Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
File: SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json)
Hash identifier: QDn+VFBi7kOpVXzasypGVlvD9kouxg584qHRoW4iOtY=
Subject key identifier: 87:8E:E9:07:1C:17:CA:0A:05:9D:0E:00:80:6B:82:6E:18:72:DA:6F
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 0196BD49538B0406DDE801BA207C4A2F8A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 03:00:21 +0000
Manifest this update: Sun 11 May 2025 03:00:21 +0000
Manifest next update: Mon 12 May 2025 03:00:21 +0000
Files and hashes: 1: QZ0qtYVoe9eTyxZ80lBv-di1FfE.roa (hash: 25XKDnhztQCemAlFiOHm1I7VVswm+flqcSO7FBEPKO4=)
2: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: m/3AjE5fzr5ctJQvF3z9mLqxktGDFkFpwKeZezflEqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:53:8b:04:06:dd:e8:01:ba:20:7c:4a:2f:8a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: May 11 03:00:21 2025 GMT
Not After : May 12 03:00:21 2025 GMT
Subject: CN=878ee9071c17ca0a059d0e00806b826e1872da6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:e8:a2:ff:6f:47:cd:49:bc:e7:76:8c:f3:
b9:22:4c:46:ab:7a:67:85:15:38:22:70:da:f9:63:
d5:8f:1e:a7:13:a4:8a:ef:fc:2b:57:c1:8a:aa:28:
9f:84:7b:f4:bd:9e:ee:74:6b:87:72:67:1e:10:a9:
43:f0:d7:78:bb:ce:a5:f1:e0:64:c1:b7:0b:22:19:
bb:47:0c:ef:10:24:80:cf:0a:82:4e:14:9f:58:8b:
59:14:f4:d7:6c:3d:aa:13:06:d7:17:77:ea:d8:e8:
1f:ce:d7:29:eb:02:c2:40:5d:e1:b2:40:0d:b8:56:
ad:19:b1:5e:13:be:61:54:38:45:1f:14:dc:10:5a:
af:83:47:1d:31:79:49:1e:f0:23:26:ec:f7:41:ce:
13:55:22:aa:82:87:7c:67:2d:a9:91:71:45:73:7e:
38:4a:67:8d:bb:4e:f5:0e:9a:33:a7:98:aa:70:3d:
c2:99:23:b3:f3:d2:d3:04:a5:28:37:b0:2c:cd:56:
ef:92:46:64:f7:a9:25:b6:62:ca:bf:12:71:42:f9:
75:88:ea:43:70:65:85:0f:ca:bd:fd:b4:e9:a0:29:
66:ef:09:53:0e:71:19:12:63:3d:8e:ad:ac:92:c2:
80:e2:13:c6:ae:08:7d:14:ae:f1:3d:cf:af:6b:7e:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8E:E9:07:1C:17:CA:0A:05:9D:0E:00:80:6B:82:6E:18:72:DA:6F
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:62:b1:d7:2e:ea:5c:9b:29:49:12:06:b4:29:1b:0d:87:25:
e4:2e:78:9f:bf:fb:99:9e:d6:88:22:a4:03:01:09:9b:7b:78:
26:94:b9:b6:4a:cb:34:da:17:a2:3b:20:bb:9a:e3:90:2a:6d:
4c:6f:8a:03:fc:00:eb:e7:be:e7:8d:ee:36:82:78:4d:21:87:
e8:b5:07:27:0c:9e:51:97:d0:58:0f:7b:13:29:93:57:11:fe:
dc:85:6e:84:cc:64:3c:09:10:45:07:c1:5f:80:3a:9a:18:c1:
67:56:a4:c0:b7:b2:52:a4:39:dd:75:6e:2c:8d:b7:4d:ee:85:
fd:f9:6a:5a:7e:f9:7e:3a:f3:31:64:9f:19:8b:f0:bd:8c:2d:
cb:67:5d:be:0b:f2:02:8c:a7:5f:d8:2f:a7:b3:cd:1a:68:0a:
b2:18:4f:f2:21:b1:0f:3a:19:ee:6b:d7:06:16:4c:ea:a3:60:
5c:c8:6c:b6:36:bf:5b:ca:ab:08:29:40:e5:e7:ee:3b:e0:d6:
33:cb:c6:ed:82:cf:fc:35:75:bc:f2:61:4a:df:c5:87:60:b8:
8d:31:5f:51:1a:8e:8b:9d:b4:9e:e2:ad:6d:aa:b6:bb:72:ee:
30:f3:c4:43:e4:21:35:31:fe:71:0f:90:ee:f7:67:89:ba:bb:
88:0a:51:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:34:14 2025 by rpki-client