Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File: RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier: /8b/2eOXbB5vr8IJf8lQJa3fUZ3Jc3G6rGUJ86OuZUU=
Subject key identifier: F7:8B:7B:3A:C2:91:7E:09:CD:28:2A:3C:5C:59:2E:F7:05:A1:23:C7
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer: /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial: 019659151AAD9A2FB239EAF39C18066BC3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 16:01:17 +0000
Manifest this update: Mon 21 Apr 2025 16:01:17 +0000
Manifest next update: Tue 22 Apr 2025 16:01:17 +0000
Files and hashes: 1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: zWm7XbkkozK36SimK+/pKtUxzxrdvSD/ZErGuJKUgK4=)
2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:1a:ad:9a:2f:b2:39:ea:f3:9c:18:06:6b:c3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
Validity
Not Before: Apr 21 16:01:17 2025 GMT
Not After : Apr 22 16:01:17 2025 GMT
Subject: CN=f78b7b3ac2917e09cd282a3c5c592ef705a123c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:98:ef:f5:6b:fe:3f:90:c3:98:f7:cf:86:
22:6f:b0:15:44:a6:6c:31:7f:3f:64:f8:6b:ca:a8:
2e:eb:e4:1e:1b:d7:f4:8b:71:36:59:86:f6:04:a5:
1a:30:a1:af:60:2e:71:80:c1:b4:28:8e:25:8e:9c:
df:b4:89:80:ad:88:b2:bf:4f:c9:7f:67:11:9d:37:
98:eb:05:47:94:65:40:4d:3b:5f:e2:0e:89:15:fb:
65:b4:48:d2:48:83:6c:5a:31:ce:74:b7:87:bc:ca:
17:07:98:d8:e6:0f:cd:17:39:db:b3:fc:cc:ea:02:
a0:9f:74:03:4a:4c:c9:bd:40:f5:b9:66:90:e9:26:
cf:a1:63:aa:6c:0c:5c:04:67:75:bb:fd:c2:7d:b5:
87:87:8e:42:30:9a:8d:00:80:fc:3b:0f:1b:ac:31:
8e:0c:97:d5:d9:19:5d:7a:58:fe:e4:fb:38:ed:49:
b8:f3:ba:7a:90:18:e0:fd:60:68:c7:13:a2:07:73:
d8:13:08:33:f4:7a:b4:24:a9:f8:dc:7f:dc:a9:b5:
32:61:f0:19:f1:03:fc:3d:ce:af:aa:bb:ac:fd:5e:
88:23:7f:8a:13:c8:d3:79:06:d3:67:fc:9d:20:87:
2f:47:13:7f:50:9e:8d:17:5c:66:9e:d4:ca:37:a8:
a4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8B:7B:3A:C2:91:7E:09:CD:28:2A:3C:5C:59:2E:F7:05:A1:23:C7
X509v3 Authority Key Identifier:
keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3d:6e:e2:1b:62:a8:b8:60:c1:cb:6e:98:b8:15:17:a4:8b:
6d:65:15:31:4f:22:55:4a:ce:cf:72:cf:a5:74:a6:5d:5d:e0:
b6:f7:7e:cb:aa:f4:75:62:95:2e:78:a3:b6:89:c4:40:20:f7:
86:b8:38:2d:68:61:20:4b:dc:71:b8:a5:a5:d3:29:cc:93:12:
36:1c:c4:a8:bf:54:07:2d:1f:9e:f3:7a:ba:e0:17:c6:a6:23:
b6:0f:57:b9:b3:6d:54:27:78:39:b3:a5:e9:37:96:e4:6b:a0:
0c:97:fc:16:5b:93:ac:8f:14:67:68:e6:23:49:39:cf:5a:95:
33:fc:d3:67:6f:00:86:42:81:fa:18:65:7b:02:aa:4b:71:e4:
2a:22:24:ee:2f:b4:ed:ad:94:31:0d:d6:a6:0f:76:1c:c7:13:
ef:2f:d3:88:03:c6:48:47:c9:8b:15:61:a4:f3:ef:84:79:e4:
0d:76:f3:81:91:d4:54:c7:a3:62:da:fc:77:df:ce:f1:7e:9c:
50:fc:4f:03:df:ee:53:dd:c9:96:03:76:cf:cb:82:50:7c:4c:
67:ed:59:44:b3:1b:95:d3:39:39:97:0a:56:00:ff:72:3e:f4:
c8:49:c7:00:bb:01:33:6e:bf:fc:52:d5:63:f8:05:2f:e4:df:
13:fa:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:18 2025 by rpki-client