Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: a3wI4Nt29sfUSLIYYeM7luCPyX4pwr+dHbQ7XFKLIpQ=
Subject key identifier: 06:DE:C7:9E:D5:66:52:C3:44:B4:22:A1:6F:26:AF:FE:82:D9:60:D6
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 0196A91E35AA695171894C450E63976452C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 05:00:51 +0000
Manifest this update: Wed 07 May 2025 05:00:51 +0000
Manifest next update: Thu 08 May 2025 05:00:51 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: zjC0sohtrzYFC/FlZGtjNmW0LhiiO4m1ii09gRdto3s=)
2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1e:35:aa:69:51:71:89:4c:45:0e:63:97:64:52:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: May 7 05:00:51 2025 GMT
Not After : May 8 05:00:51 2025 GMT
Subject: CN=06dec79ed56652c344b422a16f26affe82d960d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:71:9f:7d:8e:52:9e:08:db:25:0b:d3:99:
3d:b5:de:b0:ce:1d:7d:3a:9f:52:3d:26:57:01:e4:
0a:73:33:0f:1a:8d:f3:de:38:d2:c4:93:47:86:e4:
76:d2:e9:80:97:c2:9b:92:3b:3d:d3:19:58:50:93:
df:be:8a:a7:9a:e2:c0:a1:4f:f6:af:13:42:d1:45:
99:ed:36:25:65:7a:d0:db:86:f3:5a:80:01:39:fe:
76:55:98:42:a5:61:e6:e9:27:ab:45:13:6a:3f:05:
8d:03:83:1e:2c:d3:89:f5:1c:97:e1:81:7d:60:32:
3d:a4:7e:30:7b:a9:17:87:93:cc:db:2f:3f:90:4e:
b7:60:e6:83:f9:66:1f:d5:4d:0c:b4:4f:10:6b:62:
4f:12:d8:35:4d:14:ae:1c:81:ea:f9:7e:da:ba:f6:
a7:56:1e:a7:79:45:cd:02:c0:41:6c:71:20:f0:da:
ff:90:54:0a:3f:07:8e:ba:3b:8d:c9:16:7f:7d:52:
e1:15:1b:b1:b8:c3:63:f6:40:9e:15:a0:17:2e:bb:
13:ac:dd:bf:30:80:26:75:4d:57:b5:19:9a:4f:01:
15:b8:6d:69:56:36:32:b7:08:70:65:f4:71:84:93:
da:a6:f7:21:43:2c:ef:ce:12:9a:96:46:71:a2:ab:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DE:C7:9E:D5:66:52:C3:44:B4:22:A1:6F:26:AF:FE:82:D9:60:D6
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:87:d7:10:1c:7a:a3:28:59:a3:30:fe:00:51:23:97:03:01:
e0:e6:b5:97:73:fb:9b:6d:7d:76:04:af:6b:43:6f:3f:b2:b2:
f8:44:93:b5:4e:7b:f4:cd:ee:86:7f:85:bc:48:ec:dd:66:c1:
f7:00:5b:0d:73:70:bd:b9:81:fd:3f:d3:be:e2:43:fd:4f:fa:
ba:1f:b0:2e:6f:5f:59:53:a4:62:88:18:e8:7b:94:30:76:00:
ff:05:46:9f:17:b7:c4:37:60:5d:7d:60:db:64:7b:96:d0:92:
37:bc:1c:10:ab:de:81:98:2c:6d:b2:2d:89:2e:57:ab:26:54:
59:6f:05:1e:5e:5d:99:49:5b:14:15:03:20:59:58:9c:58:fd:
74:ea:98:5a:d2:b6:c1:79:25:04:dc:14:30:4e:32:51:ed:0c:
f8:26:6c:52:a8:8c:e3:fc:a3:f2:0a:c6:20:09:0c:65:58:5d:
f4:37:3b:81:f5:fb:d4:3a:c7:46:e1:6c:d8:55:5f:c8:1a:d1:
90:6d:91:c1:b3:d1:20:2e:f4:5c:51:49:17:9b:52:04:fc:c9:
25:f1:95:17:60:3f:b9:a4:70:d7:0a:09:ab:a3:8f:f1:5e:c4:
bb:7a:f9:75:3b:20:16:a7:aa:cd:bd:6d:7e:86:48:7a:d9:f6:
3f:dd:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:01:19 2025 by rpki-client