Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: qRaZurNKr6viejuEzt3SitKdUMJjgeuptXkyX2HCCaQ=
Subject key identifier: 89:7E:A3:17:37:7F:7C:03:D6:98:E3:22:B1:E1:F5:5F:9C:77:BC:B2
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 01968BB834C346347F65E7EDDD0E1D9CBFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 14AD
Signing time: Thu 01 May 2025 12:00:27 +0000
Manifest this update: Thu 01 May 2025 12:00:27 +0000
Manifest next update: Fri 02 May 2025 12:00:27 +0000
Files and hashes: 1: SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa (hash: 2+bGMEFTYIooOi165hCQ7BSjW1Q3smQG481hPb6dBzo=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: RWOXrLQylGqlRq0ZW5WBCnWgh+KoAlrdEtk+jg4HL10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:34:c3:46:34:7f:65:e7:ed:dd:0e:1d:9c:bf:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: May 1 12:00:27 2025 GMT
Not After : May 2 12:00:27 2025 GMT
Subject: CN=897ea317377f7c03d698e322b1e1f55f9c77bcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:d8:b4:59:1d:95:98:80:c0:4d:b9:a2:11:
46:54:1c:91:e0:63:87:c8:d1:11:f1:bc:51:ff:9e:
b1:a3:b0:fe:42:ff:96:e8:2f:d2:0f:40:13:9d:79:
55:b1:95:f0:3a:b4:d8:b7:da:2a:c3:8f:3f:94:83:
17:68:48:3d:c5:6c:27:27:70:43:07:8a:8f:a7:6a:
eb:82:b8:e4:c3:6e:a9:99:f1:f0:8c:d5:f4:a5:82:
20:14:66:9a:d2:22:c0:ea:f6:9f:6b:ad:cf:f3:1b:
d7:60:f1:9e:e0:70:96:17:94:72:6e:e7:74:22:45:
0b:82:67:08:a0:30:e0:b0:2a:62:36:7d:2c:26:c5:
1a:96:84:59:96:eb:10:c7:2f:c9:ab:85:39:49:ab:
76:ac:1e:b0:d2:ab:07:4b:54:39:0c:6b:a7:6d:c8:
92:a4:9c:28:48:a1:32:f2:37:6a:c7:b8:94:ce:41:
0a:1e:36:15:4b:84:60:ea:57:5d:e2:07:84:17:74:
e3:a0:72:dc:13:f7:9c:e3:53:46:19:15:b0:7c:25:
5e:ea:cf:34:75:f9:ec:65:a0:08:4f:b4:4f:32:3f:
d7:3c:63:da:b5:3e:8c:20:6d:4a:d6:43:29:94:c1:
40:0f:e2:2f:80:a7:c6:92:31:8a:9d:ec:32:e8:91:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7E:A3:17:37:7F:7C:03:D6:98:E3:22:B1:E1:F5:5F:9C:77:BC:B2
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a9:7d:e8:a1:fc:04:41:47:3f:ef:8f:3e:70:ca:55:19:31:
70:3d:d6:40:e3:a3:15:df:8f:9f:f2:7f:6a:21:59:69:d1:10:
b2:3a:61:51:7e:b7:b5:11:32:0d:fe:cb:8c:0f:31:04:e5:74:
4f:fd:54:10:41:e3:75:ed:c9:97:f1:ed:d3:2f:eb:6d:43:af:
a6:88:3f:42:e3:ac:87:a3:fc:59:f2:36:2b:5e:5b:45:57:16:
b9:15:2e:70:3d:81:1c:3a:65:84:02:11:f4:76:3b:c9:de:72:
98:65:55:99:08:3e:42:8e:b3:1e:71:f9:bc:2f:a9:e4:eb:bb:
9f:9a:3b:aa:ee:9e:6c:8d:21:db:fb:01:5e:d6:e4:0e:32:17:
c5:c1:79:a9:fc:39:0f:cc:73:0e:6c:d5:66:18:e7:1c:b1:82:
fc:10:91:7d:e5:81:ae:1c:e0:a0:9e:b5:e8:7d:0e:c0:30:02:
18:18:67:2e:6a:0a:75:f4:a9:33:b2:97:22:9b:69:f3:e8:e8:
f6:59:f4:b0:37:d7:d1:1e:f0:3c:03:25:f8:bd:ad:39:c2:59:
ab:14:38:25:1a:99:35:c4:7d:06:25:0f:61:da:30:0f:35:96:
d1:b7:a6:20:73:ea:a9:63:84:f9:4f:dd:34:29:5b:51:40:3b:
80:fd:9c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:21:44 2025 by rpki-client