Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier: itZbgZRieuom0litgNeQMMPDmEH3ZjuPGyLMqXAmbOw=
Subject key identifier: 5B:13:46:17:A9:07:18:9C:00:8C:79:CF:45:E1:3C:82:53:6C:8F:6B
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 01965492FE0F9C0086A6CE2E31FD01755B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number: 1E
Signing time: Sun 20 Apr 2025 19:00:41 +0000
Manifest this update: Sun 20 Apr 2025 19:00:41 +0000
Manifest next update: Mon 21 Apr 2025 19:00:41 +0000
Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: ToseJNAufIt78O05kCR3AlfVKe3Q9GHr16AkpRJTOyg=)
2: Aa9R_Libiqvgoa4YWWk8r3SzA0k.roa (hash: wG5zYELHiZDPN6IPcQ73blie+D4kfwhoHNSgUdlo0n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:fe:0f:9c:00:86:a6:ce:2e:31:fd:01:75:5b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Apr 20 19:00:41 2025 GMT
Not After : Apr 21 19:00:41 2025 GMT
Subject: CN=5b134617a907189c008c79cf45e13c82536c8f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:86:58:7c:03:bc:95:40:91:18:92:62:dc:
a3:a4:5d:ee:dc:b4:9e:ba:8d:84:86:1e:73:d4:72:
86:cd:a2:0f:31:cf:d5:9f:b7:24:d8:9d:c2:a5:0e:
47:4b:fa:4e:d2:eb:cf:03:0c:64:01:c5:2f:15:c2:
b5:8a:d7:77:56:07:f7:39:d7:fb:b0:cd:92:0c:e2:
dd:8f:11:73:c9:79:3e:1d:6a:c5:b5:83:c8:80:93:
f1:dc:d8:c2:5f:ed:ce:ed:cf:f5:87:08:74:09:e5:
94:f8:43:e6:1a:73:4b:e9:c5:aa:a5:4e:ef:c7:a2:
3a:d2:ce:a1:b9:0e:e5:aa:da:03:7b:66:6e:14:68:
f0:fe:c2:fa:a9:d5:2c:35:d8:3a:75:1b:e9:0a:8f:
bd:67:21:03:38:79:e4:fc:4e:d8:71:36:b4:89:65:
5b:83:3f:91:24:52:dc:e7:cf:57:49:18:de:6b:62:
19:bd:89:96:b6:e4:d1:1b:4c:a5:1f:ad:ed:46:30:
65:16:71:ec:c3:eb:8a:f7:40:53:da:a2:52:f7:89:
8b:6d:79:83:e8:03:3c:9f:14:00:8e:f6:e3:54:8a:
5e:30:a1:40:80:59:9c:2b:a8:1c:b1:3a:88:e2:26:
6d:df:12:83:3e:f8:cf:ae:3f:06:88:8e:95:d0:ec:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:13:46:17:A9:07:18:9C:00:8C:79:CF:45:E1:3C:82:53:6C:8F:6B
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b6:91:b2:14:d9:71:5b:da:e3:5d:7c:22:82:d5:b2:b6:83:
b3:4b:b5:a6:3a:95:94:9e:20:e2:38:95:7e:4a:d7:c7:cb:88:
8d:42:fd:ef:7a:68:ba:ce:fc:40:0f:eb:96:ee:22:30:bb:2d:
bf:3e:71:35:05:22:65:81:00:c7:d0:61:6c:d9:33:a2:bf:41:
89:6e:08:b9:22:73:1a:75:75:0a:72:c6:5e:ec:1b:04:e1:39:
2a:59:e1:4a:cb:49:ac:c6:48:29:7a:2e:d7:c0:32:06:80:91:
35:84:f9:ce:2b:57:ee:55:a6:c6:b7:2d:47:ec:3c:d7:7e:7c:
a8:35:c1:74:cd:4b:ca:53:00:01:b4:a8:50:c0:df:75:11:bb:
eb:d0:a9:00:04:97:55:5e:bf:62:fc:e9:0b:74:79:73:39:e7:
be:b4:02:17:6f:cc:66:66:d2:89:30:45:94:d3:c8:04:25:97:
3c:b9:1f:ab:58:d3:83:80:62:5b:8d:2a:89:50:42:da:96:8e:
de:c8:b7:a3:9c:1d:e5:c9:cd:80:ea:96:32:7c:f1:be:c0:d8:
be:eb:d6:c6:bc:41:73:ae:ec:be:cf:68:c1:83:6d:43:1f:7d:
af:49:fe:b1:90:18:d5:d2:e0:1f:24:7c:be:6c:c5:b6:ea:30:
33:3b:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:08 2025 by rpki-client