Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: UjwCR7YTpjeLtEDKDjuXQF8FWtmPCH6nMDsQnAfl43A=
Subject key identifier: 81:47:6D:6A:7D:13:16:C7:1F:45:27:7B:1B:CB:37:C1:F9:07:44:2F
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 0196BB246CF84D7B3F19F8BBF2B4895CC1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 17:00:48 +0000
Manifest this update: Sat 10 May 2025 17:00:48 +0000
Manifest next update: Sun 11 May 2025 17:00:48 +0000
Files and hashes: 1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: KYo6xgIMnkVnDkBds2KmGHiy5HVKepxex5wSiKUugys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:6c:f8:4d:7b:3f:19:f8:bb:f2:b4:89:5c:c1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: May 10 17:00:48 2025 GMT
Not After : May 11 17:00:48 2025 GMT
Subject: CN=81476d6a7d1316c71f45277b1bcb37c1f907442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:ff:25:94:e2:3b:f1:fc:1c:ef:4e:79:b4:
ac:d3:89:24:15:f7:e1:cf:b7:d8:1b:30:59:d6:55:
5e:1a:c7:fb:b1:b7:02:b9:3d:e1:d6:a7:88:34:74:
20:ab:5a:a3:e1:65:3e:61:5d:66:3d:8b:c0:8f:72:
78:a6:2f:1b:1d:16:86:c0:96:73:f2:61:2b:a0:ba:
f3:0c:20:25:2c:59:eb:c2:2e:ff:6a:25:91:ec:d4:
2f:12:80:ca:5e:6d:96:a9:3c:6b:72:c1:3f:50:6a:
c4:fc:ae:f0:f7:54:ea:36:0c:98:35:61:90:59:40:
0d:32:7c:05:eb:d8:04:01:4b:92:16:64:74:8e:aa:
b5:13:ec:90:72:dd:12:95:51:b3:c4:a0:11:e1:06:
9d:d2:06:8d:c6:de:d4:31:37:9c:86:08:a8:a1:cd:
bc:bc:53:fd:f0:cb:e4:b4:46:2c:15:17:03:b8:3d:
a2:fa:a9:1e:c1:3a:5d:41:e0:23:be:33:04:08:f3:
0a:f2:16:17:66:40:39:b3:f3:79:9b:4f:15:eb:89:
d0:ca:3d:aa:7b:07:e7:4f:f3:8c:15:11:70:b9:0b:
c6:0b:e9:1a:03:aa:8c:43:68:98:92:53:99:0e:eb:
d3:14:98:9a:71:68:de:76:0b:3f:8b:aa:40:38:44:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:47:6D:6A:7D:13:16:C7:1F:45:27:7B:1B:CB:37:C1:F9:07:44:2F
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:98:7b:80:67:53:32:1e:30:cb:f7:0a:e2:fa:47:11:82:fd:
94:19:cd:14:37:7f:24:7a:a6:25:a9:f2:2c:3e:1f:d2:ac:64:
98:c7:14:d1:ad:c2:c2:dd:46:5d:da:d9:b1:71:ed:b0:b3:b4:
d8:76:c9:94:e8:42:c1:fd:65:29:38:e1:16:c6:d1:80:82:10:
b7:50:7e:ee:fd:30:21:c6:aa:8a:e5:8c:3a:29:f7:73:1c:cd:
8c:20:6a:63:9c:dc:72:a7:6e:fd:4d:19:e4:72:18:69:66:1b:
5f:6c:38:01:26:6b:6e:a8:ca:ec:a9:78:76:39:b4:dc:40:4a:
d2:cb:30:95:15:d2:6a:6a:37:b9:e6:9d:a2:93:05:3d:a2:5f:
43:fa:1e:e2:4c:84:ec:c7:b4:24:f2:8d:5b:7d:54:55:30:75:
1d:0c:20:d7:d9:1b:40:3f:53:01:fe:39:26:a9:70:86:4f:34:
3d:5d:8e:1a:80:20:8d:83:0d:70:01:31:42:f1:e2:6f:81:49:
17:a0:64:22:f5:17:4f:3f:3a:b1:66:be:79:ed:5e:b6:ed:3b:
67:ef:a0:89:35:d0:70:19:10:d4:74:9e:b2:87:4e:f4:92:eb:
9c:fc:0c:9d:af:9e:c9:41:9b:fd:bc:e8:65:1b:10:c6:8e:c5:
96:a5:45:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:40:33 2025 by rpki-client