Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
File: SEQEnTlhdqG16ziFSNm-PrPn1lE.mft (raw, json)
Hash identifier: hJPrEw4PWSJIo1oYoRTK2R7PXHAxhSI+XpZzUAEzIgE=
Subject key identifier: A6:5B:78:81:A4:6A:08:6C:A6:69:66:2B:85:CA:33:B0:07:09:8C:CA
Authority key identifier: 48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
Certificate issuer: /CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Certificate serial: 019683FFE42D75FCA2630CD9E2852001024A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
Manifest number: 0AE3
Signing time: Wed 30 Apr 2025 00:01:47 +0000
Manifest this update: Wed 30 Apr 2025 00:01:47 +0000
Manifest next update: Thu 01 May 2025 00:01:47 +0000
Files and hashes: 1: SEQEnTlhdqG16ziFSNm-PrPn1lE.crl (hash: XKSImtVRUMFChbYSAxcDkRkyjV9C3wKOPVlgr/2T6MQ=)
2: T5aESWxAVXZQCKU4hKQ7Mbe0-gU.roa (hash: /yZIDrhN4+3klzibXSLP0BAGEXpbbrny28/lcBpDjcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:e4:2d:75:fc:a2:63:0c:d9:e2:85:20:01:02:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Validity
Not Before: Apr 30 00:01:47 2025 GMT
Not After : May 1 00:01:47 2025 GMT
Subject: CN=a65b7881a46a086ca669662b85ca33b007098cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b9:9b:d4:8d:f3:74:2f:0a:7b:0d:db:b7:d0:
09:02:25:9b:84:18:e2:2f:9c:44:ff:ee:5c:88:73:
1b:bd:e9:16:71:1e:18:62:06:dd:d1:aa:b8:d4:f6:
a2:ff:71:a5:8c:5e:0e:04:7e:9b:e7:71:ff:95:35:
c9:09:5b:ef:70:7a:9c:f3:cf:92:54:fb:7a:6d:66:
c4:39:8a:bf:d6:11:73:c0:7a:ea:f9:c7:19:e0:e0:
48:1b:00:20:27:f1:fd:06:2c:52:b1:e9:95:cc:a8:
63:63:56:17:e9:cd:72:b4:ee:9a:01:a9:bc:77:88:
c1:ad:60:00:d2:5e:7a:7f:37:39:ee:15:6b:30:14:
78:ac:41:29:bb:b5:52:aa:6a:05:c4:85:64:aa:bf:
0a:35:e5:5c:23:54:ad:00:d1:a3:f9:48:d3:72:d0:
41:5a:54:88:ab:f1:f2:fb:0c:ce:fe:6d:1d:7a:83:
ee:bf:cd:d5:a2:dd:f3:fa:71:ab:70:1d:4c:dd:1f:
06:27:4a:4c:86:41:2a:b2:bc:c4:ea:3c:b0:81:30:
45:00:00:8a:03:24:b0:cb:69:59:5d:c3:dc:b7:91:
67:e8:4f:8c:2c:ae:8b:0c:ec:fd:7f:4b:bb:c9:af:
39:27:e9:83:a2:ad:89:ee:ba:32:3f:ff:8b:02:b4:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5B:78:81:A4:6A:08:6C:A6:69:66:2B:85:CA:33:B0:07:09:8C:CA
X509v3 Authority Key Identifier:
keyid:48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8a:91:12:8b:91:cb:05:ce:77:29:aa:b1:46:82:c4:ca:79:
2c:b2:98:4e:fd:4b:be:9a:61:e5:d6:c0:5e:74:eb:8a:06:9d:
7b:f6:73:e8:ab:b8:1e:3f:27:5f:53:67:63:b8:85:bc:65:a8:
b9:15:f0:5c:55:05:1b:b8:98:fd:5b:e8:0f:df:9e:07:14:3f:
45:9c:28:10:c9:99:45:97:ea:6b:a4:5f:e8:09:ad:fa:27:7e:
bb:c4:61:90:eb:7e:88:36:1b:72:2b:25:4c:05:7e:21:e5:ac:
cc:c3:4d:eb:b6:b6:02:82:bc:f6:ce:5b:2d:c0:d2:b0:1e:e0:
f1:e8:fa:33:ed:da:1c:74:16:5c:40:4e:da:e2:23:49:40:d4:
21:65:24:d4:ce:ac:00:b4:e8:b6:e1:c6:82:9e:d8:73:14:84:
f5:03:2d:d6:25:c6:ee:e2:c7:c4:b8:fc:d3:a3:83:70:c0:a6:
70:d8:3d:68:35:b3:f4:5e:49:de:da:92:d8:80:85:50:a0:a8:
e6:13:0f:84:8e:2a:fc:65:78:92:e7:ec:2f:d0:57:4d:4e:a5:
b2:1b:a1:86:3d:62:76:7b:e6:4e:f5:06:14:f4:e3:93:4d:51:
64:f5:e8:0f:f4:ce:39:52:04:63:e6:a5:49:25:95:61:ab:df:
7e:8d:b1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:34:42 2025 by rpki-client