Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: fulGTqyKe7Dv1vy7ZVVS2kqZ8f7Dp4Th9xl2nn0gjGE=
Subject key identifier: B8:0A:35:6C:FB:67:80:89:53:EE:F2:68:8D:EA:20:90:42:21:3E:61
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 019655DCEFCE95E31D64916C70BD60F5450E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 06A9
Signing time: Mon 21 Apr 2025 01:01:04 +0000
Manifest this update: Mon 21 Apr 2025 01:01:04 +0000
Manifest next update: Tue 22 Apr 2025 01:01:04 +0000
Files and hashes: 1: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: EVl99BgzcsA/PV95b50KPjI5Bzw7d47UNnYqZZqhqtc=)
2: saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa (hash: evXXOhKr0k/9XMT8MxumeZizzHV0YoG5/EuRYGW5sl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:ef:ce:95:e3:1d:64:91:6c:70:bd:60:f5:45:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: Apr 21 01:01:04 2025 GMT
Not After : Apr 22 01:01:04 2025 GMT
Subject: CN=b80a356cfb67808953eef2688dea209042213e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:1b:19:d3:2d:fa:fc:1c:6e:c3:05:2f:18:
81:ab:ad:98:3a:99:87:07:ca:2e:3f:31:66:63:a7:
cd:9f:55:41:d8:86:ed:3c:29:e5:33:ff:ce:f5:ce:
9b:86:4f:81:9a:37:0f:69:ab:c3:d2:9a:56:65:05:
43:d9:dd:d0:c3:9b:2c:21:6e:55:91:3b:f3:a4:1f:
f7:32:dd:4c:3f:78:56:40:32:fe:06:14:73:d0:90:
42:a0:e3:47:6a:be:30:4d:e7:01:41:a6:b3:03:2c:
7c:6f:ea:7f:67:e7:55:59:83:ed:ef:b8:d7:bc:87:
1f:b7:5a:c0:20:9f:86:5f:b7:9a:45:cf:e3:6c:e2:
b7:b7:6b:21:8e:bd:d6:37:eb:2b:e6:39:7a:98:a1:
ab:ef:1c:e6:12:1b:87:bf:cb:7a:5e:b7:3b:40:a9:
ee:37:50:e2:50:c5:cf:e4:9c:ce:92:fd:35:11:0b:
aa:8e:9d:32:e1:80:57:1e:7d:17:4b:f7:f6:65:db:
3c:e7:69:81:01:d9:ab:51:93:ac:bd:d7:ff:e8:31:
54:53:4c:ac:bb:1f:21:72:c3:8f:1c:cd:fe:49:c1:
1b:9a:32:5c:2c:f6:77:52:76:62:55:9c:d1:ff:6c:
9d:ba:3d:58:9b:47:ec:87:a3:c6:34:25:44:e4:42:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0A:35:6C:FB:67:80:89:53:EE:F2:68:8D:EA:20:90:42:21:3E:61
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:73:8b:12:fe:9a:da:e3:8c:04:78:84:4f:80:4e:d5:bd:b3:
7a:c2:c4:8f:eb:9b:b5:40:da:3d:d8:8b:ed:8d:34:9c:81:6d:
32:c3:dd:89:89:d3:54:8b:b6:63:4d:fe:3a:dc:70:39:c1:d4:
37:ec:a5:89:c1:8b:5a:c0:4c:68:55:37:f2:cb:08:94:e4:09:
5d:22:d5:b5:4f:82:4a:6d:93:79:c6:89:4b:73:64:03:86:23:
4f:44:29:dd:c9:e3:00:e0:74:f8:81:2c:85:18:32:d8:a8:d2:
48:c9:c2:aa:00:b3:75:44:54:19:4a:6c:2e:f0:95:4d:d2:1c:
b5:4c:3f:4c:3b:a6:ef:b6:66:ab:30:d9:77:6f:d0:17:66:af:
b8:dc:1f:a0:1a:13:9a:0b:cb:87:1f:4b:58:9b:69:db:9b:4f:
c9:64:a5:2d:ce:f9:a7:ff:21:67:fa:66:41:57:eb:3b:3d:dd:
1f:75:9b:9a:72:ac:0c:e9:ae:03:2c:e3:c0:3a:f3:18:6b:a7:
71:4b:5c:e3:9e:a8:08:bf:2e:5e:7a:63:3b:2d:71:03:14:28:
61:4e:a6:0e:4c:a6:d2:19:83:8b:ab:f7:1c:3a:32:ac:ea:e1:
9b:65:ae:03:3f:a1:3e:e0:01:50:f9:39:27:a3:44:b2:0c:b1:
d9:af:2d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:38:49 2025 by rpki-client