Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier: uOy8TMZuaQ3uky/MZMtekB9s+jf4a2MeowmS2QzLVzs=
Subject key identifier: 13:EA:FB:0F:75:D7:BC:FD:B2:7F:63:4F:3D:A0:A1:55:C3:C3:1D:64
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial: 0196B634F71C5C5A47343850DDF6F92F7957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 18:00:46 +0000
Manifest this update: Fri 09 May 2025 18:00:46 +0000
Manifest next update: Sat 10 May 2025 18:00:46 +0000
Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: MFvHS9IFnWPzuPIHPP7e2ecjulLx2tvADczN1iq2U1I=)
2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:34:f7:1c:5c:5a:47:34:38:50:dd:f6:f9:2f:79:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Validity
Not Before: May 9 18:00:46 2025 GMT
Not After : May 10 18:00:46 2025 GMT
Subject: CN=13eafb0f75d7bcfdb27f634f3da0a155c3c31d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:52:e1:95:43:8c:85:72:6a:c0:a4:b6:15:
d1:02:8f:3e:57:29:98:f4:f2:b1:39:c6:66:05:63:
38:bf:95:18:cd:18:03:f7:ee:0c:68:a0:74:88:52:
f8:65:83:0e:b5:21:22:fc:d4:70:59:d6:10:64:c8:
0b:9b:95:23:5f:e4:25:77:d9:2d:40:f8:e9:97:68:
11:b1:bd:43:19:e4:33:f3:b6:22:45:4b:87:78:37:
0a:df:6d:c4:0b:93:3a:d8:96:9f:8c:96:67:32:9c:
01:1f:b2:d2:6b:69:c8:92:43:e1:3d:48:dc:aa:c8:
c7:ba:5c:b2:77:b3:f6:18:1d:2c:f1:36:34:ac:40:
25:6a:c1:ea:d9:ee:8f:86:db:1d:ed:65:93:fb:86:
16:3a:ae:2b:db:91:be:2f:4b:46:6f:77:74:6c:aa:
8e:63:ef:f3:4b:2d:aa:e0:cc:83:ac:63:44:44:97:
fe:9a:2c:93:77:ab:18:5f:47:7b:94:a8:75:e4:a1:
3f:1f:99:66:d4:4c:57:c1:20:24:be:51:9c:aa:d8:
d2:d2:7d:5f:70:96:9b:d4:11:86:89:f4:36:bd:6e:
5b:80:60:6e:c8:ae:d5:ae:fe:9f:c8:f5:d6:18:29:
10:f1:11:b5:be:dc:2c:70:1c:35:29:db:91:8e:21:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EA:FB:0F:75:D7:BC:FD:B2:7F:63:4F:3D:A0:A1:55:C3:C3:1D:64
X509v3 Authority Key Identifier:
keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4f:e5:74:3e:57:b3:d8:3d:68:3e:1d:49:49:38:3a:15:a3:
03:5f:3a:83:3e:1b:dc:4e:93:1a:ec:7b:19:5a:f1:59:20:e4:
92:b9:94:2d:31:8a:45:60:7b:31:59:25:a7:5c:94:cc:13:56:
18:39:1a:de:3e:fe:55:da:10:17:19:ac:b5:e1:6e:6b:ff:18:
a3:d0:a8:3a:57:31:f7:a4:77:1e:5a:f1:ab:3e:a3:b8:3d:6a:
40:81:ce:d4:bc:84:6c:9f:f6:91:4f:bd:20:cb:59:11:7a:b9:
7f:34:98:09:6f:7b:c6:ce:e3:d8:e2:54:e5:2a:ef:80:21:85:
1f:18:52:0c:a5:a1:c2:fa:87:a8:96:16:f3:b2:c3:85:d3:97:
5a:3a:5c:68:ed:2a:f2:e7:3c:29:48:81:91:2c:49:c0:3b:57:
7c:20:d5:0b:09:01:d5:6b:f1:89:d6:2b:20:56:2f:68:ad:48:
09:77:fa:f0:ff:a0:79:d8:c9:74:fc:0c:95:5a:3b:2f:09:e7:
3c:49:86:40:10:82:2f:81:97:6f:6f:85:04:fc:93:cf:3c:74:
bd:3e:59:94:9f:3e:57:0d:83:a4:38:d7:a3:ae:f5:bb:15:49:
7e:e0:df:7d:f0:a3:5b:01:d7:86:a6:0f:cf:5c:dd:ed:45:68:
1d:20:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:17:03 2025 by rpki-client