Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: grORklspzLoLUEyQAMWG6dfjfOq9m/KZhGcrw5O6s64=
Subject key identifier: 4D:48:AA:30:83:50:EA:F1:16:F1:A7:C4:C6:2B:88:66:E2:5A:12:A1
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 019678313F8B2CCC799E38880F2E5E583F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 17:00:15 +0000
Manifest this update: Sun 27 Apr 2025 17:00:15 +0000
Manifest next update: Mon 28 Apr 2025 17:00:15 +0000
Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: SSAb1wdP0fy25GqYQVLBdUK4sHNDcQNb83zxbQb2Spk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:3f:8b:2c:cc:79:9e:38:88:0f:2e:5e:58:3f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Apr 27 17:00:15 2025 GMT
Not After : Apr 28 17:00:15 2025 GMT
Subject: CN=4d48aa308350eaf116f1a7c4c62b8866e25a12a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:c9:3a:96:0c:28:14:13:08:57:4a:bb:7e:
2e:de:32:00:63:b9:17:dc:8d:fc:07:b6:a1:5d:f3:
5f:65:ef:3c:2d:96:47:a9:d8:37:1e:b7:99:d5:83:
f6:ba:ac:cb:3f:b6:36:8d:4e:36:62:4d:0b:eb:3f:
96:2c:f6:b5:f1:50:d5:ca:9b:e0:fd:78:97:2b:2a:
4a:67:da:33:90:b2:0c:db:90:bb:ec:d5:16:ec:5b:
2c:37:c5:29:8c:c8:f8:4c:05:e3:7e:2b:2f:fb:18:
83:57:c1:ab:a6:1a:57:fa:3d:81:e8:2b:3d:59:83:
d1:c0:da:50:49:2e:1a:ef:9f:42:a2:5d:94:a9:b5:
92:e5:19:2b:4b:19:8b:aa:3c:36:ef:2e:8b:d3:e8:
1f:88:36:cc:f2:41:99:45:8b:8e:38:34:11:d6:c3:
d3:2b:d2:e5:38:23:37:6a:40:b5:30:8c:61:ae:2a:
4c:33:d5:66:bc:73:68:49:24:8f:ca:cb:d0:42:c8:
2b:6a:9d:e3:bd:8f:b3:f1:b5:28:0b:52:59:a3:bd:
ea:ba:02:0b:4f:64:b4:17:86:fc:69:2e:87:92:49:
9e:23:7c:9b:1e:84:3f:95:41:16:96:1b:98:7c:17:
19:91:34:8a:7b:e2:b7:8f:72:84:fa:03:93:bd:7c:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:48:AA:30:83:50:EA:F1:16:F1:A7:C4:C6:2B:88:66:E2:5A:12:A1
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:94:80:ed:91:30:e0:87:27:77:0a:c1:e9:e8:39:d0:e3:77:
96:3c:3b:b6:7c:7a:90:ff:1d:12:26:0b:b8:86:fa:f0:ed:ce:
50:93:4a:3a:73:fc:19:1e:89:9f:b2:00:43:59:01:5e:77:9f:
08:ae:b4:dc:0e:b3:d4:d8:e3:d9:0f:ff:be:9e:5e:38:26:6a:
af:2f:16:d4:db:b5:33:34:cd:c9:a8:4f:7f:bf:ff:a4:5f:9a:
7d:05:7c:84:71:71:34:e2:b3:e3:ff:62:90:00:9f:55:c7:aa:
92:6b:a5:f7:14:0e:1c:28:f0:31:4c:82:c6:bd:1b:68:1b:2e:
f0:3a:ed:4f:b8:13:50:6c:10:da:1d:8a:76:e8:4c:86:8a:89:
7a:ce:68:65:4c:d0:b8:df:71:8c:38:9e:ae:50:3b:e5:0c:56:
2d:c8:84:64:e2:91:d9:17:02:4e:b6:ad:05:4a:02:f2:e0:43:
43:d7:55:dc:cb:c2:e1:7c:a5:6d:34:cd:ff:f2:02:f0:18:64:
4c:f7:6e:48:25:2a:7a:5d:69:a9:0d:ca:bd:b3:db:a5:3d:d4:
a1:81:09:3f:d7:85:a7:14:64:24:f7:6c:23:7d:44:3c:33:c1:
32:60:54:aa:75:11:85:da:fa:68:96:e8:e8:af:f2:2e:0a:c2:
45:64:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:14:48 2025 by rpki-client