Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: VncLH3JFWEJvXnWVZyh1XjSaBpJGOCTOqlMw1C7+ajU=
Subject key identifier: 81:7F:38:01:27:26:4F:8E:58:16:D9:E4:92:82:A8:36:D6:A7:08:CB
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 019690A7BC067BFA3D32D3B88716AAAD1E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 11:00:33 +0000
Manifest this update: Fri 02 May 2025 11:00:33 +0000
Manifest next update: Sat 03 May 2025 11:00:33 +0000
Files and hashes: 1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: Ru3mUb7tcoIlvyfNfw2WcLLegfHQT2MGD7pcMwgVE54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:a7:bc:06:7b:fa:3d:32:d3:b8:87:16:aa:ad:1e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: May 2 11:00:33 2025 GMT
Not After : May 3 11:00:33 2025 GMT
Subject: CN=817f380127264f8e5816d9e49282a836d6a708cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:6a:a6:e1:cf:b1:5c:13:45:2f:bc:7a:42:
29:ff:e9:4b:05:a1:69:e1:eb:33:bd:85:8b:11:c2:
93:6a:3c:1c:5e:1a:47:79:41:38:c1:75:af:80:fd:
73:0a:0d:e2:db:0f:26:a0:84:a3:ea:bd:20:27:dd:
c6:fd:ee:d1:63:23:c6:eb:5e:23:5c:1e:b8:98:d3:
af:61:7b:86:6a:7a:5e:26:8e:41:0b:14:7e:b7:01:
b9:ef:de:90:95:b4:1a:14:1b:1b:e0:04:cd:97:f2:
ac:70:f7:b0:4e:87:1a:f1:6f:08:96:ad:de:8b:19:
bb:5e:85:d6:9c:be:90:d1:c9:a0:fd:df:ff:8b:4f:
aa:dd:b1:6d:e3:f8:9c:d3:28:7c:0a:48:12:21:bf:
dd:e1:b0:4e:7b:e7:92:a4:a4:5b:b3:dc:e8:bf:95:
9e:01:50:75:58:a6:55:b6:9e:20:cc:d1:59:2d:73:
4b:e7:2a:18:cb:4d:c7:d2:d1:57:a2:86:c1:1d:6f:
3d:b6:e6:6d:d7:ca:57:d4:7d:c7:c5:3a:22:05:66:
c2:72:4b:15:c5:13:88:43:9f:30:11:70:c7:59:2f:
85:0f:38:04:fd:55:5e:a1:05:10:ad:f4:e1:88:06:
a7:cc:90:4d:a2:1f:9e:78:27:59:2c:39:b5:07:49:
46:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7F:38:01:27:26:4F:8E:58:16:D9:E4:92:82:A8:36:D6:A7:08:CB
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1d:e7:dc:fe:1a:cc:31:6c:92:e5:36:b1:55:88:ea:77:8b:
cd:c8:c5:11:a7:b3:e4:82:bc:d6:80:18:07:c5:3f:12:8b:2a:
11:90:a4:46:56:e3:09:b3:8c:16:48:4c:c9:4a:dd:fb:1f:53:
d6:9a:df:9b:c7:88:ee:d8:a0:18:cb:1b:2c:4e:72:02:3a:50:
10:ec:7f:e4:b9:9c:7e:60:ca:c1:e7:36:66:84:aa:72:44:96:
9c:77:18:35:a4:8e:34:05:ce:ac:dd:61:cc:49:b5:40:81:d4:
65:b2:1d:3c:aa:58:49:ba:99:63:ad:00:38:99:2e:8f:30:71:
84:8c:ae:4e:38:79:f8:b7:ae:ad:20:b6:30:1b:3d:f2:77:7f:
68:6a:f3:c0:bf:d5:92:ed:95:07:f7:b7:93:28:09:a3:3b:2d:
b9:c9:10:e2:cc:4f:43:21:12:90:4e:52:e5:94:3b:75:5a:ee:
cd:21:2e:d8:85:b4:07:47:aa:d9:36:77:f7:e3:e5:b0:a0:21:
2e:fd:c7:7c:13:7a:f2:ed:a1:16:a2:46:4e:26:c4:3b:90:c2:
28:65:bb:34:25:44:a2:f3:f7:e3:b9:da:78:18:f0:b0:14:d4:
b0:65:20:16:65:a2:89:80:d4:f3:df:cc:de:06:62:ea:f6:b1:
58:76:a2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:01:38 2025 by rpki-client