Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json)
Hash identifier: CSXW8cg1SyW8sQK4g64uwXi4y0cYUMu8Ohnu0akQUnU=
Subject key identifier: CD:E9:2C:7E:E1:9A:17:86:BE:F4:88:46:BD:2C:FB:5B:72:D5:84:C3
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 01965BDE79BD4F6801271A9B918B41D9771B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
Manifest number: 0544
Signing time: Tue 22 Apr 2025 05:00:28 +0000
Manifest this update: Tue 22 Apr 2025 05:00:28 +0000
Manifest next update: Wed 23 Apr 2025 05:00:28 +0000
Files and hashes: 1: UJLmCw34qWtSEnk-TuMcHNiR5vk.roa (hash: j5fkYAu7YGsQmsA7L/NleCKG1P5eFJG2QoHhfIjSYOI=)
2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: U1N0s797/bHzdD0mFyyWE4qg6zrDP2//CH5qKKK0CYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:79:bd:4f:68:01:27:1a:9b:91:8b:41:d9:77:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: Apr 22 05:00:28 2025 GMT
Not After : Apr 23 05:00:28 2025 GMT
Subject: CN=cde92c7ee19a1786bef48846bd2cfb5b72d584c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:b9:f2:59:81:48:8e:90:4a:9c:56:0c:55:
04:dd:5c:5f:81:09:06:7e:54:34:03:c8:1f:e3:71:
a2:f8:10:c8:fd:35:54:f9:27:27:16:10:d2:2c:68:
c5:a8:46:2a:bb:60:24:6a:1b:20:9a:51:2d:33:0f:
d0:0a:99:68:65:6c:7c:13:4f:fc:ed:33:78:a8:84:
f6:11:c9:0d:c7:6b:4b:cb:12:e4:8f:cb:53:29:03:
53:96:6b:3a:e4:a5:dd:8a:21:82:54:d9:64:0a:27:
b5:9d:f0:8f:6b:d9:89:6e:52:e7:cf:01:84:8d:7f:
bf:e1:c8:62:eb:8e:cd:51:7e:20:54:2e:e4:a7:0b:
31:c4:d1:90:d0:9e:01:fe:ff:c8:50:ae:2d:ee:ac:
17:3b:52:14:d1:bc:a0:fc:c5:ac:33:1e:a9:9d:66:
54:f4:fe:2a:91:b4:75:37:8a:05:b7:5f:c4:dc:48:
03:1d:bf:31:fe:45:d8:13:be:bf:2b:31:97:f3:ef:
fb:bd:9b:aa:eb:69:7b:88:37:af:e8:28:36:f9:0a:
c2:47:66:9c:de:ef:3f:90:4d:b8:be:53:d3:15:e2:
14:bf:3a:e8:c6:bc:cd:cf:2f:ef:1a:49:7e:69:3e:
2e:fb:b0:65:d7:22:49:50:82:2f:94:3b:57:e4:f8:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E9:2C:7E:E1:9A:17:86:BE:F4:88:46:BD:2C:FB:5B:72:D5:84:C3
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:aa:1e:14:03:05:63:55:d4:57:3d:53:e0:86:0f:1e:f5:32:
b5:04:02:63:fe:5d:91:03:1f:f5:d8:55:b9:d5:f1:d6:6b:2c:
7d:49:b7:35:78:8a:97:b4:40:5b:69:8c:61:33:19:24:c8:72:
db:1f:e9:05:a2:4b:af:27:db:88:6b:0e:bc:c3:65:34:52:05:
98:d6:84:b9:2a:c6:15:d4:d4:e0:9f:b3:5e:78:d9:bf:af:d2:
0a:81:48:1c:21:21:1a:7d:a9:8c:54:2d:a8:55:a6:9b:37:a1:
68:05:01:ed:9f:e5:62:99:03:21:3e:91:8b:79:03:52:43:21:
f5:5c:4d:8d:99:ba:4d:c2:f9:e3:80:0a:b9:fd:03:20:55:4e:
ef:e0:09:34:eb:85:ae:77:f0:33:cb:7f:4e:72:d6:54:c8:13:
d2:e7:06:8b:fe:60:4c:3d:aa:69:2e:fd:90:5f:6b:69:d7:42:
07:ae:00:3b:de:a7:a6:52:58:cc:ce:79:ab:46:07:56:50:ab:
33:3e:04:35:b2:52:ae:33:73:98:ad:07:5c:4b:6e:06:46:b7:
2c:e5:23:15:34:61:30:54:7e:06:f8:a8:ee:2c:ec:94:a3:5a:
99:99:68:1b:52:0f:33:6b:2b:32:3b:83:2c:5d:3a:d3:b7:c2:
fc:21:6f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:34:06 2025 by rpki-client