Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: 1l7Fq1KRcJkB65dshidNBmWIfUeNeFkseRYRefpd19Y=
Subject key identifier: 4F:9C:63:DD:10:82:74:0A:75:0B:21:E0:D6:0C:51:09:F4:D9:33:F5
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 019654C9EDE7EC6EC6887A1BA15EA3E99202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 20:00:41 +0000
Manifest this update: Sun 20 Apr 2025 20:00:41 +0000
Manifest next update: Mon 21 Apr 2025 20:00:41 +0000
Files and hashes: 1: 0w0EpLZYR7z2XsoCgghcY3pUnoU.roa (hash: lVpl8mTP6YZbuLjsob401TFZW5nVn9qmK2OvSpdRlfk=)
2: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: Kx45VcCsuOHUOrZlfskN01RjUfLpq4zGygNIECgmB04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:ed:e7:ec:6e:c6:88:7a:1b:a1:5e:a3:e9:92:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Apr 20 20:00:41 2025 GMT
Not After : Apr 21 20:00:41 2025 GMT
Subject: CN=4f9c63dd1082740a750b21e0d60c5109f4d933f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:fc:8b:9b:fc:e0:2e:40:26:0c:ca:07:02:
db:d0:4b:33:0b:6d:c3:69:e3:5e:19:3e:70:d0:15:
9b:a0:b8:22:cc:5d:a6:3f:25:12:5c:c5:98:36:b3:
7e:88:36:95:38:82:58:c5:d9:25:e1:c1:36:cb:fd:
8e:9f:d7:a5:db:66:91:0f:20:25:5a:af:4a:29:57:
d2:8b:24:7c:31:78:f4:98:f1:bf:39:45:e9:fc:61:
e0:53:94:b8:3d:dc:af:dc:9e:a0:91:96:67:9a:94:
19:d4:a5:17:11:13:8f:d3:5c:46:37:79:f4:3f:a6:
62:df:ff:b7:76:c2:6c:83:0b:dc:bb:dd:09:0c:6c:
e6:71:fe:b7:03:ce:a0:24:d6:69:15:40:72:fb:72:
26:98:72:78:48:95:24:3a:53:b5:6d:59:0b:8f:8f:
0a:50:4d:17:0b:a9:37:b4:c1:de:70:a5:85:10:58:
9e:1e:5d:e3:15:7d:4d:55:90:7a:01:a7:e7:3b:e9:
fa:58:bc:78:2b:ce:5c:4f:a7:15:8a:40:23:ef:10:
a1:0c:f9:56:6f:e1:05:b3:76:0c:ae:03:53:18:b6:
3f:95:c2:76:ca:77:4b:7a:7a:a5:f4:56:65:b8:24:
d7:a8:20:89:58:c6:31:d5:14:88:f4:60:93:bc:ea:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:63:DD:10:82:74:0A:75:0B:21:E0:D6:0C:51:09:F4:D9:33:F5
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fb:7f:f4:dd:7d:82:88:f8:70:37:5d:2c:c9:e2:be:98:34:
c0:b1:3c:5a:98:0d:be:4e:cd:b7:ba:7c:d6:89:9d:a9:98:ff:
e6:db:b6:51:b4:e4:53:9a:c9:2a:4a:9b:c2:22:44:dc:96:12:
6d:be:7f:1d:22:18:26:4e:46:63:97:81:c7:50:d9:61:0d:e5:
72:a4:04:a8:c0:6e:26:95:df:2f:10:5c:b5:d3:57:03:96:05:
11:75:c6:6e:f0:91:d2:41:ec:11:fa:f9:92:49:b7:3c:88:fd:
48:ac:95:ff:d0:d8:12:fa:67:0d:5e:20:c3:bc:81:ef:20:bc:
63:15:dc:ec:b8:ed:d9:cb:95:b6:64:35:17:88:1c:4c:05:e2:
a0:d7:cb:42:11:a1:ac:f2:e1:53:3b:31:15:d1:2f:02:ed:ae:
d9:7d:0d:7f:70:5a:b7:7b:f0:d1:02:86:24:b1:f3:10:57:65:
f4:c1:13:93:29:12:91:99:3c:89:41:67:ad:69:23:e9:3b:b4:
d7:e3:20:a9:7b:ff:55:a1:9e:ac:4f:25:1b:0b:29:06:97:8c:
73:9c:c9:8f:f1:ad:83:d8:cd:c3:05:49:7e:0d:c7:32:5b:a2:
4c:12:7f:ea:3c:49:68:1b:67:3a:26:6b:ef:9d:64:b0:24:e1:
7d:11:07:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:02:08 2025 by rpki-client