Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File: ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier: WyBO0FHqvQ+jbTErJnuLdjaYhOy7E/0iU2bSSEp1R48=
Subject key identifier: 3C:60:04:1B:17:C0:8F:1E:0D:96:E0:10:4B:19:E6:37:DC:4A:20:BA
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial: 0196A2E517F44C66692A5E439ACBED5594BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 00:00:44 +0000
Manifest this update: Tue 06 May 2025 00:00:44 +0000
Manifest next update: Wed 07 May 2025 00:00:44 +0000
Files and hashes: 1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: XfnFODD59I6xXDkuEDwKY5qSm8XBVjRsscczsF0dDsg=)
2: N6ILORbRZvbQFYCBBRtXEQJq4EE.roa (hash: mmnPcV9IaUAzNHOhWtx5CYix9aLEDcUiIi0yf9zddR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:17:f4:4c:66:69:2a:5e:43:9a:cb:ed:55:94:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Validity
Not Before: May 6 00:00:44 2025 GMT
Not After : May 7 00:00:44 2025 GMT
Subject: CN=3c60041b17c08f1e0d96e0104b19e637dc4a20ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e0:84:d8:fb:0b:e1:60:89:b3:bc:92:2f:72:
cd:ef:a1:3d:51:61:8a:a3:b7:ba:95:2f:d8:b1:eb:
e0:34:53:ed:3f:3b:03:f3:67:d9:75:91:f0:a1:17:
cc:cb:01:8a:40:8e:a2:bb:bc:f5:54:49:12:83:57:
c7:5f:02:60:99:42:5e:0a:f8:4f:bf:b4:75:fe:c7:
3e:51:2b:1a:b9:d7:9c:5a:ae:51:06:8a:3f:e3:f0:
14:ee:5d:e1:ec:9c:e7:82:3a:d2:77:ec:ba:09:de:
38:c7:95:ab:19:ee:04:dd:fa:49:78:30:95:ae:32:
62:76:06:d1:f6:57:4d:7c:b4:28:bc:b6:71:e6:22:
2d:47:98:21:a9:c3:36:10:de:61:49:14:07:37:6e:
8b:c7:fe:a3:33:f8:91:a1:6f:1e:f2:59:3c:47:5d:
54:48:0d:2a:7e:4c:51:15:f2:94:4b:46:a6:3e:fc:
26:b4:74:6e:14:5a:1d:79:e1:0a:69:43:02:a2:cc:
92:72:96:26:38:11:53:3a:62:f3:ec:77:71:92:c7:
9d:dd:28:c1:02:a9:7b:96:fb:db:5c:d5:be:89:41:
aa:e4:eb:60:32:2c:9f:0b:df:70:dd:06:b9:10:46:
fd:b7:6c:81:a9:f1:49:30:b6:3a:42:6c:92:34:94:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:60:04:1B:17:C0:8F:1E:0D:96:E0:10:4B:19:E6:37:DC:4A:20:BA
X509v3 Authority Key Identifier:
keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b9:e4:3c:07:a6:f4:8f:55:c3:eb:91:4f:76:51:90:9f:5c:
18:dc:40:ae:e6:ef:dc:46:08:45:79:ab:44:9d:6f:4b:b4:a2:
89:bb:54:d0:6f:63:8c:08:e1:9a:34:1f:73:35:02:7c:a4:ae:
12:69:e9:40:3f:00:f1:4f:37:71:c6:65:45:95:59:81:d7:c2:
a4:5d:e2:9b:a5:4b:6b:46:26:af:e0:9a:13:4a:45:43:08:d9:
28:b1:66:c4:6f:a6:b7:3d:71:1d:8e:b8:9b:8f:d5:74:bf:cc:
9b:9b:ea:da:8e:47:e9:3f:de:af:3d:b2:97:05:7c:e4:11:c3:
36:45:e4:0c:15:8a:3a:c7:3e:50:ef:29:51:9f:dd:e9:df:af:
cb:27:74:44:a4:90:23:1d:e1:ae:94:d1:0b:a1:fc:64:e8:07:
83:e6:b4:b6:3f:79:b7:be:df:7a:c3:c4:b1:c9:45:0f:20:62:
9a:b1:2d:46:33:b9:60:37:cc:56:8f:73:39:7d:6a:94:c5:79:
8d:13:86:6d:01:bb:ac:06:50:19:1f:2e:9b:b8:0a:57:b5:c7:
34:1f:da:ed:c1:a7:1e:d1:c0:53:02:b0:89:59:db:c4:2c:3f:
ad:d5:16:c5:8c:b6:ad:7f:09:1f:a0:ab:96:62:d6:47:4a:f0:
e2:4c:84:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:06:05 2025 by rpki-client