Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier: /JVYSNrkFYuzjz6seBrp/nEcSnJOoENNN4bzO24e6Vs=
Subject key identifier: B3:D5:E1:9E:EA:1A:4F:0E:10:72:86:E1:B2:25:9E:05:C3:3B:F9:8D
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial: 0196BC3716062877E0ECE67107F4445117D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number: 04C4
Signing time: Sat 10 May 2025 22:00:48 +0000
Manifest this update: Sat 10 May 2025 22:00:48 +0000
Manifest next update: Sun 11 May 2025 22:00:48 +0000
Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: ssWsU8urOCFNHRJqdAcBfq6XeGtvGuXe/bxc7CLLhlg=)
2: wVdARfy8kyS2yygCe6VeSrxjsrI.roa (hash: hDzrF6MC+t3cfKHXPCsVlZtlykkOSNtAuETj7zQp0RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:16:06:28:77:e0:ec:e6:71:07:f4:44:51:17:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Validity
Not Before: May 10 22:00:48 2025 GMT
Not After : May 11 22:00:48 2025 GMT
Subject: CN=b3d5e19eea1a4f0e107286e1b2259e05c33bf98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:8f:6c:43:e9:f8:ed:0f:2c:5d:6f:e3:3e:
31:07:bd:e0:d2:e7:25:a0:ff:28:44:c4:0c:3f:a9:
8f:b9:91:8a:8b:fa:64:5f:32:23:0c:36:7e:49:15:
a8:2b:5a:2a:26:f2:8d:cf:95:f4:ae:c9:54:ff:65:
87:dd:a7:5e:0e:49:b1:cd:df:5f:9d:11:e9:0b:a4:
83:33:08:9e:c9:c5:9f:f3:c9:61:f3:28:92:3c:ba:
af:bb:09:65:fb:31:6f:37:52:3d:54:4f:06:b1:d6:
99:84:4d:fe:47:87:4d:d2:82:15:cb:e0:dc:0a:a7:
d9:b7:c6:8a:be:25:8f:7d:05:88:3f:0f:20:f6:2c:
19:a7:c3:f2:09:b9:3a:c5:f4:46:2e:74:e5:99:8e:
15:38:0d:4c:cd:ed:df:86:18:8c:4a:dd:8a:e6:4f:
3d:bf:01:0c:06:58:d5:e9:a8:b9:f9:80:19:a8:cb:
7c:9d:d2:f5:6c:78:b4:6b:c3:95:c1:06:bf:a2:d2:
fa:05:82:3a:1e:c7:66:9a:9d:f2:b4:d0:5a:2f:f3:
b6:57:03:ac:17:61:87:ad:e0:cf:df:6f:34:9a:b8:
5a:11:a0:a7:7b:b6:1e:84:e3:0b:9a:f9:8d:6d:d6:
d1:aa:40:0a:13:2c:d2:0c:75:20:a0:70:e7:8d:79:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D5:E1:9E:EA:1A:4F:0E:10:72:86:E1:B2:25:9E:05:C3:3B:F9:8D
X509v3 Authority Key Identifier:
keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6d:5c:53:28:05:8d:6e:2a:db:1d:46:2e:a7:fe:80:0b:71:
a1:d5:f0:29:bc:d8:fc:1c:ab:ae:8c:f0:e9:0e:4e:c0:a4:3f:
ae:9d:d1:c2:86:64:aa:d5:3c:bb:8a:bf:1a:3d:c1:43:ae:f7:
5f:11:3d:14:4b:70:f2:a5:27:38:94:3e:da:65:05:0b:84:cd:
87:5d:03:b9:9c:3d:d1:3e:7a:25:c2:36:df:f2:4d:8d:b7:d9:
bc:79:6f:77:8f:b7:0c:b1:d4:2a:95:20:4c:1e:e1:4a:ef:1f:
fd:2c:55:23:5d:e6:8e:d4:b9:ec:25:6d:dc:f4:1e:eb:08:ec:
f6:c0:bb:72:9c:7a:48:cf:d7:aa:65:ba:be:c1:32:3a:ce:33:
01:23:af:43:4f:99:f9:6c:4c:ef:68:82:d7:32:57:39:f2:a9:
b9:83:4f:bd:6b:a0:fd:0f:13:de:10:d0:0c:ed:ea:ad:e9:61:
81:66:b0:3d:4b:73:26:d0:2a:55:96:be:0b:62:8d:9f:60:5b:
3d:3b:dc:bd:cb:d8:f1:c0:34:f4:d3:27:d3:2a:9b:e6:0d:0e:
e7:4e:8c:e0:f2:b7:54:62:9f:6b:48:de:24:d8:ac:ba:73:22:
99:05:98:e1:dd:11:c0:5d:bb:9e:68:9e:ba:f6:2b:52:05:09:
f4:92:5c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:55:14 2025 by rpki-client