Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier: YD/yRIb6yt/irjb8hr0eorSw7byrufKi2PDulCkoKYk=
Subject key identifier: B6:9A:CB:77:E7:7E:05:F3:20:6B:63:91:E1:03:93:70:CF:43:D0:45
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 01965F1644C4C808F4A14DF3F551957AEB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number: 1505
Signing time: Tue 22 Apr 2025 20:00:16 +0000
Manifest this update: Tue 22 Apr 2025 20:00:16 +0000
Manifest next update: Wed 23 Apr 2025 20:00:16 +0000
Files and hashes: 1: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: Ey57n+di2/PZrGNIdAjpLc2XWKMPSl/KAujN6nuSqAQ=)
2: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (hash: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:16:44:c4:c8:08:f4:a1:4d:f3:f5:51:95:7a:eb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Apr 22 20:00:16 2025 GMT
Not After : Apr 23 20:00:16 2025 GMT
Subject: CN=b69acb77e77e05f3206b6391e1039370cf43d045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:f3:47:b3:38:88:a3:46:0d:e1:40:5a:3e:
b8:20:b2:dc:fb:e9:db:a5:8b:aa:be:7c:7e:11:1a:
c7:73:15:4c:42:0a:11:2f:05:95:c4:3a:96:aa:22:
ad:bb:81:af:49:4d:ad:b8:ff:4f:ca:a2:03:72:5c:
74:e6:f8:c2:8a:e0:03:3d:33:a4:b2:f8:f1:b1:20:
1e:3d:a1:a3:d6:cc:cb:79:38:8c:30:0a:1d:d4:72:
0d:fa:d8:13:1e:9a:63:1d:c7:f5:3e:14:b0:21:6b:
01:a6:d5:24:fd:5a:60:a7:f3:db:02:be:b4:1b:da:
6d:b5:2a:53:a7:de:67:f6:bd:9f:73:8d:bd:2a:ad:
90:f5:9f:a0:aa:08:2a:5c:8a:dd:9e:9b:5c:a7:77:
24:7e:80:6f:78:ca:09:28:80:10:74:ed:0c:ce:8a:
78:13:9f:68:7b:93:25:46:f5:4c:3d:5f:ba:1a:89:
a7:44:32:a1:8b:3b:7a:24:57:4e:20:cb:80:96:8d:
a5:23:fa:a2:57:c5:ce:3a:a0:ae:97:ff:12:9c:c5:
ba:97:d3:73:d2:22:fb:71:18:f7:d1:b6:ff:65:6c:
9d:27:c4:bf:12:2e:a0:29:68:0c:68:0f:bf:91:7a:
7d:18:f9:93:af:11:3c:52:d1:cb:e0:83:a9:00:63:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:CB:77:E7:7E:05:F3:20:6B:63:91:E1:03:93:70:CF:43:D0:45
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3d:80:be:e9:06:ea:1c:26:f8:f6:ef:f6:90:82:28:e1:1c:
b2:ef:b7:03:14:3c:cc:7c:59:d8:5d:ed:a1:44:65:a0:b0:ed:
e9:96:8e:f6:63:d9:db:72:26:9c:44:30:51:3e:4d:a6:a1:70:
93:a1:e4:71:3d:8b:8e:ea:d8:f1:6e:ae:cd:5e:8a:0d:fd:6c:
03:e0:bf:cd:8a:27:9c:fc:e1:97:7d:ec:cb:0e:6e:0e:ef:2f:
ac:0d:1f:4f:f9:51:d5:25:93:71:87:d1:40:54:2d:72:27:6b:
cb:a8:aa:e3:41:ca:03:3d:53:87:f8:df:f4:62:32:40:45:c5:
c6:e8:89:8d:2f:c3:40:6e:fd:4b:1c:69:25:fd:d7:09:3f:38:
2e:e0:59:4e:74:f9:09:a2:68:b4:96:36:03:7e:85:ab:fe:00:
5f:f2:e0:66:5b:ac:99:c2:04:7e:3f:40:60:02:7c:56:c2:62:
0e:94:36:d8:52:52:ec:8f:05:18:4f:86:3f:48:82:22:53:70:
b5:0c:22:5c:d2:fd:89:38:26:fa:f8:68:5b:6c:1b:39:9b:41:
ca:4f:48:c6:79:09:3e:a0:91:e1:46:6e:43:84:cb:ea:72:5c:
e0:79:94:b8:92:e4:6c:2c:82:9e:26:26:7a:f6:fe:b5:d2:81:
e9:ab:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:00:53 2025 by rpki-client