Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: UvUpp7nLFMCpL6mkYwrM8zYCyNGZungtRDlc4vNhvUo=
Subject key identifier: 25:C3:E0:79:7D:AA:11:76:22:03:50:A2:CC:7E:8D:0B:03:11:F7:BB
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 0196556EBB456E98FADECE5DD7BF650B9A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 23:00:42 +0000
Manifest this update: Sun 20 Apr 2025 23:00:42 +0000
Manifest next update: Mon 21 Apr 2025 23:00:42 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: AJHOQECug2q0McWhQaPFslCBhQsMv7tAhQ2+6dvBwIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:bb:45:6e:98:fa:de:ce:5d:d7:bf:65:0b:9a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Apr 20 23:00:42 2025 GMT
Not After : Apr 21 23:00:42 2025 GMT
Subject: CN=25c3e0797daa1176220350a2cc7e8d0b0311f7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:d8:12:74:2c:eb:42:c0:10:a3:d3:4c:b7:
b2:ff:d0:61:f1:2e:61:0b:78:b7:83:04:66:f5:46:
20:db:82:94:86:fa:1e:83:19:4b:6e:39:9d:a9:d9:
94:aa:3b:ce:5a:7c:c2:e6:c1:9a:6d:cb:6b:42:d3:
f3:c1:42:fd:da:d3:bc:52:32:c6:e2:15:e8:65:5d:
27:fe:08:b6:67:42:59:a3:88:28:26:0e:e0:a3:ce:
26:21:43:a3:20:a2:c7:54:d1:d3:31:21:b7:c1:46:
1f:7c:81:b7:72:5e:7d:93:e2:b5:ab:36:4d:b6:3a:
0d:67:5f:da:53:66:fb:80:8d:bc:90:8f:d9:64:35:
c0:61:72:01:11:34:69:85:71:a2:d3:d6:a5:c8:48:
50:50:9c:c8:f8:44:df:c1:b7:f3:c8:b9:71:10:a6:
f4:f0:12:40:b3:bd:4d:ac:11:b4:b1:a3:a8:3e:35:
1a:b4:d4:d5:93:25:f2:cc:96:3d:58:f3:fa:cd:68:
29:e6:45:2d:2e:87:94:73:2c:2f:d4:ec:1b:12:5e:
d4:4a:ad:59:ec:cb:e4:ca:b3:24:bf:53:d4:ce:8c:
44:db:d1:35:6b:88:9a:4e:c1:91:42:05:51:17:42:
8f:f1:5b:14:75:4d:f9:79:00:81:cf:3e:2e:ba:3c:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:E0:79:7D:AA:11:76:22:03:50:A2:CC:7E:8D:0B:03:11:F7:BB
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:57:ba:10:51:ac:5f:a5:a4:eb:b8:88:c6:e0:13:f9:84:c9:
83:f4:e9:68:ab:3b:16:c2:74:f7:bb:4b:9d:b5:af:cf:41:60:
d9:73:9e:8e:8c:5e:77:88:e7:54:57:7e:78:77:73:b2:b2:ee:
6b:d0:4d:ad:ce:72:11:89:5f:d4:6e:b8:b6:76:b9:fe:2d:33:
64:45:b8:d3:e8:9a:e7:2b:ab:a8:1d:16:db:5d:15:eb:fb:4d:
c7:50:cb:49:7b:3d:e5:e4:20:97:b4:2f:4f:17:81:b0:af:bc:
5d:16:60:48:f3:03:3f:42:75:18:89:53:6b:02:e8:34:1d:03:
d4:f0:a9:80:95:9a:88:a1:a5:d4:82:71:71:b0:30:28:77:48:
e6:50:c1:91:90:8e:d3:11:be:73:9a:29:3f:45:09:19:69:73:
6a:99:8a:cb:a3:a6:86:8a:32:c9:1c:6a:9c:d6:f7:d6:4c:c7:
13:fd:19:b2:53:44:c4:2c:92:b8:11:af:81:1b:5f:96:9f:06:
c2:ad:6a:cd:02:6c:94:80:8e:f3:39:f1:81:7e:bb:f3:aa:f7:
85:ae:7e:d3:43:98:40:de:60:5d:69:ed:ee:3f:7f:ab:20:87:
0c:43:7d:98:35:49:2d:39:c6:5e:79:62:55:63:aa:53:c4:ea:
5d:8b:04:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:03:39 2025 by rpki-client