Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json)
Hash identifier: xs3baIDQK6cJYEDcKsozAVQREVKR0WOFAYDLiXymuSQ=
Subject key identifier: 30:90:57:33:6F:58:2E:9E:94:B3:8D:9C:BD:54:4A:38:F4:62:11:37
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 019695291D0E857DB95DA9DDE15BDA481EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
Manifest number: EC
Signing time: Sat 03 May 2025 08:00:21 +0000
Manifest this update: Sat 03 May 2025 08:00:21 +0000
Manifest next update: Sun 04 May 2025 08:00:21 +0000
Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: NDO12wmz+nPzpgskM63R20oPmnnF4aCqtsfigXhHGTs=)
2: cPxWboLauOt1xiX1g5_qcFfMwuQ.roa (hash: F49rFgzhVx+26sTntZUKS3aBxcYFzjzC7SoWYW83au0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:29:1d:0e:85:7d:b9:5d:a9:dd:e1:5b:da:48:1e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: May 3 08:00:21 2025 GMT
Not After : May 4 08:00:21 2025 GMT
Subject: CN=309057336f582e9e94b38d9cbd544a38f4621137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:80:0e:db:46:22:49:3a:38:cb:e5:69:ef:b9:
d8:fc:3c:a8:f8:ee:1f:eb:f9:65:8f:44:ac:9d:37:
80:79:04:93:3f:9c:2a:b4:a8:7c:2b:9e:1f:d7:5d:
e0:5d:3a:32:c1:d1:86:ba:f2:94:55:fb:d2:b3:8c:
4b:a0:2f:96:94:48:7b:f9:c4:4a:6c:6b:da:ad:58:
c4:66:c6:ad:56:c9:21:33:78:b0:6b:65:b0:58:d0:
81:f6:0d:17:74:cb:37:91:70:46:8e:b1:3e:b4:61:
47:8c:22:92:df:06:7a:5d:15:5f:03:c9:e9:9b:ed:
2d:ff:57:c9:13:79:06:95:93:bd:ec:fb:20:69:10:
69:6e:dd:5b:83:00:89:d6:c4:04:57:0d:94:ba:c1:
09:92:e0:b7:95:d1:18:ac:22:66:6a:7b:6d:48:a1:
5e:f4:f4:dd:76:e5:79:37:cd:8e:3b:d1:23:fa:cb:
3a:1e:23:76:7d:6a:67:b6:d5:44:14:b8:ef:a8:38:
9a:0b:84:5b:bb:04:07:7a:d1:c9:68:89:d0:a3:f4:
5d:cd:a3:91:17:f2:35:d9:77:42:cf:b6:90:9a:72:
6c:ce:63:c4:61:b2:96:17:d9:70:b7:fe:d8:fb:e8:
c6:82:db:eb:46:e0:7a:89:8d:1f:73:4d:74:a6:46:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:90:57:33:6F:58:2E:9E:94:B3:8D:9C:BD:54:4A:38:F4:62:11:37
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:43:c2:6b:40:52:4e:37:23:cb:b0:ac:2d:f4:77:09:df:c0:
eb:76:07:53:b6:cf:21:68:bf:0b:ea:24:ca:f1:cb:08:ac:0a:
91:fe:c1:c2:b0:56:6d:34:c7:4a:b7:31:65:35:31:0b:b1:3a:
b9:2b:b6:e2:b9:09:98:53:fc:5a:a5:44:0f:0e:a2:58:4d:b7:
d7:d4:40:3e:7f:98:c6:7f:bb:e5:86:ed:dd:93:3d:b6:21:2e:
d3:a6:29:e6:91:25:75:1a:cc:8a:66:22:8f:5a:ec:83:a6:f4:
b0:28:a4:a3:bd:49:87:e7:28:fc:74:c5:e0:3f:0a:3e:af:f8:
d1:41:ca:ad:4a:9c:9b:ff:10:c4:fa:0f:7a:fd:91:ed:12:52:
cd:3c:b4:2a:5a:71:4a:4e:f9:3c:c0:2b:67:c5:6b:2f:a8:c5:
36:05:16:fc:8d:5e:1f:3b:46:7f:57:7e:29:6e:33:72:51:1d:
55:13:48:b7:27:5b:a3:b5:f2:49:de:ea:3a:60:2a:5f:dd:df:
9b:59:a0:ac:0a:26:fa:45:52:4d:80:e9:0b:d6:2a:75:53:70:
d9:1c:cc:be:f4:5c:43:91:b6:5e:51:52:2e:d8:ca:df:d9:d5:
78:dd:3e:25:db:f0:58:45:03:b1:2c:7c:80:29:ba:67:5e:cb:
fe:12:d6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:38:28 2025 by rpki-client