Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: aEmGq/CjkYNX+jUszM4wovxdqDfGdlB8IjXHaclceBs=
Subject key identifier: 8E:4B:F7:C5:1B:42:11:F3:74:39:B3:72:8A:63:08:D8:8D:63:1C:F7
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 01965F16895FFB57D374A1FA76BD904BB0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 20:00:34 +0000
Manifest this update: Tue 22 Apr 2025 20:00:34 +0000
Manifest next update: Wed 23 Apr 2025 20:00:34 +0000
Files and hashes: 1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: qDHBYc4fi9IEutDFvKUfDmOb2pPD7CaTzyQKJoZA9U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:16:89:5f:fb:57:d3:74:a1:fa:76:bd:90:4b:b0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Apr 22 20:00:34 2025 GMT
Not After : Apr 23 20:00:34 2025 GMT
Subject: CN=8e4bf7c51b4211f37439b3728a6308d88d631cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:5d:41:09:cc:4a:38:b6:4a:d5:8a:b1:6a:
59:ab:66:47:37:f1:55:68:fa:0a:62:92:d3:17:34:
ca:59:02:4a:3d:40:1e:90:f0:b9:25:7b:f4:28:e3:
52:eb:ab:23:f7:dd:c7:e2:f0:50:a7:b8:8d:1e:93:
d6:f8:fe:d1:10:0d:cb:bf:d6:9d:49:51:79:77:01:
35:51:16:f2:37:37:c6:7a:6b:91:3c:48:7d:3d:a5:
ba:d4:da:1d:d3:91:47:12:4d:03:70:06:c0:7f:b8:
15:1d:dd:7f:52:a4:8e:c1:7d:8d:87:fc:0e:1c:a3:
37:31:8b:4c:3f:0f:03:10:9c:df:73:5a:24:14:09:
48:71:4a:e2:50:34:da:d5:49:47:53:6c:41:46:b6:
8a:04:66:c9:e0:49:de:b7:b1:48:d9:42:b1:28:33:
a1:c5:6d:d2:0c:8e:d5:2e:bb:14:f2:b1:d7:5d:02:
d5:15:62:ef:1d:8b:a3:de:b3:f6:f4:fa:a6:ce:a3:
4e:50:05:25:74:ae:61:fd:c6:81:0b:3f:4a:cd:f5:
be:bc:a4:7c:a7:9d:bb:a1:dc:58:89:45:e0:50:3f:
71:ef:f3:f4:46:77:12:05:06:c9:c3:31:24:25:fd:
eb:3a:d9:5c:72:c6:a9:3a:2f:69:83:00:c7:54:e3:
9a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4B:F7:C5:1B:42:11:F3:74:39:B3:72:8A:63:08:D8:8D:63:1C:F7
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:f6:fa:69:80:7d:a8:9c:36:cd:d1:57:72:62:a5:3f:00:
1f:63:f5:71:55:38:e8:59:ff:cf:ae:24:f6:1e:97:ab:9b:db:
ae:85:20:06:df:a6:71:14:43:44:b0:3c:6d:40:c4:3c:62:8e:
0a:5b:07:69:d7:63:17:bd:bc:51:1d:5a:a7:17:ae:9c:49:79:
ea:d8:53:40:35:37:d3:b8:10:b4:31:48:eb:74:92:b7:6a:67:
34:9d:c7:93:fc:01:7f:9b:91:e8:ad:4a:71:48:94:f8:44:78:
78:08:2d:9d:7e:a0:b7:06:97:15:e6:63:b1:de:45:0b:ba:2b:
09:a6:9f:13:bd:54:c8:8a:17:ea:67:0d:03:cd:1c:23:a6:ed:
7d:6a:18:8b:ac:fb:46:73:73:d1:02:02:aa:92:c2:f2:de:4d:
59:16:0e:f3:91:b3:23:9d:1f:bd:97:a3:12:14:19:72:87:6d:
3b:98:d5:e5:d8:35:c7:92:d9:79:a7:a8:92:af:52:62:9a:a4:
c3:0c:dc:cf:b1:47:c2:fb:f1:05:62:1c:51:05:4c:ec:d4:e2:
59:47:9e:e9:5a:92:80:47:1b:b3:e0:87:a8:30:4e:1d:31:0b:
f2:09:cc:d3:21:4b:0f:6c:8e:e9:b9:f7:37:60:e5:05:ff:54:
aa:28:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:42:04 2025 by rpki-client