Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier: Egf1pJtDjeFLlJomZlBv5N8FeyXh2WRkdLVmy4munC0=
Subject key identifier: D6:A5:25:42:0E:40:C9:9C:57:8A:53:35:79:AE:B7:3C:EC:11:4F:24
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 0196D88A12D2646218F5ED69A3843F0A6FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number: 0519
Signing time: Fri 16 May 2025 10:00:49 +0000
Manifest this update: Fri 16 May 2025 10:00:49 +0000
Manifest next update: Sat 17 May 2025 10:00:49 +0000
Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: bqvnP9Tsj7bRbfCIQDem+rvzJ2N3DHqa3/mCSr2P80k=)
2: soe--L3Zv3Ab_c4ax7SKPcclEEk.roa (hash: EM4MaU25MU3aJWehslBE3y3dfKuyrb7A7eUnc8kofN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:8a:12:d2:64:62:18:f5:ed:69:a3:84:3f:0a:6f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: May 16 10:00:49 2025 GMT
Not After : May 17 10:00:49 2025 GMT
Subject: CN=d6a525420e40c99c578a533579aeb73cec114f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:9b:56:ad:7f:d1:ab:19:b8:44:2b:f9:81:
f8:77:26:d6:f9:db:a0:c6:a8:93:b3:57:75:7a:2a:
03:69:8b:d7:70:fb:41:e0:0a:09:38:69:68:c6:de:
e3:0f:ae:f8:41:03:00:01:21:09:35:41:ed:f6:34:
4a:04:75:92:92:2f:1e:3e:ab:0b:ca:5d:30:be:00:
c2:ef:da:ce:60:b5:ed:02:61:ae:7a:2b:b9:49:a0:
b9:a3:12:ed:67:6c:bb:9e:d1:e3:43:1f:f6:52:2d:
80:c0:89:21:5f:d4:b7:a5:ee:cd:5d:ac:b3:2f:13:
1a:6b:9e:12:1c:4b:db:01:21:49:28:dc:51:e7:80:
e6:08:cb:0b:59:02:d2:d3:cb:e4:b1:4f:bc:39:be:
50:87:63:fe:6b:c4:8e:6f:14:4b:a5:7d:23:3f:57:
ed:fc:f1:77:02:2d:68:f5:69:a4:51:d5:2c:8a:55:
3f:25:03:4a:66:97:73:e3:08:dd:06:d3:25:15:c4:
d6:c5:5b:5b:cc:51:43:14:7b:4b:4a:51:ca:8f:8d:
6f:68:1b:3e:81:10:14:cd:41:7b:9f:c2:cb:c0:cb:
0e:8e:3e:27:20:cb:c9:3a:83:82:66:2d:a5:a6:d3:
f2:84:21:3b:76:be:9c:57:32:ae:c2:ed:87:d8:ab:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:25:42:0E:40:C9:9C:57:8A:53:35:79:AE:B7:3C:EC:11:4F:24
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fd:db:2f:d5:37:b8:89:96:a4:f1:84:8e:40:aa:e5:7c:76:
01:91:ff:c7:1d:95:d4:a2:c1:f0:e2:12:87:34:37:5f:d0:dd:
bd:09:76:d7:d9:53:3b:24:66:dd:8f:e9:59:70:b0:41:1a:30:
a4:52:85:3c:12:29:29:f2:da:0a:76:ea:a8:a5:90:08:7b:46:
33:7c:7f:3e:d8:d3:d4:39:8a:b2:cb:d3:dc:60:d2:a5:6e:62:
9c:0f:b5:5b:43:29:8d:c3:d8:e5:1a:48:29:c4:2e:5d:74:97:
6f:d7:77:ad:f1:25:db:19:0c:21:b7:4f:a6:8b:2b:13:42:ea:
57:d7:98:3d:11:dc:e7:04:ef:47:d5:64:fd:5a:48:3e:8c:36:
f3:f3:e3:7a:71:0e:9e:e8:30:0d:59:1e:c0:6a:f4:86:6f:c4:
e9:bc:b6:66:a1:21:06:77:d6:8b:b4:09:e6:a7:3b:82:ab:96:
f3:f9:94:d0:a2:37:4a:68:cf:6f:b9:5e:fa:1f:a3:7a:b4:43:
54:2e:5f:1f:e6:41:84:78:71:ce:e5:49:e3:ce:02:e9:1d:9f:
76:5c:f7:3e:62:3b:33:01:ab:ab:0c:91:1f:f9:a6:9a:60:bc:
7e:b6:4f:a6:8b:d5:3b:67:14:49:2d:05:5a:a0:d6:da:58:a6:
70:6e:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:44:11 2025 by rpki-client