Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: XldBoUyOrip6RtLqk4Lh4qRSGr2IJqlFyBtH5G4Ad+A=
Subject key identifier: 5E:A0:53:B6:65:72:A8:2D:30:D2:0B:6B:02:5B:7A:52:BC:D5:15:00
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 01968AA5D8B5650F28F3A5F47DF305BC30DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 04E3
Signing time: Thu 01 May 2025 07:00:46 +0000
Manifest this update: Thu 01 May 2025 07:00:46 +0000
Manifest next update: Fri 02 May 2025 07:00:46 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: wVS5/O/jB757Y4NBKIFZJqjIp1IxFCkPLnVOKtmz9dU=)
2: IrEzCg-L6ChV6NO0z_pSKTvObkE.roa (hash: BAxTmTfKNgnausi613sLgqp7n2C4MuqhHvDS7/1g8aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a5:d8:b5:65:0f:28:f3:a5:f4:7d:f3:05:bc:30:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: May 1 07:00:46 2025 GMT
Not After : May 2 07:00:46 2025 GMT
Subject: CN=5ea053b66572a82d30d20b6b025b7a52bcd51500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:6c:b6:1d:7e:7e:12:fd:c7:30:29:10:6a:
4f:7e:c7:f4:43:4c:17:c1:94:f5:c9:39:b9:06:0a:
e1:2e:6e:e7:85:c3:7e:79:41:0f:db:ec:2d:ba:d3:
03:d3:5e:14:df:47:26:c9:7a:2b:8c:9f:d6:69:1e:
30:5d:81:e5:38:d0:8c:77:11:d7:1b:94:66:36:c9:
f5:3e:b0:ab:91:7a:f2:75:50:e9:74:06:0c:fb:a5:
47:0f:76:53:04:49:56:68:13:68:67:b4:2a:be:88:
6f:1f:df:1c:ec:b7:16:6a:59:da:6d:c2:c4:9a:48:
91:cc:d2:46:a3:a2:a2:84:c3:80:17:75:d6:9c:ba:
ef:8b:f7:c1:9c:be:5e:15:85:e8:46:97:85:a5:73:
26:de:f6:83:f2:d0:03:d3:d0:5b:93:0e:5e:70:6a:
48:b5:6b:a2:b4:c1:75:1a:2a:58:65:8a:e6:ee:86:
1f:32:fa:00:bd:05:89:7a:9e:1c:b2:84:f8:61:e8:
8a:74:ab:18:90:b5:73:bc:d8:78:60:0b:f5:f4:7f:
e1:0c:a0:39:e4:e7:ec:4c:f0:5c:2b:c2:0d:17:22:
89:81:92:71:bb:84:9e:96:da:c7:ac:00:5b:2e:ef:
af:17:40:ed:b6:02:c5:88:ce:49:56:db:95:d1:cb:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A0:53:B6:65:72:A8:2D:30:D2:0B:6B:02:5B:7A:52:BC:D5:15:00
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b4:84:d6:45:e7:eb:75:cb:cd:f4:06:3e:e6:c3:db:e3:f7:
ca:92:bf:94:91:12:fa:8e:02:e0:5a:b5:21:3d:d9:c4:84:e3:
e2:2a:a1:44:0d:39:10:69:6f:20:22:37:be:57:a8:35:9f:9b:
cf:98:eb:37:f1:2a:fd:b9:8c:1b:3f:6a:73:92:21:81:84:69:
ce:b4:48:ec:d5:24:51:0b:c4:10:31:0c:f9:a3:40:28:84:17:
ba:20:67:c0:b5:8d:9f:4d:9a:de:47:a9:d4:df:d8:35:2f:d1:
67:6f:1c:bb:74:d2:8a:fa:0c:d9:f5:70:4f:5b:99:ef:30:95:
ed:b9:b3:3b:f1:a9:ad:9a:6c:8e:e3:32:79:64:30:f5:e9:00:
a4:32:be:44:ed:a4:45:8b:08:fb:66:00:f2:01:81:1e:9b:f0:
fb:d6:3e:c3:61:38:ec:74:81:f8:62:b3:f5:f6:76:f2:49:75:
c2:6e:e9:f5:f5:1f:ac:8d:f7:c8:e7:2a:56:5c:65:ac:24:0c:
cb:9f:1d:eb:55:ba:c6:82:16:b7:bd:d6:67:89:a2:c0:41:66:
f2:db:f5:28:37:c5:e4:91:fe:67:f2:a3:db:f5:2f:66:c2:31:
ca:13:8a:69:d6:57:88:aa:b3:88:39:41:80:b9:05:7a:82:6e:
44:2e:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:08:03 2025 by rpki-client