Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
File: adSSvj_PjMWoWckEjFD9QL_bd4c.mft (raw, json)
Hash identifier: TZk3wF21ttrXdKkmfrp7JpFAkTe6wiAWTmBP8C/5Uyc=
Subject key identifier: F5:75:38:5E:42:5C:06:52:7D:FF:06:7C:26:B3:B0:BC:BF:A7:EA:B2
Authority key identifier: 69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
Certificate issuer: /CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
Certificate serial: 01965500CD7A0AC2947CE72C499ACD00E401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
Manifest number: 01EF
Signing time: Sun 20 Apr 2025 21:00:37 +0000
Manifest this update: Sun 20 Apr 2025 21:00:37 +0000
Manifest next update: Mon 21 Apr 2025 21:00:37 +0000
Files and hashes: 1: adSSvj_PjMWoWckEjFD9QL_bd4c.crl (hash: lfDPJcbR7EI7bZ7zjACuc5Lx5xutm/SeHCiupOW4fIA=)
2: rvjv-klu4UPy3RgCuDK0uwY_4pQ.roa (hash: VpYiP9YZqNvc2RLGse05pZkEy6ixiDuEG/Kk/ZGHkkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:cd:7a:0a:c2:94:7c:e7:2c:49:9a:cd:00:e4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
Validity
Not Before: Apr 20 21:00:37 2025 GMT
Not After : Apr 21 21:00:37 2025 GMT
Subject: CN=f575385e425c06527dff067c26b3b0bcbfa7eab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:1e:8b:f2:fc:e9:0a:1f:45:3d:8f:c3:cf:
3e:f9:71:7d:b2:5c:79:0d:fd:83:33:82:29:95:40:
0d:ad:51:3e:e1:8f:09:a2:42:2f:2b:e4:a9:3b:cd:
49:a0:17:7d:1f:ae:f7:76:80:6b:7c:9b:c8:0a:28:
77:14:4a:8f:b6:9b:04:04:b3:61:ff:ba:52:e2:ee:
54:af:d5:99:e7:f5:7d:d5:f7:b7:c9:ca:97:10:9d:
bc:b4:a6:f4:5c:01:c5:c6:cc:85:3c:2a:56:ce:55:
02:05:c5:6c:18:15:7e:d7:72:70:99:08:d5:13:f8:
75:ec:f4:26:db:6b:a0:a1:b4:ee:f3:16:96:0d:48:
0a:ca:0d:76:ba:ba:81:5f:a3:50:99:15:28:05:1e:
a2:db:4e:ad:9a:55:aa:94:b4:e8:58:b4:20:0d:a8:
55:14:eb:c6:15:47:64:0f:96:f6:61:17:a1:8c:fc:
58:c4:e2:46:86:3c:a9:8d:5d:fe:87:b7:c9:df:04:
93:2f:d3:8a:63:01:cf:93:99:d0:d5:4b:3c:bc:77:
d6:40:da:02:e9:44:79:db:0b:c8:82:9c:c2:08:a0:
3a:78:29:6f:0d:17:3d:ea:46:5a:ad:ea:87:9d:68:
b5:c3:16:e6:36:65:ce:b7:aa:5b:ad:65:62:e1:c0:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:75:38:5E:42:5C:06:52:7D:FF:06:7C:26:B3:B0:BC:BF:A7:EA:B2
X509v3 Authority Key Identifier:
keyid:69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5e:c4:c9:a2:82:96:af:97:75:c0:69:88:7a:dc:d3:3c:75:
4e:a9:61:a2:5e:42:4a:12:73:ae:74:7f:31:b7:e0:c1:80:1b:
f1:56:30:a3:06:90:d8:4e:12:b9:5e:98:c8:b9:8c:ce:2d:99:
29:b3:a0:a2:f9:9f:5d:4f:fb:2d:33:1a:fd:bd:bf:e5:a4:be:
34:75:35:e4:a5:47:c0:dd:96:3b:84:b8:b3:69:4f:9a:46:2f:
cc:43:55:0f:28:9a:b1:a7:e2:8d:90:b5:cc:03:c1:e0:6b:bd:
18:c8:af:29:ad:d0:9c:b7:13:22:b2:c1:dd:ca:66:97:f6:08:
9a:be:d1:88:4d:0e:b3:11:b7:fc:ec:6c:01:e2:a8:3b:55:70:
ac:2a:22:59:49:ab:90:37:a8:0d:a5:0a:1d:b9:d9:a1:72:fb:
d4:a2:20:6b:a7:81:54:34:55:d9:37:cc:2e:c6:5a:b3:fe:79:
6a:25:43:10:30:a1:40:36:50:e1:d3:c4:5b:63:8f:39:dd:0c:
0a:50:b9:3c:59:a8:61:2f:26:35:70:05:91:cc:83:69:14:ec:
ca:f6:13:6e:df:b7:36:71:28:47:4f:68:92:30:6d:0c:6b:7c:
1a:14:f2:1a:85:f5:0f:2e:15:b0:e3:f3:17:7b:83:b9:b7:56:
b6:de:13:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:01:17 2025 by rpki-client