Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: YBvWDUbDxAbL1WyukGdCWiMF8/PWUx2YR8j+UZG3P40=
Subject key identifier: 50:BB:EC:5D:05:52:C4:84:C8:2A:BD:95:11:C7:78:95:8F:A4:C0:F4
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 019658A67F54D7F738C5256D79CD6E52F7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 14:00:28 +0000
Manifest this update: Mon 21 Apr 2025 14:00:28 +0000
Manifest next update: Tue 22 Apr 2025 14:00:28 +0000
Files and hashes: 1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=)
2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: QagNJMmW0iXDbfBdeZNZZDd9qPTglYCQlb9AcCraAJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:7f:54:d7:f7:38:c5:25:6d:79:cd:6e:52:f7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Apr 21 14:00:28 2025 GMT
Not After : Apr 22 14:00:28 2025 GMT
Subject: CN=50bbec5d0552c484c82abd9511c778958fa4c0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:04:5f:a2:58:38:60:07:62:2a:25:ec:98:c2:
dd:12:34:47:12:b3:21:f3:3b:eb:1d:10:e2:ce:9a:
51:9b:a0:9a:9d:01:cf:a4:80:89:6f:aa:87:9b:72:
3b:89:49:ea:fb:e3:73:f9:53:cd:99:24:20:e5:7e:
bf:8a:2c:df:c0:92:33:e4:89:64:4c:98:61:7e:5e:
83:7c:80:25:05:76:cf:bb:28:30:e4:ef:8d:18:e3:
71:ce:a3:57:eb:ff:62:d9:45:c0:09:14:15:43:e8:
a4:44:80:37:fb:90:6f:cc:a0:e6:da:9c:e6:dd:53:
13:46:1e:67:5f:dd:cb:05:41:23:4b:00:65:ac:34:
e2:56:18:0b:3a:fa:fd:c8:f5:78:74:7c:a1:64:d0:
33:4e:82:28:15:11:a7:92:0d:40:30:02:04:77:5e:
9d:e4:2a:67:62:1c:49:d5:6b:6b:f5:c2:4b:85:c5:
d8:62:05:55:38:1c:71:b6:77:da:ef:9a:f2:b9:a7:
9d:82:75:b1:58:b3:ae:c8:54:0c:ca:d8:4d:3c:e5:
1a:dd:96:96:6c:a5:19:fb:49:7a:ff:d2:9a:27:5c:
0a:04:4c:67:b4:b4:13:1a:7f:d5:26:11:92:47:b8:
1d:1a:04:b9:1a:b8:84:bf:9f:5d:62:c8:97:31:3c:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BB:EC:5D:05:52:C4:84:C8:2A:BD:95:11:C7:78:95:8F:A4:C0:F4
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:56:b2:a4:44:08:e1:d7:e5:12:4b:99:bc:8c:48:74:68:21:
50:08:3e:98:7f:a8:d0:9c:70:8a:b4:2f:5f:1f:ee:68:b9:1a:
14:cd:fd:26:f6:82:e5:99:f4:61:a1:40:cf:6f:da:26:40:ce:
91:f6:2e:15:aa:a0:87:b7:45:a8:27:f9:5e:72:53:2b:0e:a9:
10:ba:33:d0:55:d1:be:c4:0e:44:b6:f9:60:09:02:6a:b3:5d:
5c:ca:ef:98:5b:2c:cc:27:59:5f:d5:0f:73:12:c3:ea:16:42:
03:88:47:9e:80:2f:b2:5b:f9:18:0a:a5:8e:7f:53:cf:c6:6b:
fb:25:df:f3:96:b6:aa:9b:2f:3c:69:c9:c1:f9:9b:d2:f3:aa:
74:81:89:f5:f1:64:e7:35:72:90:27:74:94:8b:3d:93:e8:e7:
f6:d5:11:2a:23:86:1a:78:87:f4:62:30:f8:ba:08:d9:4f:71:
46:ca:3d:4f:26:e4:16:cd:7f:e2:d7:49:74:7f:82:dd:a5:a2:
4f:48:0a:19:49:a5:eb:31:2f:8b:bb:0a:bf:d2:ce:c0:4c:36:
85:7e:33:2f:d3:d5:c0:80:13:3a:f6:55:89:a8:c1:35:8f:30:
0c:68:c2:f1:38:1a:00:29:fd:31:6a:8e:58:d9:25:54:f9:47:
04:f0:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:22 2025 by rpki-client