Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: XIYFuUZRRjAYHXdX8o2lJlEcT4Qu+moXYMD69+nuIs8=
Subject key identifier: 00:9E:67:7D:A2:EC:AC:84:EB:15:C5:6C:C6:CF:D5:73:14:E6:AC:3F
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 01968F27C9A451711108049F47D9A4DC65A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 04:01:11 +0000
Manifest this update: Fri 02 May 2025 04:01:11 +0000
Manifest next update: Sat 03 May 2025 04:01:11 +0000
Files and hashes: 1: 9t22owOYC7Mw8jA_t9_7gDwHF1o.roa (hash: iV2EeKk18zEE+h5tJ2D8tk3awOGzeRIEDnvnGsDqR3g=)
2: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: LVBZD1UOlmqUnYCjD3JkLSI7ZkJ7QH7KUty/p9c/pHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:27:c9:a4:51:71:11:08:04:9f:47:d9:a4:dc:65:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: May 2 04:01:11 2025 GMT
Not After : May 3 04:01:11 2025 GMT
Subject: CN=009e677da2ecac84eb15c56cc6cfd57314e6ac3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:bd:1c:69:62:0f:be:a3:4d:cb:eb:11:dd:
6e:9f:b7:5b:d2:aa:21:d4:8b:12:f0:b3:df:80:44:
85:05:ff:61:cf:57:0f:6b:47:64:2e:63:12:c3:45:
af:a9:d9:dd:ce:68:4f:d7:91:29:cb:99:4c:f0:98:
e9:cb:3d:43:88:ee:b5:8e:e6:e0:0d:7c:1f:43:fc:
8e:d8:1f:05:a6:3a:6c:10:44:b9:f5:79:b4:6a:29:
eb:98:00:cc:2e:31:ff:4e:f3:7e:6b:92:f7:2b:4d:
b8:6e:b0:b5:d3:fc:2b:7c:06:a3:5c:74:87:12:8d:
c3:83:88:55:78:b5:a8:fb:b2:79:d1:81:9b:98:22:
ab:c2:8d:92:9f:d6:30:e8:56:b7:2d:8c:be:8a:2a:
e7:73:88:52:6e:c5:de:61:92:86:05:2d:b1:e5:94:
28:42:b8:b3:32:dc:4f:76:a3:62:c2:ea:75:6e:f2:
3f:96:85:30:23:b3:d7:f2:cd:82:35:4b:2a:07:54:
a4:c2:7c:92:f4:70:e4:68:de:f1:56:32:03:c2:99:
a8:b3:b4:60:e0:6c:3f:38:f3:6a:b4:27:7d:9b:b9:
55:1f:0e:bc:53:ae:2f:64:cf:33:d7:e0:41:b1:54:
68:b6:5d:54:de:0a:3a:73:5a:30:58:90:07:e6:e4:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9E:67:7D:A2:EC:AC:84:EB:15:C5:6C:C6:CF:D5:73:14:E6:AC:3F
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d9:37:24:6b:a2:ba:ff:d0:41:a2:74:94:7a:30:b9:5a:71:
91:f5:4c:6a:5d:47:a5:3b:4a:23:0c:90:1e:15:35:6c:48:76:
78:3d:46:1e:ba:2b:8e:0f:1b:07:97:fb:c3:b2:d7:a8:75:21:
72:80:47:57:57:b4:a3:6b:d5:8a:d7:13:0e:4b:42:3f:f2:ac:
85:2e:5b:19:c1:92:c5:6c:cc:4e:90:c9:77:1d:bd:ee:f5:3c:
58:5e:08:b6:5b:79:e9:6e:97:b8:23:a1:cf:39:3e:21:7e:f4:
28:ca:44:4c:dc:82:52:73:a2:80:8d:b9:d8:2c:cf:d7:82:7a:
2a:76:2d:12:69:c9:d9:58:34:20:44:1f:c9:83:87:13:a1:7a:
f6:33:f6:c5:f5:ea:22:e8:18:ff:52:39:72:82:a9:3e:a8:fb:
21:26:fe:26:49:b7:d2:3a:c4:2e:b6:45:57:62:22:a3:c9:44:
64:3a:f2:e2:0c:17:f1:87:bc:de:5e:7a:0a:a4:1b:11:78:22:
58:0f:10:58:8b:fe:34:64:4f:49:bc:56:27:e5:24:97:49:c7:
da:96:06:f3:fb:01:de:d4:33:bd:27:ec:04:e5:4e:91:5c:4b:
fd:7c:22:3a:36:6c:b5:82:55:7c:1b:88:4a:3d:d0:c8:17:9c:
91:84:04:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:39:25 2025 by rpki-client