC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
Manifest number: 0E0A
Signing time: Sat 10 May 2025 05:00:19 +0000
Manifest this update: Sat 10 May 2025 05:00:19 +0000
Manifest next update: Sun 11 May 2025 05:00:19 +0000
Files and hashes: 1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: gGkx3+mk4vf+kDUH+UoGbKWz65Ecq41K0/DWxF5wuZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:90:ce:7b:1a:3b:d9:47:81:69:5e:16:08:d6:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b
Validity
Not Before: May 10 05:00:19 2025 GMT
Not After : May 11 05:00:19 2025 GMT
Subject: CN=59669ec8ed6f0221d5aac50e753796ad149d7989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:72:8d:1e:43:57:27:54:09:b7:be:47:0e:
e9:2f:fc:43:0b:80:c1:b8:b3:26:c9:f6:2c:5e:31:
f9:e0:10:77:b7:70:e5:93:5a:89:24:ac:02:c5:db:
5d:77:8a:40:f5:df:6d:a4:24:ee:a7:8e:a6:c9:52:
82:f5:fd:56:0f:54:3f:11:aa:03:80:c6:81:1d:44:
e3:8b:33:64:b7:8a:80:74:9f:1a:df:25:b4:d2:24:
af:3e:69:f3:a9:0d:dc:a5:10:d6:fd:a7:be:a5:17:
eb:80:19:a8:a5:5e:3e:86:35:61:64:82:21:18:05:
44:b8:64:82:e7:3d:e9:b9:96:b2:06:81:e2:2e:17:
8a:ed:24:d5:c0:92:15:0a:eb:d5:ad:69:68:8c:a1:
2a:df:e6:c4:ec:de:38:41:6f:41:47:3a:97:9a:ae:
a4:22:41:d8:0a:e1:95:09:42:09:4c:cd:6e:39:6c:
e8:87:5a:82:c1:0c:d7:41:21:bd:c4:52:ff:fa:d6:
c5:4b:02:8c:c3:e7:5f:40:55:63:98:67:62:aa:4c:
9e:37:91:45:53:8e:06:7f:c0:99:c7:50:7f:32:46:
0d:e7:1e:6e:e2:52:2e:c1:18:db:05:f2:96:6c:57:
2d:22:a1:02:ee:f4:2a:6f:8f:82:3d:13:9b:da:66:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:66:9E:C8:ED:6F:02:21:D5:AA:C5:0E:75:37:96:AD:14:9D:79:89
X509v3 Authority Key Identifier:
keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:41:54:9a:a8:3f:e1:b5:d5:c8:65:87:ff:70:ea:01:18:f3:
f4:ca:c7:a0:39:ca:30:80:a5:bb:4f:6d:e8:88:71:37:5e:2d:
52:97:de:9c:ed:b3:74:f5:5e:5c:42:e8:7e:7c:09:c5:65:e3:
6d:3d:4e:9c:6a:fa:5d:4f:0d:7e:cc:07:56:18:83:ce:2f:07:
ea:e2:4b:7d:59:cd:76:e3:5f:37:04:bc:00:1a:11:b4:62:6f:
2b:0a:b8:3d:58:86:ef:be:1c:00:3b:3d:ed:6c:46:b0:15:3d:
73:69:bf:cb:07:87:de:f7:ef:3a:1c:e4:68:d1:36:74:eb:1c:
a7:32:fd:a1:15:78:c1:5d:78:5e:7e:43:df:94:6b:c9:f6:03:
e2:9e:f3:31:b6:20:d7:28:57:c9:dd:51:cb:ec:b3:5f:d7:ce:
6f:89:81:29:9a:9b:20:11:b7:ac:a4:c5:c8:36:a3:c2:89:51:
07:fd:51:b8:b0:75:9e:42:51:28:c0:cd:2b:54:21:de:af:ed:
d3:d0:f8:5b:a6:1f:2b:74:32:39:e6:c6:62:db:3f:00:45:1a:
e6:b8:7e:cb:97:d4:b5:18:bf:43:58:1c:ae:b8:91:c4:b1:0e:
39:9c:88:43:7b:17:3c:f1:90:b6:de:85:61:af:ac:4b:83:df:
cf:bb:91:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:55:17 2025 by rpki-client