Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: av55lDWz68MOgtSSxFSghZhlNuusnQo4RcpPPwDMbyY=
Subject key identifier: BA:51:06:AA:5E:37:49:8B:7B:86:7C:61:E5:D0:FE:5C:BB:8E:7B:C7
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 01969F3F65691C73C2CCA712569B44E58714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 0A37
Signing time: Mon 05 May 2025 07:00:54 +0000
Manifest this update: Mon 05 May 2025 07:00:54 +0000
Manifest next update: Tue 06 May 2025 07:00:54 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: wMm03FGEooEmBzSBai3c79BJsbLP6T4pDMvlCv7iOdM=)
2: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (hash: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:65:69:1c:73:c2:cc:a7:12:56:9b:44:e5:87:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: May 5 07:00:54 2025 GMT
Not After : May 6 07:00:54 2025 GMT
Subject: CN=ba5106aa5e37498b7b867c61e5d0fe5cbb8e7bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:fa:00:ee:be:03:f8:c2:bc:da:a5:76:c6:
be:67:62:ed:fe:f0:3e:c2:c5:65:f2:60:11:00:8b:
e8:01:34:57:0a:a2:8d:0e:40:3e:a4:b4:78:d5:3b:
7c:df:dc:2f:5c:74:2f:46:6b:0f:38:ef:ee:a9:68:
1a:5e:c6:4f:87:ac:4e:45:3a:65:ba:50:a2:0d:fa:
b9:ff:10:9b:41:2a:fd:c0:41:39:2c:40:bd:f0:23:
dc:fa:38:5b:e2:5a:3c:60:bf:9b:64:74:83:29:52:
53:52:e2:26:66:15:1b:39:8a:34:38:19:7b:f7:c2:
6f:fe:68:75:09:92:30:47:f5:15:5b:42:f3:3d:d0:
57:d0:d1:c5:c7:d2:4c:62:d9:2e:a7:51:e0:c2:01:
ac:75:ca:80:08:07:a5:4a:87:ed:9e:a6:e0:4f:ce:
d1:0c:0b:6d:87:8e:4a:4b:a3:c2:d7:a7:d3:f3:fa:
39:dc:6e:b6:3a:19:81:d5:4a:4a:91:55:c1:7b:ec:
27:bf:76:ec:4d:55:53:96:5e:99:f1:c7:2a:4e:84:
dd:4f:48:ce:37:b1:22:29:b6:f7:a5:4a:fc:03:f6:
66:29:18:cf:aa:35:12:e4:64:88:e6:bd:19:af:bb:
33:2b:1b:ab:8b:60:5f:9c:8e:0b:6c:58:e8:1e:53:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:51:06:AA:5E:37:49:8B:7B:86:7C:61:E5:D0:FE:5C:BB:8E:7B:C7
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2a:f2:a6:85:75:b6:2a:84:7c:c6:3f:b1:aa:93:e7:78:2b:
b6:44:22:1c:bb:21:8c:75:a7:d9:d3:7b:72:dd:e1:6d:05:fc:
e4:bf:fb:a1:9f:c5:b8:63:49:a9:2d:ba:63:b8:05:82:cd:e2:
6d:5d:4f:d3:6d:9c:bb:cf:a3:5c:bc:cc:a9:9a:d8:cd:c5:90:
51:90:09:41:6a:4c:2f:96:55:ba:27:ab:79:f6:0d:ee:1d:af:
c9:b4:bd:b3:05:6e:e9:0a:7b:f5:5e:ab:75:c0:16:32:7c:1d:
b0:1a:c3:0a:78:f2:a2:3e:e7:12:82:8a:cc:f0:99:fd:61:2a:
6a:e6:3a:a9:09:d0:69:76:84:d4:e9:bf:a3:50:3f:13:8b:0c:
1f:f7:cc:2d:7c:6c:9c:b9:34:f3:a7:3d:09:00:4f:07:53:b1:
04:c0:e9:11:ff:35:93:bf:71:94:2b:d6:ab:a6:8e:f9:e1:ae:
47:ac:50:e6:f3:69:07:fe:62:f5:74:e9:84:31:41:92:3b:bd:
a7:e5:55:c8:0c:11:49:f5:9f:08:9b:19:d8:89:b8:4a:4a:7d:
1e:3c:fc:c8:9a:d6:95:5f:04:2f:90:80:7d:2c:33:b8:7a:3c:
ef:89:07:d2:d6:5e:22:35:8b:27:ce:23:66:b2:ba:6a:f0:aa:
54:0b:31:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:22:38 2025 by rpki-client