Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File: maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier: w0Oq1wJiuFa41EIZHcO0Ls0YXx90zCseYzGIqA75L80=
Subject key identifier: 48:88:1F:2F:EB:11:A9:C0:27:75:36:42:9B:B7:D5:D1:70:52:D2:C2
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer: /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial: 019690A7AB686DF199C9FE7D274BF5A819FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number: 0331
Signing time: Fri 02 May 2025 11:00:29 +0000
Manifest this update: Fri 02 May 2025 11:00:29 +0000
Manifest next update: Sat 03 May 2025 11:00:29 +0000
Files and hashes: 1: ZpEam4JrA75W3vKeb-kb3n0W0y0.roa (hash: kYGb95Bh9aZOERP/x6nIdXNnyuRNyDQM9q/MQE4pooE=)
2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: 2JStbRa0qzOZmBT/Kbl2TeSRIKGnXh3RPuW7AZf/0R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:a7:ab:68:6d:f1:99:c9:fe:7d:27:4b:f5:a8:19:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
Validity
Not Before: May 2 11:00:29 2025 GMT
Not After : May 3 11:00:29 2025 GMT
Subject: CN=48881f2feb11a9c0277536429bb7d5d17052d2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:db:83:dd:50:2e:a7:f2:8f:55:6a:9b:3b:
c8:30:11:29:11:ca:94:d4:9a:94:0a:a3:f3:b0:63:
68:e5:6d:bf:29:dc:79:ba:1c:9d:af:a1:00:c0:4c:
ff:b8:ad:04:81:97:0b:6f:3c:63:16:d5:00:67:b8:
98:6f:6f:66:8b:a4:17:1f:8f:44:9e:f7:92:62:90:
74:e3:fd:60:e3:00:75:b4:60:63:47:e8:1c:d5:d9:
03:48:24:3b:e9:e5:c4:75:02:9e:53:27:ba:58:1d:
fd:fa:7c:94:76:b6:79:85:2d:28:4a:34:c2:ae:db:
76:4d:fe:7b:79:0f:73:26:74:2b:79:99:bc:1f:ba:
c6:17:fb:55:c7:80:fc:3d:94:9a:aa:9b:03:23:68:
94:f5:d5:5c:ff:4c:8e:5f:fd:8c:0d:fd:8c:2e:4a:
cb:30:d1:35:da:42:bf:4c:a7:90:46:03:4d:0c:f4:
fb:18:f1:69:71:9a:55:de:fe:0e:1b:fd:65:2d:77:
e9:1c:7f:9b:72:5a:16:ba:10:6e:30:21:88:9b:d2:
6c:55:3b:19:1a:ac:25:db:c8:25:16:c8:19:62:ff:
7c:07:c9:52:ca:0f:25:cf:15:73:d0:b9:76:76:b1:
57:a0:2a:91:77:0f:76:c2:f1:2e:54:c9:c8:5d:71:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:88:1F:2F:EB:11:A9:C0:27:75:36:42:9B:B7:D5:D1:70:52:D2:C2
X509v3 Authority Key Identifier:
keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a6:09:c6:22:23:81:a8:72:1b:9c:8b:7f:72:55:27:62:01:
cc:42:5f:a4:52:ed:e3:8b:48:46:90:5a:91:fa:91:a1:d5:ee:
2e:2b:b9:88:b4:74:0c:dc:b2:74:c5:3c:37:69:50:3f:94:c8:
59:0f:23:7d:22:95:51:11:d3:dc:ae:92:12:bc:38:06:72:38:
af:ec:e2:ac:55:f8:dc:6f:d4:3c:66:49:a8:1c:01:41:e0:ca:
12:33:32:da:c6:5d:47:43:ab:b3:af:cf:23:36:59:c0:c8:f8:
ad:f4:72:ec:77:10:17:78:6c:6b:d9:40:19:d5:d0:c2:6d:88:
1e:a0:49:ee:2c:e3:04:97:f3:c7:7e:c2:73:ab:19:1d:21:39:
32:d7:70:22:35:6c:2f:da:c0:89:c2:ad:79:08:2f:8b:fa:c5:
b1:bb:1d:f9:96:57:ab:0d:99:9d:01:b2:94:69:2a:fb:14:79:
5c:aa:24:c0:5c:46:5a:93:3a:c9:3e:8e:3a:88:26:1b:f3:4b:
82:77:6e:db:c9:70:e9:bf:96:de:24:0e:2a:81:9e:fe:59:3a:
18:e6:9c:4b:82:9d:84:d1:f5:99:24:d8:d0:f5:0d:99:e0:be:
c4:12:67:2d:03:79:c5:0e:64:ba:fd:d8:20:af:96:fd:7a:27:
bb:0d:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:00:54 2025 by rpki-client