Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: zaxy5MxGkfPFKQC+7quTWksDq6kgKf7HGnZH8/OUZdQ=
Subject key identifier: 3D:A7:74:56:E3:92:C7:E0:31:8B:E0:55:FC:02:0C:22:65:24:F3:78
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 0196BAED36023711F12B5A47EF34888A38C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 16:00:30 +0000
Manifest this update: Sat 10 May 2025 16:00:30 +0000
Manifest next update: Sun 11 May 2025 16:00:30 +0000
Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=)
2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: XnwsQh8H2oeJ245ZN4Pr+rwCDxQd933d7rHW59vP4+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:36:02:37:11:f1:2b:5a:47:ef:34:88:8a:38:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: May 10 16:00:30 2025 GMT
Not After : May 11 16:00:30 2025 GMT
Subject: CN=3da77456e392c7e0318be055fc020c226524f378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:51:27:4e:ef:aa:7c:ab:1e:93:a5:35:d1:
25:22:fc:38:ad:9c:cd:20:58:c1:4f:01:2d:d4:a0:
e8:60:73:af:5c:b4:58:c0:44:50:72:83:66:df:3a:
28:02:02:64:d1:df:9c:73:64:54:e0:5b:50:1c:27:
48:f6:87:76:ac:cf:49:03:6e:0a:b3:e8:f1:e1:65:
69:90:00:4a:e2:cd:67:ae:a8:b1:f4:00:49:31:00:
29:34:14:af:60:f1:4a:d6:d6:cb:ba:86:ca:33:ed:
cf:b7:6f:c7:0f:eb:9e:54:1e:2d:ca:d3:cd:b3:19:
34:bd:d3:61:6a:2e:76:6a:ff:19:86:d7:e5:50:20:
d8:80:23:c5:ed:19:0d:75:40:0e:5b:db:aa:6f:b9:
e4:95:d0:25:2b:cb:72:68:32:7e:a5:52:05:61:7a:
07:cf:b1:68:8c:09:98:f8:36:52:cc:09:f5:73:1a:
5f:e5:e4:a2:52:2a:18:c3:6f:e3:ec:29:41:9e:81:
b9:0b:1b:bf:cd:cf:fe:58:d0:98:48:a2:a2:3e:92:
20:83:d6:c0:c4:59:52:f6:37:34:30:16:89:9c:61:
a3:88:91:16:17:c7:50:bb:ad:ec:e7:bb:ad:d8:2f:
92:6f:fe:31:b5:18:c5:d7:82:6d:43:af:e7:b0:25:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A7:74:56:E3:92:C7:E0:31:8B:E0:55:FC:02:0C:22:65:24:F3:78
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2f:c1:72:2d:38:fc:cf:8c:f9:5f:4e:10:e8:92:b5:5d:fc:
7e:56:06:41:c2:32:c3:ea:5c:3c:a7:2e:6f:e2:db:ae:31:c5:
3e:84:91:4e:c3:7c:2a:bc:4c:cf:28:c1:7a:7d:25:ec:29:6a:
7c:bc:ea:29:68:29:73:18:a2:1e:93:18:48:f9:85:47:0d:48:
73:9b:77:9b:7f:84:7f:49:29:70:87:90:c1:c6:00:54:e7:17:
d2:10:8a:86:4c:30:86:38:ca:09:da:a0:06:ab:05:11:c6:5b:
61:8c:80:29:83:05:0b:75:60:97:28:a3:db:09:c5:93:9f:11:
26:72:40:ac:e0:32:e2:4d:a9:10:5b:50:b1:7e:29:94:b9:7f:
62:35:50:aa:cf:f4:3a:42:12:44:32:be:46:77:81:3e:f0:a3:
a0:1d:c6:a7:43:0b:c4:54:95:ac:64:44:15:c7:65:30:ef:89:
d3:22:4b:7e:d0:f5:18:4b:40:57:32:91:93:fa:27:51:f2:97:
91:74:7f:2f:98:84:2d:05:df:68:24:27:04:4f:98:04:f6:1f:
7a:b7:aa:ea:b4:e1:3b:24:7e:18:36:d6:0f:38:eb:4c:20:72:
c2:7d:3c:79:d9:a8:80:1c:00:49:33:6a:78:ac:ae:2a:56:6c:
d7:ea:38:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:04:50 2025 by rpki-client