Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
File: iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json)
Hash identifier: 3VMEsTlIRVNlH4926fpfsaYK2HmisA77ncUwH/nhA0Y=
Subject key identifier: BE:BE:65:2F:E0:B1:AF:26:9F:0B:FC:CD:75:C2:F9:59:4B:C5:0A:98
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial: 01965613DDEB99CFB34328717833847FAC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
Manifest number: 0BA9
Signing time: Mon 21 Apr 2025 02:01:04 +0000
Manifest this update: Mon 21 Apr 2025 02:01:04 +0000
Manifest next update: Tue 22 Apr 2025 02:01:04 +0000
Files and hashes: 1: UubezK0uH4JLqxbhgPEY0N-6nSw.roa (hash: Oagl7z5x1jSe2CWCzxXuth3kqDf2dweMIxQL2+jadVg=)
2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: dIwze6ryp2tSXUO7CD0P08Q/gmgBvwhzJqpbNFCP5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:dd:eb:99:cf:b3:43:28:71:78:33:84:7f:ac:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Validity
Not Before: Apr 21 02:01:04 2025 GMT
Not After : Apr 22 02:01:04 2025 GMT
Subject: CN=bebe652fe0b1af269f0bfccd75c2f9594bc50a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:80:b0:c4:3f:24:dc:fb:66:71:3b:49:af:
a0:83:79:79:aa:c9:74:56:d2:7b:68:cf:9c:90:92:
a7:28:2d:78:e8:35:db:81:aa:dc:74:f6:7f:a9:1d:
01:7d:51:6b:89:29:4f:31:e2:30:f6:2d:e4:80:a7:
1d:be:d3:43:45:d2:7d:16:ad:bd:40:a2:db:89:d1:
3d:f6:4c:4d:09:70:f8:14:f3:ef:1c:5f:7c:96:24:
58:e2:94:42:15:94:9f:8c:c0:36:5f:55:e5:9c:79:
e9:85:4f:0a:bb:b2:4e:2b:30:a1:cd:1a:62:4d:bc:
50:7b:7d:b4:c0:aa:11:44:be:5b:0c:fd:c7:01:7b:
02:2c:14:4a:39:19:90:1d:34:57:cc:3c:e1:83:44:
b8:6e:42:9e:db:d1:75:76:4a:97:25:01:d8:cc:cc:
64:8d:d8:22:c6:e9:b5:54:64:70:e2:aa:8e:88:c4:
5a:50:7f:d9:49:9a:83:3b:19:20:f2:0d:05:c3:99:
24:b7:c0:e2:7f:d2:1e:90:26:11:e1:6e:42:b4:d6:
29:25:b0:49:2a:ba:70:54:07:35:87:40:9c:80:94:
45:a0:1c:44:90:28:0b:5c:b2:f4:1f:d9:50:59:73:
dd:e0:57:19:c8:c8:ac:28:03:54:4a:f3:30:11:74:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:65:2F:E0:B1:AF:26:9F:0B:FC:CD:75:C2:F9:59:4B:C5:0A:98
X509v3 Authority Key Identifier:
keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:89:9a:1a:b1:d2:e3:74:47:a5:92:a3:50:59:3b:2d:3d:4f:
6d:21:9e:20:d6:38:23:3c:15:29:d0:90:b5:df:b2:d8:4e:53:
d6:3e:c5:be:12:9c:5f:34:90:b1:6e:d0:8b:19:b8:e1:3f:a5:
17:55:44:eb:30:27:e8:22:95:f8:08:db:4d:75:1a:04:65:b5:
f5:22:46:dd:41:62:a1:a9:6f:17:2d:94:6e:c9:c5:06:31:ce:
d2:a4:87:89:34:54:c4:03:29:1e:25:ad:bd:40:2f:e4:f0:5b:
a0:f0:c5:38:c4:19:23:d9:21:8d:fd:39:df:be:13:66:d4:10:
28:9b:94:df:49:d9:75:6b:1e:68:b5:fb:c3:23:6a:c6:67:6e:
d3:dc:bc:00:9b:09:98:b0:77:b0:7c:03:98:6d:30:01:72:21:
06:64:4b:ff:c5:df:0a:f2:3b:41:68:d1:1f:93:7c:6b:fa:fc:
e3:dd:0c:c6:6b:20:f7:26:1d:2b:7e:f0:85:4b:e4:a4:7a:f2:
10:b9:7a:de:fa:41:47:0f:40:ab:86:46:96:4e:d8:a1:a7:4b:
f8:d4:77:8e:07:74:29:e0:4b:63:e7:a0:54:36:88:9e:13:dc:
6c:43:ad:60:9e:de:ec:22:5a:b7:95:16:3e:ea:4b:b1:ff:fb:
4f:44:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:57 2025 by rpki-client