Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier: PsVUnZViM/6OUDpItwx90UCWuatw+S9+HKcBhFGKuaA=
Subject key identifier: 17:46:67:AD:D8:3A:A3:31:38:06:DF:E9:61:A6:B0:25:19:BD:03:41
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial: 019657CB3AF5DD0C2998790147807444C47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 10:00:58 +0000
Manifest this update: Mon 21 Apr 2025 10:00:58 +0000
Manifest next update: Tue 22 Apr 2025 10:00:58 +0000
Files and hashes: 1: 1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa (hash: Y2rS+2UdPK85e7sE5yCklBS//u+UrJBVKAmv+QqSGio=)
2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: CTLzo3LdJS4n0EQAlh1AYTjpMOjzEWqyokrUiYQtz5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:3a:f5:dd:0c:29:98:79:01:47:80:74:44:c4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Validity
Not Before: Apr 21 10:00:58 2025 GMT
Not After : Apr 22 10:00:58 2025 GMT
Subject: CN=174667add83aa3313806dfe961a6b02519bd0341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:54:10:3d:ea:e8:5c:30:e8:c8:85:4b:9f:
6d:b0:5e:70:a2:25:2b:6b:ce:5e:0f:72:e6:20:8c:
4d:1b:a4:e2:4a:15:57:e9:0a:f6:c0:ae:77:d7:cc:
b3:7f:d0:55:29:c4:1b:bc:90:6c:66:e7:8a:f0:65:
87:0f:06:2e:6f:75:8f:76:c9:0b:f3:48:74:9f:f5:
98:de:98:1a:62:01:c8:f6:e3:df:12:b1:21:4c:a2:
ed:d5:aa:6f:74:09:79:6c:79:67:5f:33:d7:4d:c5:
a9:58:c8:ac:88:a1:9e:24:b8:5e:ec:b4:55:0c:8b:
86:60:61:75:dc:22:3d:35:cc:7c:60:95:a4:19:9d:
ed:80:58:6b:b0:b8:64:52:aa:53:a4:f2:1b:c4:64:
5a:a3:93:b8:10:df:8f:19:a9:bc:96:d3:5a:d6:6b:
93:a3:a5:23:5e:4f:35:46:8e:6d:b6:96:12:88:ee:
90:74:f0:70:05:77:81:5f:51:89:0e:0b:81:8f:7c:
86:a4:1e:b7:d0:09:24:c7:63:22:fb:c0:8a:3d:63:
df:6b:06:30:9a:85:f2:dd:19:7e:e6:d4:77:39:51:
52:a0:d7:e9:ad:73:cd:ea:77:e4:39:6a:22:84:3c:
6b:1d:61:d1:40:0d:3f:a7:c9:eb:8d:05:23:a0:8f:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:46:67:AD:D8:3A:A3:31:38:06:DF:E9:61:A6:B0:25:19:BD:03:41
X509v3 Authority Key Identifier:
keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:24:15:60:e7:0d:60:c9:4f:00:b6:13:72:f5:9f:d1:81:c5:
05:d9:34:01:7c:31:76:57:22:5f:fc:94:07:27:8a:80:af:a6:
54:ee:8c:97:be:2f:da:d6:ba:92:b9:7e:bb:5e:26:28:cd:4c:
2b:34:62:90:7f:ea:2a:61:47:d0:3e:e0:78:3d:a2:f3:8e:01:
77:cb:b3:01:ab:ed:a7:75:cc:3d:df:57:77:7f:ae:fb:8d:3e:
f8:60:a7:c4:2b:4e:b0:a8:93:18:7b:6f:87:b6:d3:6e:a6:d4:
86:37:33:3d:e7:0b:27:ad:e6:91:be:13:b3:7a:38:ed:69:49:
05:f2:14:51:5b:65:c4:33:0f:36:68:c3:2c:37:0d:33:88:15:
18:66:db:a6:13:2b:0e:83:93:21:33:2f:d3:60:9c:ab:eb:ce:
81:88:d3:ea:69:08:35:9e:ce:4d:0b:dc:38:ed:27:62:b1:9c:
a3:18:ff:23:38:38:74:5d:05:9b:0a:fd:b8:0b:ed:ea:ce:cf:
de:77:5c:d7:30:69:fe:28:ae:49:5f:4a:27:7d:2c:c7:83:41:
76:95:19:ee:96:6f:52:47:f1:04:0a:6a:18:65:03:ab:b0:f8:
c5:04:a4:5c:79:6c:d9:f5:c7:a4:83:b3:cc:6e:d1:59:6c:92:
4c:28:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:15 2025 by rpki-client