Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
File: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft (raw, json)
Hash identifier: UYdD/2k3rwa1ZnicQs9aqNlQqjUxl8dgCAjIeHcn388=
Subject key identifier: F0:CD:08:57:2A:0A:2A:05:53:0C:60:B8:7D:B5:57:64:34:E3:90:BF
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial: 019659F0172DB166767E5CA23CA7EC9ACA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
Manifest number: 1204
Signing time: Mon 21 Apr 2025 20:00:28 +0000
Manifest this update: Mon 21 Apr 2025 20:00:28 +0000
Manifest next update: Tue 22 Apr 2025 20:00:28 +0000
Files and hashes: 1: 6nka26L-7vbT-huqQ7zH80Ad2_Q.roa (hash: bi36P0sQvSkI3t0S3Th1jO23VxQKQmTqbcjBaO1g00A=)
2: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl (hash: RJkOEXhUAY17TapYPXok7kL+vEExFqF2b9xiu6pxmyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:17:2d:b1:66:76:7e:5c:a2:3c:a7:ec:9a:ca:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Validity
Not Before: Apr 21 20:00:28 2025 GMT
Not After : Apr 22 20:00:28 2025 GMT
Subject: CN=f0cd08572a0a2a05530c60b87db5576434e390bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:35:17:10:a4:98:69:25:d0:26:77:a9:f8:
50:41:13:eb:08:b3:04:a1:8a:6f:b3:34:31:9c:f6:
65:f6:bb:74:b6:6a:90:e1:24:69:15:88:00:53:d3:
fe:33:fd:c7:1f:74:13:10:b6:c7:0c:f5:51:d0:bb:
da:0c:6c:65:39:e7:d6:65:a4:32:8c:17:ee:a5:a2:
05:d4:15:23:c0:f1:9a:ac:b2:d2:10:70:b0:6f:35:
20:f7:0e:26:37:f3:bf:20:f8:79:44:d4:66:fc:d5:
c7:11:94:d2:af:bd:7b:41:55:e9:57:0d:62:b8:20:
ad:6a:f6:19:3b:36:2a:f1:b0:27:53:d7:97:f9:11:
ff:e8:9e:45:3c:38:4d:e7:b6:69:5e:fd:d3:4b:33:
8a:39:8d:f1:4d:2d:42:cf:f1:c2:ac:6b:79:4f:19:
d0:f4:c6:09:2f:fe:3a:66:19:92:90:bd:29:67:f3:
5d:8b:a8:60:90:b7:3e:02:74:79:84:c5:e8:c1:b0:
ff:35:bc:ee:c0:0c:8a:88:60:ec:6d:b9:21:1a:87:
47:9b:39:1d:9c:29:f2:e2:ef:6d:f7:6a:65:1a:d9:
1b:d9:97:ce:29:af:a3:6f:f4:45:d2:88:29:1d:b5:
dc:5b:6a:10:df:bf:47:06:63:d1:70:9e:f8:01:18:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CD:08:57:2A:0A:2A:05:53:0C:60:B8:7D:B5:57:64:34:E3:90:BF
X509v3 Authority Key Identifier:
keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:09:31:df:de:7a:7d:ec:50:82:d3:34:9f:bc:ce:44:6c:4f:
f2:1e:25:da:91:4b:e2:c7:a9:70:aa:2a:2f:be:f9:2a:34:b4:
5c:cc:66:62:d5:60:6a:8f:f0:41:fe:7e:09:64:dd:c5:aa:f7:
1a:99:87:c3:75:01:ff:a6:2c:89:8a:39:8c:99:e6:8d:50:ec:
42:a4:43:32:61:bc:29:1e:5b:3f:b0:ed:7f:98:fb:b8:00:4c:
0c:51:57:8f:f1:61:96:00:27:d0:52:8d:5a:21:8d:39:5f:35:
9f:d5:01:34:ae:13:c8:d9:41:5d:a8:ee:dc:4f:8c:d2:15:12:
1e:98:7e:fc:38:2f:c2:04:82:c6:91:4d:6c:c9:c4:a6:ad:7e:
43:ce:38:ed:aa:2d:51:42:43:00:80:05:b7:e6:66:c2:60:c5:
8b:68:0a:bf:53:ef:99:d5:82:46:00:16:7d:51:33:13:d9:e1:
3e:93:39:c0:07:78:34:cc:ee:6e:61:1e:68:29:4e:3f:40:2a:
8f:43:81:f1:45:98:fb:5e:72:8a:ee:b9:8d:c4:67:57:e2:42:
05:d7:9b:7a:21:27:f5:48:24:27:29:0e:fe:95:4b:f1:91:52:
bb:e4:1c:ad:1d:ab:ca:20:7a:9d:1a:8a:02:9d:74:de:1e:de:
74:85:5b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:21:46 2025 by rpki-client