Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
File: eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json)
Hash identifier: 2c27ED8FXRedjIv6Jf8SrLM+g2259/nW8Hsj8GlUs48=
Subject key identifier: 32:8F:C5:AC:A4:02:D2:D6:CC:CE:DC:61:40:74:77:E9:91:DA:15:37
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 019697BC91E4EF6288C12056179FE085D4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
Manifest number: 1523
Signing time: Sat 03 May 2025 20:00:39 +0000
Manifest this update: Sat 03 May 2025 20:00:39 +0000
Manifest next update: Sun 04 May 2025 20:00:39 +0000
Files and hashes: 1: 7BO8TZ7ATCsCuTGlJnm0y-khSyU.roa (hash: x6i25XfL4F0gRp6H2u4+rOMQs65WiJ45VD9+0G2z3+I=)
2: FWiPIHCHDr0uKdyZ_foi8pOa3qE.roa (hash: DmpIUKQykitdg60h0JYisIxDWolUrUFXqS52YO726hw=)
3: aNixjFy8ziG3vjf15zAVaRB-c8A.roa (hash: EnnotKECMV4Ndd6+GZEZZLejmbdDUCzQTSAS/USoOkg=)
4: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: odxPxeXPgGr7DpF0QHbtHvyQp7BTnRmyIfy4N5OIz9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:bc:91:e4:ef:62:88:c1:20:56:17:9f:e0:85:d4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: May 3 20:00:39 2025 GMT
Not After : May 4 20:00:39 2025 GMT
Subject: CN=328fc5aca402d2d6cccedc61407477e991da1537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:4c:ea:d5:9c:2b:c2:80:4e:9b:11:2f:16:
41:94:eb:31:ea:9f:26:aa:e7:6a:a6:c3:6f:e1:b0:
87:f6:85:d7:08:9f:8f:17:e7:3e:68:dd:e8:eb:b3:
a0:a6:9e:f4:2f:ec:d5:17:b3:64:e3:1d:bd:32:a8:
f7:26:d6:8c:ac:fe:50:60:3e:1c:93:f5:3d:50:c8:
43:fd:07:41:14:ea:96:ff:ef:9f:3d:3b:d2:2b:12:
d2:46:e9:74:94:fa:83:3c:bf:02:ca:32:07:c6:52:
12:37:ea:e6:e1:91:59:08:51:71:58:50:c6:8b:e1:
f6:1d:74:a6:7e:5d:0f:6f:7b:0c:75:b6:d9:6b:4b:
6d:ca:38:2a:29:8c:d6:99:c1:07:51:f2:41:78:20:
c9:64:7d:1b:0a:1e:bb:dd:ee:63:e2:7b:dc:eb:06:
8a:db:79:da:3d:b0:16:3e:15:c7:ca:d4:63:fa:0a:
e0:d2:35:57:ad:bb:fb:13:54:77:be:43:c6:8d:33:
bc:ae:68:04:c2:c4:d1:b1:ea:66:99:4b:da:64:a8:
6a:d1:78:00:5a:0d:57:ff:79:06:ef:63:28:a3:b3:
cd:13:2a:a0:f9:50:91:49:c2:0e:29:76:68:25:5b:
a4:25:d5:04:d4:09:c1:40:cc:46:0e:c8:d7:80:2d:
8a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8F:C5:AC:A4:02:D2:D6:CC:CE:DC:61:40:74:77:E9:91:DA:15:37
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:80:f9:e1:76:6a:77:8d:7a:e8:21:71:ab:49:bb:22:1b:af:
ac:96:6f:fe:c3:df:44:d7:7e:14:38:cd:95:2f:6d:35:e8:c3:
f3:3b:23:9d:b3:fd:b9:80:e6:00:21:24:c4:34:96:7f:d7:87:
ed:d9:0c:5d:32:8a:ba:96:33:fb:a1:30:68:c6:c9:4d:9b:76:
da:82:30:eb:a6:0c:cc:1e:38:40:af:74:0d:3f:13:f4:80:44:
d0:19:84:f8:74:18:96:cd:d1:93:1b:18:97:01:91:7e:bd:59:
88:51:cc:11:48:2c:fa:e9:e7:d7:e8:70:e0:fa:38:77:bb:cb:
11:76:ac:52:89:e6:49:58:1b:f4:f9:e3:a8:98:ff:3d:1c:27:
c7:fe:c3:67:13:48:a6:e3:a6:b8:7e:59:f8:8b:8a:f9:8e:b2:
f2:02:05:26:20:36:77:93:47:4b:d3:5a:25:a0:14:c4:78:29:
3f:15:83:fd:06:06:0f:be:21:26:56:be:02:64:6d:04:04:07:
fb:59:ea:5b:83:87:b8:96:df:f7:4b:b4:4b:e6:40:3e:a4:20:
3c:1d:bd:59:05:36:ad:79:c9:9a:3e:0f:b4:ac:5a:6d:c7:a0:
67:3b:05:04:fd:b6:18:dd:eb:32:6e:93:fd:36:c0:4d:6b:3a:
59:7c:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 05:15:15 2025 by rpki-client