Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier: L5xiS4+aXbb+Vp5ZMQgM6j306zyFaCm4lYgpWVuDCZg=
Subject key identifier: 50:BB:A1:18:5A:67:6E:D4:D2:BD:10:99:32:C0:71:77:9C:CA:2F:0D
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial: 0196A27725A641CEFFCB3B8FD744B89F2A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number: 033A
Signing time: Mon 05 May 2025 22:00:39 +0000
Manifest this update: Mon 05 May 2025 22:00:39 +0000
Manifest next update: Tue 06 May 2025 22:00:39 +0000
Files and hashes: 1: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (hash: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=)
2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: w45xVPQ6uy2hiEKiyAKIJjLnyH4P/rIu8KcjC3uw85o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:25:a6:41:ce:ff:cb:3b:8f:d7:44:b8:9f:2a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
Validity
Not Before: May 5 22:00:39 2025 GMT
Not After : May 6 22:00:39 2025 GMT
Subject: CN=50bba1185a676ed4d2bd109932c071779cca2f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:ab:be:68:9e:e0:6a:6b:7f:a0:7d:40:50:
65:c3:9f:87:98:71:c1:ec:ae:fe:7d:9d:b3:b6:b7:
a4:e4:ed:50:89:d4:ae:5e:8d:cd:e8:8e:e5:61:e2:
78:0d:e2:09:0e:f7:55:03:3a:2d:40:cf:a9:6c:85:
c8:a5:4e:0f:31:10:9f:1f:ee:40:04:d4:7b:f2:ab:
d7:17:13:01:df:d0:02:a3:b8:19:55:1a:ed:1f:72:
b9:d4:01:44:6c:51:a6:3c:74:7b:1e:39:f9:dc:3a:
e6:d1:c1:9e:a2:1b:69:b4:60:8e:8d:75:52:ba:11:
b0:c7:fa:e1:23:19:a3:e4:6c:39:cd:8b:20:d4:6e:
be:de:1c:90:db:af:af:39:30:89:52:dd:86:59:8c:
c4:49:ea:b6:68:6c:8d:a2:f0:38:04:21:5b:0a:6f:
9f:34:5a:9e:f5:07:c5:d1:e8:86:d2:05:47:c5:85:
35:2f:a6:26:b1:e2:81:58:17:a4:c9:b0:d7:2f:98:
8c:61:02:d6:20:5c:34:2c:6c:26:2f:73:6d:6e:1a:
a1:23:e0:7c:8d:af:90:bc:37:1b:ee:18:f8:50:85:
ed:93:ea:df:53:10:ef:30:f9:76:ef:55:41:f5:59:
d9:c5:bd:c2:07:66:2b:23:57:79:42:53:23:ad:8c:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BB:A1:18:5A:67:6E:D4:D2:BD:10:99:32:C0:71:77:9C:CA:2F:0D
X509v3 Authority Key Identifier:
keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5a:43:d9:80:ff:dc:90:1a:33:25:3e:c9:fb:a3:0d:89:b5:
bc:b1:b1:dc:68:db:8e:44:50:90:9c:c6:4e:01:a0:e3:44:75:
94:1c:39:47:b2:43:51:ed:cc:01:dd:fb:51:0f:a4:6d:b1:53:
05:02:50:b5:3e:22:24:8e:e6:77:63:7d:cb:d8:74:1d:45:01:
61:f5:f1:c1:88:40:44:7f:f4:28:37:72:b9:c5:6d:65:d5:7d:
67:a1:9e:6a:b4:06:d0:f3:3f:9a:61:93:f7:e2:34:fd:97:b0:
d2:c7:65:0f:1c:2c:12:78:3c:79:02:15:32:ea:60:bd:ba:ef:
9e:91:7f:cf:06:83:11:af:ae:16:71:08:16:2f:a9:6f:29:d7:
16:c4:6f:bf:c3:59:fa:d2:67:2b:b7:17:d0:8e:57:d9:e4:a8:
c1:67:39:01:a7:88:a4:8e:91:bd:fc:0a:03:50:3a:5e:5b:cb:
60:ec:7c:17:e4:68:76:d5:48:49:48:eb:fc:7f:96:26:b4:a2:
7b:a7:f2:65:b8:e3:f0:94:29:7b:eb:4c:3f:a4:a9:7b:7e:0a:
82:c8:17:8e:e0:66:50:99:db:16:40:0b:aa:82:bc:77:47:e5:
6b:b0:da:3f:75:98:d1:29:d9:9d:bf:f5:01:90:08:9f:c4:1f:
c4:32:56:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:13:42 2025 by rpki-client