Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier: MYP0QreUk3Zy0PIxz951lKH6XwIrNMGTYojaLrjj8/Q=
Subject key identifier: 90:76:7F:2E:68:B1:DE:38:D0:53:F3:B8:F6:BA:31:6F:FA:72:CC:AF
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 0196BFDC73978920AC26D5CFD90559C63701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 15:00:17 +0000
Manifest this update: Sun 11 May 2025 15:00:17 +0000
Manifest next update: Mon 12 May 2025 15:00:17 +0000
Files and hashes: 1: 1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa (hash: IQS6khxqEbU9ABB49P6SoigiSYTvtS2Iy2GfbbCv2tY=)
2: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: YQI/CnjZNPf9tBahkV1zpGAKACeEW0YwbXC5cU/cTKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:73:97:89:20:ac:26:d5:cf:d9:05:59:c6:37:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: May 11 15:00:17 2025 GMT
Not After : May 12 15:00:17 2025 GMT
Subject: CN=90767f2e68b1de38d053f3b8f6ba316ffa72ccaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:c1:c0:01:5a:9c:ae:ac:a0:ed:81:36:87:
a3:ae:cb:a2:04:92:8e:4f:5d:64:04:c3:6f:71:25:
a4:eb:d9:be:92:0a:a6:b8:34:f5:ea:1f:ec:96:d8:
58:2a:c8:29:cd:32:9e:41:fa:1d:e9:73:c0:b0:7f:
e6:7a:b8:25:ec:7f:9f:28:95:75:55:e4:18:58:f7:
ea:2a:c3:4b:54:bd:6c:33:72:0e:40:d6:62:3c:9d:
00:90:a8:75:e8:b7:23:89:a5:8a:9b:46:eb:18:99:
75:67:6b:7d:ba:68:94:6f:d6:e7:62:1c:e4:b4:be:
f8:ad:a6:66:1b:c6:6e:10:55:d2:ba:78:20:89:fc:
75:0c:85:e2:cf:05:17:db:49:56:a2:ba:45:51:8a:
82:3e:19:9f:26:11:26:f7:67:01:5e:b5:40:99:59:
5d:69:cf:87:55:b2:09:1f:e7:11:ba:17:2d:a5:ea:
3c:00:9b:99:0e:8d:a4:6a:1a:75:52:5b:03:55:04:
57:21:a4:f6:1b:23:44:3c:c7:a2:7c:d9:36:30:2a:
8e:25:3d:ea:c7:a5:72:d2:79:aa:87:52:2f:dd:d4:
0d:b1:75:03:49:fa:e9:40:3c:d4:0f:ea:f0:f9:44:
e8:58:ac:51:e5:83:a4:be:9a:0f:0b:02:a6:2b:de:
6c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:76:7F:2E:68:B1:DE:38:D0:53:F3:B8:F6:BA:31:6F:FA:72:CC:AF
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:63:f9:21:b3:26:d3:dd:25:18:0b:2c:31:2f:78:cc:6d:f0:
c8:7e:2d:90:f5:6f:4d:61:25:79:cf:8c:94:13:6a:28:66:aa:
c5:a4:8d:16:0a:bb:14:b2:38:07:00:0a:84:83:6d:0d:6e:d7:
3f:05:8e:66:64:1e:1a:87:ce:1f:5c:66:cf:81:0e:b0:46:a0:
49:43:32:da:0a:3c:a2:f3:06:ae:af:79:ee:79:cd:a0:57:5f:
0d:65:5f:e7:92:2b:af:4e:53:a9:8a:b0:75:36:ee:c2:cb:32:
60:b6:ca:e4:f0:f9:47:04:ce:2f:9b:35:94:11:0f:e3:6b:0c:
c3:14:2f:66:de:c0:22:c0:1e:9f:da:f3:85:6d:8f:81:b3:33:
96:02:f3:93:a4:6a:69:23:e8:fc:46:86:11:fc:9c:bf:81:03:
ed:aa:f7:d3:26:4f:19:f7:34:ff:7e:44:c4:ba:31:c7:f8:28:
27:6f:94:e8:fb:14:17:7b:56:01:33:8a:8f:83:64:0c:17:24:
0b:48:c1:47:cd:81:72:5a:6f:14:55:74:98:05:1d:f7:01:a3:
49:68:24:9d:5f:72:ea:ff:03:36:58:1a:ad:31:28:ac:bb:ff:
4f:73:94:c6:07:fc:99:c7:cd:5e:aa:27:9f:5d:45:ae:76:60:
c5:81:da:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:01:52 2025 by rpki-client