Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File: slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier: fVTXC6vQ57YLJDjULCww6FFLZBOXDu6uLOcbDODuCok=
Subject key identifier: 7E:17:97:54:28:41:D1:F5:E0:0F:AD:6F:1F:2D:D6:CD:59:80:BB:EC
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer: /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial: 0196594B5411F522B975C95E72F60F5D0248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 17:00:31 +0000
Manifest this update: Mon 21 Apr 2025 17:00:31 +0000
Manifest next update: Tue 22 Apr 2025 17:00:31 +0000
Files and hashes: 1: 7QMuMfRcubM7Dw9mRD9Oeleudm0.roa (hash: 34yr97BhHkN5u8FjcTkMX2e6CbJy1pgn7SWZTkyU8GQ=)
2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: av9YkQj3dXBPy25Cl/iwjSkH+fv9xLjjM784N5LA0NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:54:11:f5:22:b9:75:c9:5e:72:f6:0f:5d:02:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Validity
Not Before: Apr 21 17:00:31 2025 GMT
Not After : Apr 22 17:00:31 2025 GMT
Subject: CN=7e1797542841d1f5e00fad6f1f2dd6cd5980bbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ef:49:3b:62:0d:40:cb:95:cb:f4:43:d2:00:
54:eb:1f:e8:40:e0:99:36:25:c0:f8:c5:18:0f:ee:
48:a7:dc:4c:35:fb:6f:77:6d:6f:08:25:f4:76:ac:
26:5b:cd:fb:47:7b:41:28:24:6f:36:f9:e0:92:b5:
14:06:78:4b:8f:4c:a0:b6:50:9b:bc:b1:05:a8:ea:
02:3c:3e:b6:66:36:a8:c7:18:50:91:ea:22:2c:14:
41:70:d4:bf:8f:9c:c2:cd:e9:e4:6e:4c:10:5e:9c:
2c:90:a6:cf:a6:16:72:a8:ef:4e:76:29:3b:ba:fa:
5e:73:1d:ba:19:3c:76:12:ce:0c:3d:57:0a:ce:20:
c5:55:20:d2:65:73:dd:32:b5:9f:d7:16:1e:4c:0a:
d3:c4:72:46:87:f8:90:fb:18:6f:2c:cd:f7:4c:57:
b2:76:65:3b:91:1f:c5:80:10:d1:fc:39:04:1b:d9:
7d:65:74:23:72:e2:53:4d:e4:be:ab:de:2f:59:65:
0d:d2:75:86:a1:b3:3f:33:b4:7b:8b:9f:a7:15:61:
7a:5b:da:f5:57:96:e6:a7:f5:72:5c:c8:89:b2:9e:
be:ad:15:4a:cd:16:cb:04:fc:0b:f1:ac:37:87:cc:
9b:d2:db:d4:46:16:fc:8c:bd:06:63:b6:e7:b8:f9:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:17:97:54:28:41:D1:F5:E0:0F:AD:6F:1F:2D:D6:CD:59:80:BB:EC
X509v3 Authority Key Identifier:
keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9b:84:8c:f2:94:c8:4c:38:55:46:44:47:d5:34:d1:0e:ae:
56:40:01:cb:a0:60:d2:bb:ab:ec:e9:ca:6d:fd:c2:ac:c9:9e:
35:e0:70:ec:6e:25:60:84:e1:61:20:70:cb:95:00:4b:6b:6f:
8e:92:92:b2:ed:8d:52:0d:4b:67:be:66:a4:e2:66:5f:39:52:
eb:ff:c8:d6:78:09:f7:1a:58:49:e4:5c:de:a5:aa:da:65:e1:
71:0c:a9:58:32:f7:e3:fd:ae:3c:01:b0:52:9b:fe:aa:e3:0d:
f7:92:ca:56:34:39:de:46:3f:d0:2b:6d:f1:e0:44:9b:31:c5:
4e:d5:15:ca:c6:eb:17:e6:08:09:b2:de:51:c2:45:a9:a9:89:
32:01:79:9d:9d:b2:01:33:4e:0e:b7:97:d7:ad:96:b9:12:6d:
1b:e3:70:35:3b:3c:4c:87:ec:35:90:68:de:74:4f:62:16:d0:
d9:d0:2b:82:8f:29:f0:0d:d4:e6:19:6f:a8:dc:fa:2c:21:f4:
ac:89:ea:5b:62:6c:38:07:ba:67:83:7b:e1:c4:6c:fe:fd:17:
d4:f6:6a:ff:29:6a:28:17:9f:5f:66:b7:8d:56:6d:b6:7d:9f:
ba:73:05:c1:ee:aa:71:37:23:b1:32:11:0c:bf:ae:7d:09:71:
74:ad:e6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:06 2025 by rpki-client