Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier: hqZ4T3nyzDLmHmqXxbWkcQiulVI895aWoz7mZeI5fms=
Subject key identifier: E2:14:4A:EB:C0:3B:A2:21:56:06:E8:9D:8B:BF:28:75:08:C9:38:76
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 01962ABC409262379B6D8BDA3B84A2CC53FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number: 14E9
Signing time: Sat 12 Apr 2025 16:01:42 +0000
Manifest this update: Sat 12 Apr 2025 16:01:42 +0000
Manifest next update: Sun 13 Apr 2025 16:01:42 +0000
Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: f6vxt1YTM7YMSca4TgyuNspn0xZ8k3VqbCUlgDdMMBs=)
2: e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa (hash: +VPNQ16MVhJiwbxpGaUiyY+7EYW+EvR2+xy1H+6qMTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:40:92:62:37:9b:6d:8b:da:3b:84:a2:cc:53:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Apr 12 16:01:42 2025 GMT
Not After : Apr 13 16:01:42 2025 GMT
Subject: CN=e2144aebc03ba2215606e89d8bbf287508c93876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:54:e7:17:b2:be:5d:ca:f3:b2:7c:c9:81:
52:e0:9e:c6:8c:10:1e:0b:ae:75:e1:d1:17:af:a5:
0c:cb:f3:77:f3:49:18:b5:23:c5:dc:37:23:67:b4:
dd:38:01:8b:be:a8:97:33:78:76:78:ad:b3:ed:97:
69:1c:8d:f6:1d:67:df:77:10:65:64:fa:6c:c9:e4:
c1:67:2a:d1:bb:3d:33:cb:d0:ca:ba:63:85:5b:af:
cc:8b:c2:62:e7:03:af:a3:90:4c:36:7e:1b:18:8d:
b2:69:42:bc:29:76:2d:c1:36:ec:6f:d3:37:39:06:
2f:de:a7:1e:f7:8d:ca:11:a4:bc:c8:9f:23:d4:8b:
2d:52:bd:cd:b1:55:14:33:f5:2a:02:6c:11:16:43:
df:52:da:1a:c2:0d:7a:c9:df:05:29:74:f3:53:19:
a2:d2:32:11:7b:57:05:7a:a1:32:eb:80:d3:3c:e1:
8f:34:59:c9:81:f1:fa:5b:d2:d9:c6:4e:a8:11:0e:
9e:24:d8:75:dd:9d:ec:06:b6:41:1e:1d:0f:59:7b:
13:23:1b:d7:c5:cd:52:c0:7e:c7:30:e9:dc:15:3d:
82:0a:e2:6d:51:c5:a7:50:c9:3e:5e:4e:da:7d:ce:
9b:10:5e:a4:43:32:d0:97:b8:1e:6c:c1:39:5e:4b:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:4A:EB:C0:3B:A2:21:56:06:E8:9D:8B:BF:28:75:08:C9:38:76
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fc:a6:b7:ec:9e:c7:0a:85:e5:bd:ef:cc:43:b3:e7:2d:ee:
67:e3:a5:65:8a:67:5e:d5:40:1b:50:41:10:c3:e6:fd:e0:f8:
4f:66:6d:9f:bb:5b:32:5b:0d:c8:88:6a:22:0f:d6:50:40:ac:
77:ff:9e:57:56:4b:65:80:a7:c2:de:fc:7f:27:ad:69:a7:08:
de:78:56:02:14:e2:5a:78:9b:36:f2:29:c8:14:2f:97:43:85:
6d:16:19:48:3a:6d:80:9b:1f:c1:34:cf:0b:11:42:46:55:1b:
98:62:96:09:8d:0b:97:d9:d2:46:57:36:db:e8:de:60:f8:f7:
69:7b:12:29:6f:0a:c5:de:57:13:43:15:39:24:4e:f2:e1:f7:
e7:9e:cb:50:69:8e:86:a6:39:31:64:7b:0d:ee:75:8c:4f:70:
4a:00:9f:fa:79:6f:c4:e8:a7:b0:06:e2:94:11:bd:fc:1c:90:
44:7d:bb:cb:5f:5e:64:f6:71:d5:ab:75:f1:ed:19:17:ef:f6:
90:a0:13:32:c9:cd:8f:bf:73:63:0e:5e:44:69:bb:3b:81:4d:
f9:18:35:bd:50:bf:d4:a0:c4:52:cd:43:29:c2:7e:27:5e:44:
02:02:d1:1f:ce:4f:6b:c1:75:8f:35:3e:e8:e5:15:3c:a2:2d:
9e:cc:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:45:26 2025 by rpki-client