Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier: 8Ff4gvT6Fr/rJdYqJNxVR3RN5RwXga6E7OunORVBFBk=
Subject key identifier: 99:05:7A:97:01:3E:9B:F9:49:EB:1F:84:1E:AF:10:94:02:F6:3D:7A
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 0196BC6E3B20CCF4608D63EDB83322BF268E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 23:01:02 +0000
Manifest this update: Sat 10 May 2025 23:01:02 +0000
Manifest next update: Sun 11 May 2025 23:01:02 +0000
Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: 83PFFrL7JdBbn4XsRkxy7945hcJc/X5j4nAzRto+PPk=)
2: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (hash: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:3b:20:cc:f4:60:8d:63:ed:b8:33:22:bf:26:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: May 10 23:01:02 2025 GMT
Not After : May 11 23:01:02 2025 GMT
Subject: CN=99057a97013e9bf949eb1f841eaf109402f63d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:ef:3c:5b:e0:60:1c:26:8d:a5:3f:37:76:
0f:82:af:10:3d:05:a6:b6:e3:76:c1:e7:d0:07:52:
8a:a8:9e:4d:2c:d1:f2:ba:5a:f1:65:1e:81:89:0f:
a0:c6:29:ee:77:16:2f:55:53:8d:6f:16:b2:cf:91:
d7:d9:eb:1a:85:8e:91:54:81:96:db:50:96:09:4c:
55:a0:ab:cb:7c:1f:94:1b:f2:8f:cc:ce:d5:2b:27:
7d:bf:b7:b0:be:80:8f:42:fb:f1:06:03:6f:c9:8b:
19:05:f3:8c:a1:6f:3f:00:f3:f0:c9:ec:c8:98:a5:
93:17:b0:f8:cd:da:37:72:ec:c7:3b:ba:78:af:0e:
fa:cc:c5:af:43:81:84:2e:90:d2:19:d5:99:6f:60:
0c:6b:c7:7a:e0:aa:5a:73:85:1e:cb:e1:65:08:59:
f8:71:67:be:87:33:05:9e:a5:c6:15:bf:29:db:cb:
d3:2b:a5:c8:12:e0:bd:91:f5:88:9b:f2:f0:29:68:
3a:67:3f:e3:23:1b:07:a7:23:90:ad:f7:82:e1:2a:
25:19:d3:d5:33:2a:a3:2b:13:a8:be:98:4a:39:32:
88:c8:42:98:45:c5:38:6b:42:33:b0:1d:ca:eb:65:
db:43:ca:8f:12:db:e0:f5:6d:07:38:4f:3e:00:f2:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:05:7A:97:01:3E:9B:F9:49:EB:1F:84:1E:AF:10:94:02:F6:3D:7A
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:df:7b:cc:af:6e:fa:65:53:46:dd:e5:0f:6f:27:a2:2b:69:
63:d2:a9:ba:d9:8e:22:64:13:27:d6:e4:ca:e6:ea:51:3f:e6:
b5:a4:08:79:2e:e9:40:f1:7e:85:70:16:2c:87:de:d6:37:a8:
80:b6:aa:6d:a7:06:9a:03:ba:59:cf:57:fd:7d:a5:ad:59:82:
69:ee:82:cd:de:d5:a1:2d:63:b4:6b:ee:74:1a:1e:7b:01:c7:
0c:2b:5c:77:34:1a:22:50:08:b6:c5:96:85:0e:0e:16:e9:0e:
44:7b:48:ff:43:35:07:46:72:e3:3a:d0:0b:c3:89:da:70:79:
c3:16:78:1d:ac:a9:df:c5:84:bc:c7:6f:3b:5b:3f:39:f7:f1:
ab:f0:72:50:3b:21:5c:fa:80:52:c0:3a:60:51:29:bc:88:c7:
2e:14:20:ae:fd:8a:63:9a:00:e0:c9:91:fb:10:83:2b:07:a5:
f3:f2:7b:4b:a5:a3:cc:a9:59:73:22:99:f7:13:c7:8c:ba:5f:
a4:52:d1:1b:08:2e:c9:6f:e3:ae:75:40:35:3b:14:1a:58:f2:
db:78:67:6e:bf:81:35:90:50:f3:fd:ce:4f:d6:e3:2b:ec:eb:
fc:fd:83:bf:5c:22:39:14:aa:f8:82:01:2b:18:22:8b:bf:21:
43:ce:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:10:56 2025 by rpki-client