Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier: NvmQ4oQVNxgy4mqBRZOqGSNUmuSwr2nXqTmY/TkfxDg=
Subject key identifier: 93:E3:E1:91:7C:46:43:D1:7F:A3:CF:25:CF:8C:C4:21:55:35:07:3E
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 01965E3AF9E5B4AAA57F0602C8E96D5FAD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 16:00:45 +0000
Manifest this update: Tue 22 Apr 2025 16:00:45 +0000
Manifest next update: Wed 23 Apr 2025 16:00:45 +0000
Files and hashes: 1: AUWnKCughTUHbSmmjTVn8vVnF6E.roa (hash: m1cgzZ28NmXLcFryBxDw9CaAhbB6KXsR5pNMz3ZSd1A=)
2: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: gb+NAtX/NlxYZfKrWB60bH0e0JoAM8UwbLbdWWnx3vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:f9:e5:b4:aa:a5:7f:06:02:c8:e9:6d:5f:ad:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Apr 22 16:00:45 2025 GMT
Not After : Apr 23 16:00:45 2025 GMT
Subject: CN=93e3e1917c4643d17fa3cf25cf8cc4215535073e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:08:c2:bc:a3:ba:c2:05:43:90:fa:d4:b8:
db:a9:e4:46:40:87:b0:cd:23:67:4b:ef:e3:a7:93:
da:bd:06:33:fa:0e:bd:e7:77:18:fc:35:c1:3d:17:
e1:76:d4:96:01:0c:1e:f8:d1:8b:3c:38:a9:06:af:
0b:7a:1b:a9:ba:30:f0:ed:e0:6e:15:89:f7:34:2a:
f7:53:44:f1:2e:59:fc:0a:c4:8c:bb:38:81:89:7f:
21:3d:8f:b6:4b:3b:66:67:19:04:0b:a3:e3:e1:26:
40:6f:cd:81:4c:17:6c:83:80:47:6c:82:60:b6:f3:
6b:6d:c5:7a:b9:e0:30:8a:40:90:04:b0:22:16:63:
98:de:b2:74:d3:0f:f6:f5:2e:00:47:6c:9e:b4:06:
e4:cc:22:7b:62:de:47:23:f0:52:45:0e:6a:cb:d9:
6a:5f:7f:c5:d2:ff:df:31:fc:85:81:08:01:b9:32:
87:49:0b:1d:a1:3f:99:54:4d:cd:46:4c:ff:10:ed:
13:b4:9d:77:1d:06:ab:be:2e:21:2a:7f:68:d1:9c:
41:71:e7:7f:8a:0f:6a:27:1f:71:f9:a0:a3:23:f3:
52:21:04:d3:78:24:0a:e4:d8:5b:ce:1f:f0:df:1a:
e2:5a:d2:3c:ba:36:3a:88:c6:9b:3a:3f:d3:e3:7a:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E3:E1:91:7C:46:43:D1:7F:A3:CF:25:CF:8C:C4:21:55:35:07:3E
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:27:0c:2b:45:c0:75:d4:df:76:d4:ce:61:b1:00:82:c7:14:
76:4b:51:97:80:5e:d7:55:92:9f:6d:61:f5:18:b1:15:ad:a0:
5c:29:3e:1a:d8:64:b9:20:fd:62:7a:5c:fa:66:01:3e:98:67:
16:15:89:06:9c:19:73:47:e8:5c:1b:33:b2:1f:40:9a:8e:e8:
e1:6e:12:5f:63:36:4c:fe:28:79:81:2a:ad:ac:86:bf:f2:fc:
2a:f7:a6:fb:24:b5:91:ad:3b:18:c3:b0:c5:e9:ac:cb:95:42:
fe:64:a0:e2:c6:4d:5c:7b:f1:75:ed:cc:bf:a7:3d:cd:cd:2c:
ba:d3:9b:72:d3:f8:bf:76:00:48:e6:5e:bd:51:91:12:b1:49:
d2:f6:60:e3:73:44:da:c0:cd:94:be:54:2e:e8:22:3d:0d:e1:
85:82:56:c3:70:db:a6:b6:27:af:56:c3:d5:4b:59:20:e5:6e:
2b:e8:5a:f9:39:ca:52:74:c8:4f:96:f9:43:6c:7c:55:48:58:
9f:1f:e0:11:40:3f:ec:4c:1c:61:29:de:fb:10:ea:85:39:7d:
1d:8e:47:d3:8a:44:a8:2d:df:74:0f:89:bf:9b:27:fa:0a:b6:
0a:4e:7c:bb:d0:dd:25:7c:74:dd:9f:6d:d5:fd:07:0b:37:87:
57:d3:4a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:23:54 2025 by rpki-client