Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
File: b027wGlmny5-iCL2OY9rNsRJNFw.mft (raw, json)
Hash identifier: 5gGRTHAz9Ug8vc56T58mnuJEgndrfHopK45UPVpHtr8=
Subject key identifier: 88:94:0C:A4:4B:5A:82:06:ED:EA:D2:CC:28:37:94:68:CD:DB:44:99
Authority key identifier: 6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
Certificate issuer: /CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Certificate serial: 019650B6269B455606DA1686B643D3E59363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
Manifest number: 1308
Signing time: Sun 20 Apr 2025 01:00:36 +0000
Manifest this update: Sun 20 Apr 2025 01:00:36 +0000
Manifest next update: Mon 21 Apr 2025 01:00:36 +0000
Files and hashes: 1: b027wGlmny5-iCL2OY9rNsRJNFw.crl (hash: kSpAWrj/zgFYJivRNSu5d6yr7IplDEoqzbYwSOgFbA8=)
2: iG5MloBb0rNBUXMwGnMdFUHFQBI.roa (hash: /505m7zfXiVDkYV7zSm4uW5ug6R08YZLzHTRAa/aV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:26:9b:45:56:06:da:16:86:b6:43:d3:e5:93:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Validity
Not Before: Apr 20 01:00:36 2025 GMT
Not After : Apr 21 01:00:36 2025 GMT
Subject: CN=88940ca44b5a8206edead2cc28379468cddb4499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:39:6a:ef:80:bb:48:ca:cc:d1:40:92:f9:
59:bc:56:ab:e5:7c:1d:ab:86:24:84:b9:52:8d:7e:
64:16:c2:d4:05:b6:75:70:5f:35:40:86:3c:7e:fa:
6b:9c:41:34:8a:dd:90:16:86:61:7b:98:b5:52:57:
9b:93:7c:51:08:ea:a0:dd:f7:c5:13:1d:43:28:15:
32:5f:87:bc:51:55:5e:e7:e8:fa:c6:56:0d:c4:c6:
73:2f:32:3c:14:18:d9:9f:d8:37:0a:39:e1:1c:75:
52:0b:b4:3f:ab:16:c5:ae:61:23:89:46:ed:f3:89:
e2:9c:fb:4d:d9:70:76:05:0e:57:ba:ed:41:22:8a:
83:b0:cd:5b:d8:a2:7f:a7:71:6a:2a:95:fa:99:af:
2b:a0:e5:21:fe:fb:c6:f3:72:5a:27:01:6c:89:87:
9e:92:5c:0d:13:82:e6:48:24:24:60:46:bc:31:ae:
ef:86:05:7c:3f:dc:44:8e:81:42:71:7f:02:3c:7f:
09:67:fe:21:ee:6b:92:38:bf:35:f4:22:83:f1:f6:
e7:30:73:bf:5a:83:ae:3e:02:ef:ca:46:60:78:25:
f0:a4:79:ed:14:62:c6:43:6a:89:ff:26:1a:8d:23:
96:95:26:54:0e:b0:93:4c:02:5c:8c:80:12:f1:10:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:0C:A4:4B:5A:82:06:ED:EA:D2:CC:28:37:94:68:CD:DB:44:99
X509v3 Authority Key Identifier:
keyid:6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:64:97:ec:90:b4:f5:5b:7d:ab:61:30:f9:e0:5a:4c:e5:0d:
5a:12:db:3d:3f:b1:7c:93:8b:8e:29:1f:09:53:d6:dd:36:e3:
d0:8f:43:0d:5d:ee:a4:a6:cd:5f:af:a6:ad:34:5c:77:ac:26:
8d:f3:04:5a:e9:96:39:bf:8c:cf:30:72:6e:d7:c2:33:16:da:
9e:b2:9f:04:10:95:61:df:49:a7:be:1f:64:1a:38:70:05:9c:
18:22:45:9f:00:80:95:63:65:49:0e:19:37:f3:17:7e:0f:b1:
80:7e:dd:d0:76:4a:80:13:46:18:e6:24:47:8a:97:90:74:19:
ce:a8:fc:7b:25:2d:44:18:34:8d:ff:bc:5c:fc:82:45:fd:72:
67:01:52:04:fb:d2:d6:18:e0:ea:f1:28:3b:12:21:3b:50:4c:
61:92:97:33:4f:ba:c2:ea:0e:85:23:80:8b:14:95:52:bc:40:
b4:e3:94:57:c9:02:61:51:6c:e8:b7:bf:6d:a4:63:11:ac:08:
1a:8f:4d:c5:e5:2c:b7:82:b4:94:12:f1:d0:6d:7a:1c:54:3e:
91:d4:ae:bf:9e:c9:ef:0d:a1:d0:8d:9a:06:38:83:b6:18:b8:
ae:72:dc:26:fe:5a:f4:fd:71:96:18:66:d0:56:65:2f:40:fa:
83:52:ef:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:33 2025 by rpki-client