Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier: En0wMvLGdEVnJlukEiGkYstT2ZqiP/0GKsbu2YNlk2k=
Subject key identifier: B9:68:81:6A:F3:6E:9D:B9:07:F2:50:6B:B2:FD:C8:90:B5:CF:83:2D
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 0196808FCC17EBAECD5EF948870290F7D91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 08:00:29 +0000
Manifest this update: Tue 29 Apr 2025 08:00:29 +0000
Manifest next update: Wed 30 Apr 2025 08:00:29 +0000
Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: an6QsmwbBWQIc1Jh/axeWX0zx42w5uqWIy+ForOBOg8=)
2: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (hash: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:cc:17:eb:ae:cd:5e:f9:48:87:02:90:f7:d9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: Apr 29 08:00:29 2025 GMT
Not After : Apr 30 08:00:29 2025 GMT
Subject: CN=b968816af36e9db907f2506bb2fdc890b5cf832d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:2c:14:b3:9f:83:cc:21:05:7c:fe:ea:03:
e5:46:65:9a:4f:d6:2a:1c:72:ca:1a:c4:d7:c5:c1:
2f:e5:e3:44:66:5f:8a:40:47:9e:58:8d:36:a1:b8:
55:c8:20:19:1b:1f:1a:68:c3:29:6d:30:6e:9c:f9:
bb:cd:a0:dc:86:06:0a:8f:8b:ad:3b:0f:a2:01:83:
16:a4:2b:60:9c:1c:b1:c8:c2:b3:49:28:2c:a2:09:
28:46:d8:7b:2d:86:ec:4e:35:f9:50:f9:8a:ef:2e:
cf:94:27:c6:56:24:63:c0:14:01:64:4a:ac:b6:5d:
27:0b:91:2c:a8:ae:02:b1:72:ae:d1:ea:90:d2:f5:
95:a9:4e:16:20:a0:3d:95:ae:74:29:93:99:28:a5:
3a:4e:37:18:12:b1:9c:5d:f1:72:f6:ab:db:c5:8b:
49:b3:89:09:30:e7:0b:24:5c:5f:bc:a0:48:a0:e9:
72:e0:d3:d6:3d:4e:64:bf:fe:bc:95:86:8b:87:7f:
98:fa:e8:25:81:41:22:29:25:d7:0f:de:89:da:77:
6d:41:d8:0b:b2:c3:31:d1:ca:2a:11:36:d3:72:15:
25:35:7b:b6:47:e4:0f:93:a7:0b:0e:0a:2a:59:ee:
ce:d4:45:ea:db:fd:c5:c3:d0:c1:3d:21:7b:59:e3:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:68:81:6A:F3:6E:9D:B9:07:F2:50:6B:B2:FD:C8:90:B5:CF:83:2D
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:17:9f:32:cf:bf:84:04:94:95:65:ef:cf:e2:fc:27:30:e2:
4a:cd:25:b6:2b:f6:4d:93:48:4a:0f:3d:a9:c8:b4:39:f0:a9:
17:61:f2:99:17:0e:51:bf:cd:f5:3a:c2:94:37:2f:d0:bb:5e:
62:58:de:98:0d:f9:1f:f1:57:cd:c6:62:7c:d5:ff:03:29:aa:
4a:28:35:8f:6d:c4:ea:fd:12:cb:9e:d9:87:62:45:f6:68:43:
b6:e9:90:cb:b6:67:9d:1e:b5:97:d9:c3:6b:b5:5a:8f:94:7c:
4d:97:56:3c:eb:dc:2e:cf:5e:24:02:84:b5:03:1f:b7:bf:65:
6e:78:7c:f4:0b:84:0f:b8:dc:65:09:fe:e5:a7:11:72:18:61:
d8:67:db:c5:34:d2:97:d1:8b:08:f8:ae:c3:61:a9:5d:af:ea:
8e:fe:46:b0:f7:f3:26:7f:c9:9c:5c:70:c5:c9:b1:27:ca:83:
42:22:30:f7:7d:bb:84:0c:8e:6b:74:f6:57:96:18:f0:9f:fb:
ab:36:f8:c4:ce:d5:8c:5d:ef:b2:15:e8:3b:5d:90:3c:98:71:
76:3d:be:61:9f:2a:9e:7c:8e:72:43:48:dc:16:6b:cf:e4:e5:
2f:80:74:6d:48:03:cb:df:97:d3:95:28:c1:91:93:df:08:1a:
1b:1f:40:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:36:23 2025 by rpki-client