Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier: gzOj1fJLWKjnISBNQATQdfQYXRWCDS8vhuDknaDiHVA=
Subject key identifier: 81:6A:D5:16:C1:4C:CC:8B:62:A9:FC:3F:D3:B4:CE:38:2B:8F:38:92
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 0196760CE350A95B7F6D6FC84028F499F0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 07:01:18 +0000
Manifest this update: Sun 27 Apr 2025 07:01:18 +0000
Manifest next update: Mon 28 Apr 2025 07:01:18 +0000
Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: DvzgDKb+8zwM9bttrDVDBNbTdZ3mYLAqUQDyjwGoim8=)
2: e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa (hash: +VPNQ16MVhJiwbxpGaUiyY+7EYW+EvR2+xy1H+6qMTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:e3:50:a9:5b:7f:6d:6f:c8:40:28:f4:99:f0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Apr 27 07:01:18 2025 GMT
Not After : Apr 28 07:01:18 2025 GMT
Subject: CN=816ad516c14ccc8b62a9fc3fd3b4ce382b8f3892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:a1:03:e3:88:60:97:18:96:05:e4:0e:98:
9c:7f:54:a4:30:ff:01:5c:e9:d2:58:1a:ba:db:ff:
1d:b0:9b:ec:44:39:d6:5d:c4:cf:6d:d8:eb:ef:8b:
07:95:de:90:0a:fe:cb:54:cd:26:c0:f5:95:ba:33:
79:60:46:6f:f7:aa:d1:36:77:00:1a:eb:af:d7:7f:
d1:85:b2:a0:35:ed:8e:51:c5:80:5b:62:db:67:e7:
1b:d4:60:d2:37:5b:bf:6f:8b:cc:a7:a4:f8:f0:00:
96:8e:22:2f:de:63:b6:75:da:69:84:c0:ca:e6:47:
66:c1:cc:d8:d1:05:c9:5c:45:6c:2d:9c:b1:6e:9d:
69:32:f3:e0:91:c2:69:3f:0d:c5:33:1d:3a:81:45:
67:05:30:94:87:f0:8f:76:94:99:23:38:81:ae:1b:
a0:b7:9a:1c:92:3f:9a:56:0e:f1:82:b2:85:8c:9b:
fb:71:af:0b:9b:03:d1:2e:cb:04:06:02:f0:60:de:
5f:0d:97:bb:81:0a:c5:d0:91:3a:30:8f:cc:b0:e5:
b6:f2:46:17:40:24:15:a4:82:90:b6:5b:4c:47:17:
14:67:ae:c6:64:03:8e:c8:30:f1:e0:4d:bf:f7:56:
d4:9e:78:ac:fe:bb:db:ab:3a:12:68:ff:7f:3f:cf:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6A:D5:16:C1:4C:CC:8B:62:A9:FC:3F:D3:B4:CE:38:2B:8F:38:92
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:39:ed:75:1e:72:44:13:97:cc:7a:89:26:cd:da:7a:85:76:
06:8f:16:15:9b:d1:67:d9:ef:98:03:dc:30:a3:1e:4c:eb:01:
99:f6:f6:20:58:4a:9e:2d:36:bc:b4:28:00:2e:e7:ca:43:e8:
75:f9:57:a2:a1:0a:83:22:b6:35:ec:84:b5:ef:83:e0:31:51:
b4:92:b8:10:e0:5e:31:cb:94:a7:e9:35:ea:59:12:3f:36:53:
dc:66:44:bf:9f:5b:d6:85:2d:72:43:36:e4:62:d8:30:f8:72:
7e:d5:6a:8a:d9:2c:02:0c:15:aa:c5:7b:dc:94:a4:24:18:f3:
a2:1b:e1:5f:90:f1:b8:97:fd:c1:f9:c3:17:06:17:52:d3:ba:
11:b3:b3:1e:18:26:15:5c:d0:48:cf:eb:ab:4d:97:55:f0:c5:
18:02:c5:73:f4:66:1f:14:4d:9e:ed:e6:eb:d9:47:2b:cf:e6:
9b:ea:86:e2:64:bf:65:bf:75:46:9e:2f:a2:a7:e6:06:4a:72:
ec:49:96:2f:32:5e:5a:a3:b0:71:a6:c7:b7:83:a5:a3:9b:dd:
20:5b:04:3e:7a:62:44:9b:86:3d:68:8b:f5:3c:db:b3:17:98:
76:40:db:d3:c8:80:4e:fc:ac:1f:9a:7f:01:a7:aa:02:53:87:
5d:a7:c9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:44:01 2025 by rpki-client