Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
File: s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft (raw, json)
Hash identifier: zdTjWD/m4wyiAwsoBDHP4A7E60KW8awAazKfJZYATFk=
Subject key identifier: B6:6E:DC:58:6C:62:0B:1B:52:89:50:36:72:2E:CE:AE:51:32:26:72
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 01969ED14B446B3C2FC3C10911AD8FD0AA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
Manifest number: 08AD
Signing time: Mon 05 May 2025 05:00:38 +0000
Manifest this update: Mon 05 May 2025 05:00:38 +0000
Manifest next update: Tue 06 May 2025 05:00:38 +0000
Files and hashes: 1: IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa (hash: 9+rlboX5YqLY2xGwqsRBQUwcIF0ZyOqFrf8SvNh+rfQ=)
2: s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl (hash: DweclFkDpjP1o3V0ywtxu85/QahoD2MhI193ztbmSao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:4b:44:6b:3c:2f:c3:c1:09:11:ad:8f:d0:aa:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: May 5 05:00:38 2025 GMT
Not After : May 6 05:00:38 2025 GMT
Subject: CN=b66edc586c620b1b52895036722eceae51322672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:f0:a6:62:c0:e4:14:67:03:2a:ef:03:b1:
03:57:d6:7d:db:e9:46:b0:a1:e9:31:2b:dc:88:b6:
4c:de:86:7d:cb:45:c4:e6:6e:70:c7:5d:cb:c0:46:
21:30:1e:24:27:3b:e1:ad:da:e9:93:f1:c9:fb:10:
4b:ec:7d:b8:eb:0d:38:1b:43:48:44:1e:4a:24:d8:
a7:16:d9:ad:89:1f:0f:a4:33:f4:02:8e:69:c2:3d:
30:4f:76:b8:46:f4:b6:d0:27:1d:a1:e5:c5:67:53:
33:4d:a1:98:48:93:72:f6:3c:3d:e9:c3:98:43:20:
81:76:bf:4a:75:61:dc:f1:7f:ba:ad:c8:70:01:c6:
67:6d:17:e1:ef:e7:fb:fd:85:e4:39:4e:4d:e2:b9:
02:60:1a:a7:85:13:6a:ec:7d:fe:58:39:f4:bc:b3:
c2:58:9b:49:36:e0:31:b0:44:e7:55:44:f1:c4:a1:
dd:15:ca:d2:e9:f5:e2:2a:08:26:31:77:ff:28:03:
e7:0b:ed:c7:6d:30:76:8f:df:cc:78:ad:0a:bd:08:
79:4e:fc:59:e3:77:b5:10:42:13:f9:35:23:bc:c8:
e9:2c:39:05:ac:5e:82:1a:c9:73:3c:89:55:44:67:
b0:98:25:79:dd:14:f1:f8:df:3d:3e:28:cd:e7:3b:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6E:DC:58:6C:62:0B:1B:52:89:50:36:72:2E:CE:AE:51:32:26:72
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:91:e8:98:d8:6e:7f:b8:84:e8:21:4a:f7:53:55:58:ef:cc:
43:6b:0a:8d:da:78:81:c3:c5:85:14:b9:e0:18:1f:9c:46:02:
53:f6:c9:56:7e:b2:f1:48:83:10:c9:d7:63:67:45:84:84:e5:
a4:eb:d0:e6:51:e2:01:6f:42:65:bd:84:62:6e:ae:ec:55:5c:
4c:98:32:b5:13:8b:d0:1c:4f:ed:39:4a:d8:58:1e:3d:8d:a6:
10:70:2a:e1:8b:17:6d:15:06:e9:0f:fe:c2:fa:8d:f8:8b:29:
e5:2a:40:17:85:68:b6:dc:14:8c:11:36:8e:23:f9:0a:83:e2:
21:94:c6:e6:90:b0:45:07:bc:10:80:cc:5b:34:6a:e3:f5:c1:
77:a5:07:b1:46:a0:41:5d:8c:50:72:cf:54:77:b0:86:46:7e:
c2:18:93:b4:b2:67:42:ee:f1:a1:9f:2b:d7:17:b0:78:33:3e:
a3:0d:7e:1a:d4:a1:d0:73:e2:bd:82:2b:95:cd:74:0b:73:ca:
33:ec:a9:1f:c5:72:b1:a2:0f:5e:96:5d:40:1f:23:08:df:6f:
36:73:82:03:3e:3b:5d:fe:5a:11:e5:59:01:9d:79:7c:2f:ff:
5a:f0:4d:b4:0f:16:c8:c1:67:80:89:48:c4:27:1d:c1:07:35:
08:5f:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:49:19 2025 by rpki-client